Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa
File: 4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa (raw, json)
Hash identifier: gmmvZ4kv5G8/nDWnHozolqVwbEIVkGaSQ9wqwlKxhk8=
Subject key identifier: E0:EB:F4:24:8F:EF:EE:D3:FA:01:52:BF:CC:D6:6F:7E:FA:18:CC:A7
Certificate issuer: /CN=f3c97bea6c283625ac99b264243e8ad6235465ca
Certificate serial: 019F2368ED256C8301DE148DD6EF1DBB8637
Authority key identifier: F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197107
IP address blocks: 178.20.192.0/24 maxlen: 24
178.20.193.0/24 maxlen: 24
178.20.194.0/24 maxlen: 24
178.20.195.0/24 maxlen: 24
178.20.196.0/24 maxlen: 24
178.20.197.0/24 maxlen: 24
178.20.198.0/24 maxlen: 24
178.20.199.0/24 maxlen: 24
185.58.88.0/24 maxlen: 24
185.58.89.0/24 maxlen: 24
185.58.90.0/24 maxlen: 24
185.58.91.0/24 maxlen: 24
195.225.64.0/24 maxlen: 24
195.225.65.0/24 maxlen: 24
195.225.66.0/24 maxlen: 24
195.225.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ed:25:6c:83:01:de:14:8d:d6:ef:1d:bb:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c97bea6c283625ac99b264243e8ad6235465ca
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0ebf4248fefeed3fa0152bfccd66f7efa18cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c1:5f:0a:98:49:f7:7a:f7:0b:f9:44:4d:f8:
78:46:37:bb:f9:4a:23:9f:5c:78:19:d8:2b:55:e6:
93:79:95:61:5f:e6:c5:a1:de:c9:96:fa:bd:94:88:
42:cc:1d:ea:5a:17:19:b0:f8:81:1e:f2:b9:79:e9:
ba:26:44:28:47:cb:c3:85:0a:2d:7b:c0:af:09:0f:
16:ea:16:95:d5:d8:dd:70:3d:22:e5:df:ea:0a:f6:
40:44:bb:73:00:b5:3b:7d:0c:5f:8d:04:2c:e3:d8:
a6:a0:3b:23:57:2d:c9:f2:ed:1b:e6:eb:ad:ec:90:
5e:ca:d5:4e:88:67:f7:bf:ca:2e:d8:16:92:e4:34:
e1:2d:38:f6:f2:5f:c3:c3:49:4c:2a:9e:f7:df:6d:
6c:89:53:15:23:ec:c6:dd:2e:67:cb:52:86:eb:e3:
fc:38:15:cf:b4:36:90:8c:ae:b5:94:84:8a:4b:b7:
1d:e7:ce:0a:0c:25:e4:02:a1:2c:79:05:1a:5f:28:
cc:e4:ef:25:2b:e6:36:42:aa:b5:a6:ef:8b:f0:5a:
07:4b:73:b1:2f:3e:bb:f0:c0:38:a7:84:44:5f:8d:
3e:fb:20:61:55:bf:59:d2:6c:c4:a5:bc:93:ba:49:
7d:fd:fa:be:56:19:33:53:16:39:46:ba:45:95:14:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EB:F4:24:8F:EF:EE:D3:FA:01:52:BF:CC:D6:6F:7E:FA:18:CC:A7
X509v3 Authority Key Identifier:
keyid:F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.192.0/21
185.58.88.0/22
195.225.64.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c1:e0:ed:cd:2e:6b:c4:43:7a:60:27:b2:44:a6:34:ac:24:
75:0e:f8:6f:f9:13:5f:8e:13:20:14:4e:47:13:d7:53:21:14:
4f:6c:fc:bb:cf:61:09:94:6b:36:15:fb:9b:19:a6:7b:94:c1:
29:fa:42:a5:c3:8c:87:c8:41:f0:33:5c:cd:37:83:b9:62:c3:
a2:4f:be:e9:2e:e8:2a:a6:c9:20:cb:66:5b:25:3a:68:d2:d9:
b7:c3:d6:a2:fa:35:d5:da:57:25:b8:51:ae:2e:21:3f:dd:b7:
c2:88:34:37:e2:3b:f8:29:36:ae:67:ca:30:f8:de:00:6c:56:
19:53:e7:00:74:34:17:f4:83:5a:36:8e:0e:a2:43:03:82:31:
0d:9c:8e:a2:73:41:f7:66:ec:de:cf:6c:15:21:cf:fd:bf:08:
3f:34:12:6e:48:5c:ac:9a:e6:e3:bf:32:1d:c6:90:07:dd:60:
ed:99:96:29:24:e7:8b:8e:d1:09:18:b6:7a:38:f8:ea:d3:b2:
c6:e0:4b:62:89:de:3c:e3:7d:a4:78:b7:ad:41:60:03:90:0c:
9e:2c:6d:56:3c:55:a9:40:12:ad:35:ca:62:08:79:6c:1c:2f:
1f:99:ea:92:31:85:2f:e4:c5:43:ca:da:a4:e5:91:2d:94:ee:
ea:78:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:21 2026 by rpki-client