Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/fcJRAvhE3GJ9JzGChcUs2vcrezw.roa
File: fcJRAvhE3GJ9JzGChcUs2vcrezw.roa (raw, json)
Hash identifier: IUgxFKpPcgKwv0m19KbyxHATCx8pJEqt3FiR48y3FC8=
Subject key identifier: 7D:C2:51:02:F8:44:DC:62:7D:27:31:82:85:C5:2C:DA:F7:2B:7B:3C
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 019F474E54A83CF1A1EE0FD867B2922551A6
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/fcJRAvhE3GJ9JzGChcUs2vcrezw.roa
Signing time: Thu 09 Jul 2026 14:35:43 +0000
ROA not before: Thu 09 Jul 2026 14:35:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203682
IP address blocks: 165.217.160.0/24 maxlen: 24
165.217.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:4e:54:a8:3c:f1:a1:ee:0f:d8:67:b2:92:25:51:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jul 9 14:35:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dc25102f844dc627d27318285c52cdaf72b7b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:8b:1d:58:83:ea:60:f7:2d:fb:43:3a:14:
e2:d2:df:da:06:41:17:90:7b:29:4c:68:fc:f1:23:
6b:14:87:29:cb:aa:e9:43:d4:09:ad:20:21:bd:20:
87:20:f8:d4:4e:39:27:1e:1c:af:d9:d2:73:49:35:
fc:b7:80:a4:90:2e:57:a7:75:a7:a8:4b:a7:2f:7d:
7d:07:57:f9:c2:49:b4:c9:7c:6e:f2:ca:1f:d6:71:
24:81:c9:99:36:a5:e2:94:c3:5c:ab:12:60:0e:a3:
25:1c:64:64:0d:81:b4:06:04:43:90:97:a4:4a:48:
0f:18:0b:e4:ba:e9:6d:38:6a:e6:92:7c:c6:3c:d7:
b8:37:0b:b1:5e:85:1c:c1:35:c3:c0:d1:52:0e:19:
4f:ff:20:cb:d9:94:be:86:67:a3:46:0e:1e:5a:89:
bb:75:d6:25:b2:af:ac:71:12:7c:cb:42:3c:d5:f3:
66:ec:83:89:ce:8d:e3:cb:7b:10:04:ad:95:57:54:
cf:4a:9e:1b:ef:ea:8f:e5:13:03:b5:2b:3a:b7:f5:
c2:a3:63:44:48:d7:88:44:d3:39:b2:39:02:be:9c:
d2:5a:83:cd:30:af:0f:5d:8b:9c:d8:cb:56:0f:96:
c6:b3:ff:56:de:ac:99:72:ea:3d:d1:be:07:60:33:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C2:51:02:F8:44:DC:62:7D:27:31:82:85:C5:2C:DA:F7:2B:7B:3C
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/fcJRAvhE3GJ9JzGChcUs2vcrezw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.217.160.0/24
165.217.172.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:23:10:78:b1:4b:98:35:e5:2c:60:61:27:e4:1d:4e:66:88:
1d:50:bb:55:6c:50:e9:ae:eb:48:7c:75:49:f0:5e:bf:b6:3d:
86:02:c6:a4:c0:60:22:3b:31:df:b0:8f:25:f8:61:2b:33:fe:
7e:90:fb:36:f0:99:33:21:d4:d0:c8:3f:24:ae:a7:69:32:c2:
e6:b9:bd:5d:53:77:86:5a:2a:e1:6a:a9:09:b0:0b:83:1e:50:
50:02:53:d5:92:9f:3d:c3:b4:b0:54:6a:e8:62:f3:4f:90:9e:
ca:83:f8:05:99:d6:34:01:d8:48:4a:77:1b:24:42:a4:42:ab:
db:db:1f:5d:55:d5:c0:5d:95:3a:ad:a6:97:8f:a0:78:a2:97:
2f:b5:07:82:f1:d0:92:00:fc:45:08:17:16:20:fe:42:a5:13:
b9:c8:af:90:c7:23:e8:0f:41:f2:70:4a:21:1e:de:81:89:31:
09:da:9f:8c:a2:48:e0:da:d1:b9:f7:b3:56:c7:37:0a:39:e0:
9e:98:9f:bd:b4:be:dc:7f:5c:46:81:aa:de:75:97:ed:45:4e:
c4:a0:ff:7d:26:26:df:34:21:81:d1:e6:ff:bc:44:a8:96:1b:
ee:a2:9b:7c:9e:5a:49:46:f9:d0:3b:1a:22:e0:fc:f4:31:bc:
fc:d7:f4:51
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9HTlSoPPGh7g/YZ7KSJVGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjYwNzA5MTQzNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGMyNTEwMmY4NDRkYzYyN2QyNzMxODI4NWM1MmNkYWY3MmI3YjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7CLHViD6mD3LftDOhTi0t/aBkEX
kHspTGj88SNrFIcpy6rpQ9QJrSAhvSCHIPjUTjknHhyv2dJzSTX8t4CkkC5Xp3Wn
qEunL319B1f5wkm0yXxu8sof1nEkgcmZNqXilMNcqxJgDqMlHGRkDYG0BgRDkJek
SkgPGAvkuultOGrmknzGPNe4NwuxXoUcwTXDwNFSDhlP/yDL2ZS+hmejRg4eWom7
ddYlsq+scRJ8y0I81fNm7IOJzo3jy3sQBK2VV1TPSp4b7+qP5RMDtSs6t/XCo2NE
SNeIRNM5sjkCvpzSWoPNMK8PXYuc2MtWD5bGs/9W3qyZcuo90b4HYDNjgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH3CUQL4RNxifScxgoXFLNr3K3s8MB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvZmNKUkF2aEUzR0o5SnpHQ2hjVXMydmNyZXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQApdmgAwQA
pdmsMA0GCSqGSIb3DQEBCwUAA4IBAQA8IxB4sUuYNeUsYGEn5B1OZogdULtVbFDp
rutIfHVJ8F6/tj2GAsakwGAiOzHfsI8l+GErM/5+kPs28JkzIdTQyD8krqdpMsLm
ub1dU3eGWirhaqkJsAuDHlBQAlPVkp89w7SwVGroYvNPkJ7Kg/gFmdY0AdhISncb
JEKkQqvb2x9dVdXAXZU6raaXj6B4opcvtQeC8dCSAPxFCBcWIP5CpRO5yK+QxyPo
D0HycEohHt6BiTEJ2p+Mokjg2tG597NWxzcKOeCemJ+9tL7cf1xGgaredZftRU7E
oP99JibfNCGB0eb/vESolhvuopt8nlpJRvnQOxoi4Pz0Mbz81/RR
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:29 2026 by rpki-client