Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/1f3chHH8Vzxj3ocJFNDQRkHByxM.roa
File: 1f3chHH8Vzxj3ocJFNDQRkHByxM.roa (raw, json)
Hash identifier: Yj5a6Anj2XGpmwiiCO9eJxIVZQ77+YUsqu5JfZN+lyo=
Subject key identifier: D5:FD:DC:84:71:FC:57:3C:63:DE:87:09:14:D0:D0:46:41:C1:CB:13
Certificate issuer: /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial: 019F23688FFA703811EBEB199967CADC77BA
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/1f3chHH8Vzxj3ocJFNDQRkHByxM.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206431
IP address blocks: 5.83.39.0/24 maxlen: 24
5.83.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:fa:70:38:11:eb:eb:19:99:67:ca:dc:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5fddc8471fc573c63de870914d0d04641c1cb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:bc:45:8a:e2:bc:39:e6:d1:76:6c:c6:60:
84:78:49:d1:68:8a:3a:89:2d:12:c3:8d:78:a5:6f:
35:8b:10:f9:78:2b:a4:9e:cd:27:dc:c3:f0:7e:1b:
88:03:43:f4:46:75:8b:85:08:12:1a:25:9c:8e:94:
f2:dc:cb:32:03:8b:12:01:aa:92:9f:fc:80:34:dd:
54:fe:81:9e:60:4c:9d:00:59:29:89:a1:ea:f3:fe:
29:2a:3d:cf:49:e9:9e:9c:ca:77:43:2b:74:53:a6:
29:44:4d:b5:06:9c:76:fd:d5:fc:b2:29:96:3b:da:
01:b0:2a:1e:78:71:cd:f1:6d:ff:c9:c1:f9:bd:dd:
3e:49:98:8a:ff:50:25:67:43:50:c4:42:60:6f:0f:
bf:b4:5a:5b:10:0e:29:8f:f7:e5:c0:0e:7e:a3:77:
5d:a6:89:22:6b:39:d4:dc:a2:7e:e0:8f:75:c3:1c:
b9:25:be:0c:bf:9f:31:8d:d8:7a:c2:8d:72:7d:30:
e3:c3:6c:df:ad:2a:d1:e6:d0:b7:3f:45:a9:4e:3e:
37:a4:4b:ca:29:ed:27:1d:7c:ed:b2:c7:d8:ed:9d:
fe:ca:07:f7:4f:88:eb:cc:6d:0d:5b:f3:78:d7:71:
67:0b:cf:99:14:73:0b:f4:da:c2:42:69:7f:43:b3:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:DC:84:71:FC:57:3C:63:DE:87:09:14:D0:D0:46:41:C1:CB:13
X509v3 Authority Key Identifier:
keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/1f3chHH8Vzxj3ocJFNDQRkHByxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.39.0/24
5.83.41.0/24
Signature Algorithm: sha256WithRSAEncryption
77:99:c8:8d:7a:f0:32:9d:85:d4:1e:7b:d7:2a:c2:11:69:0b:
20:64:89:e4:1a:e9:cd:10:08:6c:11:a3:5b:02:97:69:9c:9e:
70:db:14:2d:e4:80:2a:eb:4e:31:1a:2a:ac:7c:78:60:b3:e2:
fe:86:98:64:41:1f:85:fb:03:e4:ab:1c:88:06:80:7e:3a:22:
56:17:28:cf:24:88:be:cc:f3:98:09:a8:58:ad:e4:9a:5d:82:
03:33:d9:51:6a:28:1b:93:2c:26:93:62:c7:10:67:25:b7:73:
99:25:57:6c:80:cf:2a:90:63:9c:8f:7a:57:f8:d9:43:c0:7e:
09:0b:11:da:74:74:84:2e:53:04:2d:22:93:4a:de:19:b8:49:
ed:c3:1c:ee:8e:e8:13:a5:20:b7:4a:9f:37:d5:1e:f2:79:55:
bf:bf:ab:56:71:26:79:5c:bd:eb:27:95:56:2a:e0:fc:2d:51:
e9:89:15:a3:2e:4b:a9:05:ac:fd:fe:22:f5:d4:b8:33:15:7d:
6c:8b:45:83:17:fc:af:49:09:5c:63:6d:72:c9:a6:e9:30:2a:
c7:59:e9:3f:d1:5c:3b:31:bb:83:75:13:0d:0d:9d:6d:cd:e0:
61:69:25:15:60:0f:ea:ea:73:d0:35:48:92:4b:b6:77:03:9a:
1c:0d:ba:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:16:06 2026 by rpki-client