Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/819ZR9KVO91tmpseG6p_Wkxx16A.roa
File: 819ZR9KVO91tmpseG6p_Wkxx16A.roa (raw, json)
Hash identifier: Y24UxjmhJUCX7UlHes+bkMtn3nRzXvKbiW6iHW6enbc=
Subject key identifier: F3:5F:59:47:D2:95:3B:DD:6D:9A:9B:1E:1B:AA:7F:5A:4C:71:D7:A0
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 019F84E602578EFA78338C1B4D33F8CDD0AC
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/819ZR9KVO91tmpseG6p_Wkxx16A.roa
Signing time: Tue 21 Jul 2026 13:38:14 +0000
ROA not before: Tue 21 Jul 2026 13:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 195.93.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:e6:02:57:8e:fa:78:33:8c:1b:4d:33:f8:cd:d0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Jul 21 13:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f35f5947d2953bdd6d9a9b1e1baa7f5a4c71d7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:aa:c7:e3:b4:42:76:4a:a9:67:fd:2f:49:
c6:5e:92:b1:e9:26:b3:63:82:2d:20:c6:95:6a:6e:
9c:16:34:d2:5b:ad:f4:1c:c9:f7:23:ee:b0:f2:44:
5f:9f:3e:1b:fb:c1:cf:80:3c:38:37:55:4d:5b:9b:
0a:3e:36:de:44:2f:da:74:fd:43:02:ce:66:b3:2f:
24:1c:68:c2:d7:52:bc:b1:20:cc:01:c6:8d:0e:43:
57:57:f3:b1:f5:89:e7:f7:c9:c7:aa:40:34:16:5b:
4b:7b:b8:c0:db:f1:e1:a6:e0:d1:fa:e9:2b:20:02:
e6:88:cc:99:f2:dc:af:6b:8b:68:30:6d:8e:bb:3f:
66:0b:d6:25:5e:f5:36:ab:ec:19:f0:f9:73:3c:32:
b1:f2:bb:b4:0a:8a:07:67:56:50:38:93:84:ec:79:
9a:f3:0b:84:51:45:61:36:a8:8b:09:1d:32:f7:b9:
ae:cb:df:76:b6:2e:a8:41:e7:92:a6:66:e2:b7:92:
e3:f1:ce:5d:91:b8:76:92:85:02:e2:44:18:d6:05:
17:f5:36:06:b0:c4:d6:1d:71:83:fa:8f:72:b3:c2:
5c:f2:7c:80:fe:26:ed:36:35:4a:54:af:1f:bf:c3:
b5:b7:68:d5:68:80:27:52:24:ef:49:6d:65:b2:83:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:59:47:D2:95:3B:DD:6D:9A:9B:1E:1B:AA:7F:5A:4C:71:D7:A0
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/819ZR9KVO91tmpseG6p_Wkxx16A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.245.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ea:dc:3d:0b:ab:e6:71:53:8b:74:56:44:88:69:3d:a9:c5:
c9:0c:c9:25:a3:cb:7c:b5:dc:9c:8f:85:9f:12:3c:03:d4:b8:
86:04:82:9e:3b:e4:44:86:aa:f9:c1:62:f4:4d:01:b5:d8:b9:
29:ab:43:52:3f:a2:0c:46:3e:0b:a3:5e:bf:e9:07:de:72:93:
45:5b:1c:e1:5f:f0:f1:21:99:e0:db:13:af:1b:06:f4:cb:40:
0b:25:49:13:23:cc:36:4c:a7:d0:7c:3c:59:5b:fb:c9:d9:85:
aa:8f:d1:f8:c5:3b:e5:c6:08:7d:e1:f5:39:32:20:ce:44:d1:
63:c8:29:df:be:5a:39:b8:5a:44:2c:33:30:09:67:ee:3c:dd:
27:56:38:fc:50:ba:36:87:32:df:30:4c:9c:b1:c6:4e:5e:30:
cc:e9:75:5b:74:38:43:9c:fe:71:cb:c0:98:84:69:03:ca:da:
23:3d:cc:3c:0d:b1:1f:7c:ee:b7:64:bb:d4:2b:0e:d2:72:c5:
74:8f:42:ac:f9:a8:aa:29:df:66:df:82:e4:59:8a:5f:5f:ee:
a6:56:0d:f8:f9:58:90:66:46:b7:cc:7a:74:d2:5e:e6:05:e1:
34:e0:41:1f:f1:ef:53:c7:16:28:20:91:ab:e5:6f:a2:7e:b9:
8f:44:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:24 2026 by rpki-client