Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/1-OYpxvXf01l-3v81_JO0GhTw0U8.roa
File: 1-OYpxvXf01l-3v81_JO0GhTw0U8.roa (raw, json)
Hash identifier: maP/DOqBfThrLU296WG85Zf4viQIPPYK5NJmpNuBrGg=
Subject key identifier: F8:E6:29:C6:F5:DF:D3:59:7E:DE:FF:35:FC:93:B4:1A:14:F0:D1:4F
Certificate issuer: /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial: 019F236930722092CAC9935D8332A9735528
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/1-OYpxvXf01l-3v81_JO0GhTw0U8.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52209
IP address blocks: 185.154.190.0/24 maxlen: 24
2a13:1640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:30:72:20:92:ca:c9:93:5d:83:32:a9:73:55:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8e629c6f5dfd3597edeff35fc93b41a14f0d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:89:18:91:5c:b2:e9:0f:5a:9f:a8:6b:08:
5f:b2:9d:46:d1:a0:b6:68:e3:96:33:63:fe:17:e5:
b6:6f:31:37:26:ae:03:5c:ac:46:20:12:47:43:b2:
d6:92:61:6a:7a:45:24:36:16:0d:28:f4:59:a3:14:
58:49:94:d9:61:51:f7:a6:2e:ba:c2:1a:35:94:e8:
59:e1:f6:0c:b1:5f:e2:17:53:e4:a8:a4:2f:13:0d:
74:05:b4:d2:43:b8:39:c4:89:9e:8e:2a:7c:97:e3:
80:0d:11:e1:16:e0:ac:20:48:d5:c4:e7:98:79:23:
ab:09:28:3c:ad:13:78:ab:55:50:99:dd:a3:d2:5f:
3c:b9:e3:28:5c:0f:05:4e:4d:ca:c2:37:f8:7f:43:
ff:3a:79:2a:dd:c4:f3:b3:b0:83:a0:bd:b0:3f:73:
85:b6:27:a8:58:99:8d:dd:1e:12:26:61:ca:82:28:
bc:aa:5f:6e:be:28:47:36:a9:96:38:f9:87:70:62:
ff:d1:ac:f8:32:2a:13:b9:e1:05:e5:c3:5b:06:d7:
14:d2:6a:54:d6:e8:b6:df:ce:42:12:cf:6b:01:e2:
59:5f:c0:5f:5e:2c:7c:05:5f:d1:cc:a7:82:32:2e:
f5:8a:15:4f:89:6a:c4:d3:3b:64:f7:3e:2d:15:75:
1c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:29:C6:F5:DF:D3:59:7E:DE:FF:35:FC:93:B4:1A:14:F0:D1:4F
X509v3 Authority Key Identifier:
keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/1-OYpxvXf01l-3v81_JO0GhTw0U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
IPv6:
2a13:1640::/29
Signature Algorithm: sha256WithRSAEncryption
41:79:8e:0f:68:66:54:05:63:45:c6:67:b7:cd:d2:19:f3:f9:
40:60:10:54:31:49:aa:69:4f:df:26:9c:c9:34:62:25:dc:d4:
3b:61:66:d2:ff:59:a3:a0:40:25:f6:f8:9e:6c:7a:54:c6:c6:
a2:a0:23:98:88:fa:7d:ad:d2:ee:a8:97:6d:27:11:de:a4:bc:
3f:b1:5d:9e:cc:d7:2c:ce:71:ff:d6:9d:f7:9c:f9:1e:21:e5:
b1:fa:10:6f:e8:3b:31:48:31:c7:13:3c:a8:f4:77:5b:00:31:
76:6f:43:dc:8e:07:17:ca:1a:1b:f4:b7:c8:23:cf:e1:86:23:
0e:12:9b:77:4f:c1:5e:d2:76:9b:f3:0b:94:8d:47:31:f6:f5:
99:2f:5f:3e:7d:f6:07:cb:08:bd:75:3e:74:da:54:64:b7:22:
93:38:18:2b:42:6e:44:75:66:71:16:82:be:bc:f3:02:c2:df:
c9:57:54:7c:dd:c4:c4:fe:08:c4:99:dd:85:c5:b4:23:dd:f7:
6b:8d:48:45:bb:45:b6:f3:96:03:4c:1f:75:13:bf:80:41:68:
ab:b1:fa:6e:44:83:f5:b9:21:9c:5f:21:7b:4b:ac:28:b3:91:
cd:0a:5e:ce:cf:9a:cb:ca:62:2e:f7:8b:de:d7:98:b6:f3:ed:
93:2d:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:57 2026 by rpki-client