Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1fcVWlv-qx152QmoD9YOcrUS7Lg.roa
File: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (raw, json)
Hash identifier: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=
Subject key identifier: D5:F7:15:5A:5B:FE:AB:1D:79:D9:09:A8:0F:D6:0E:72:B5:12:EC:B8
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F23685D38ABB18DD6A61B44147306EC03
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1fcVWlv-qx152QmoD9YOcrUS7Lg.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47119
IP address blocks: 79.174.32.0/19 maxlen: 19
79.174.32.0/20 maxlen: 20
79.174.32.0/22 maxlen: 22
79.174.32.0/23 maxlen: 23
79.174.32.0/24 maxlen: 24
79.174.33.0/24 maxlen: 24
79.174.34.0/23 maxlen: 23
79.174.34.0/24 maxlen: 24
79.174.35.0/24 maxlen: 24
79.174.36.0/23 maxlen: 23
79.174.36.0/24 maxlen: 24
79.174.37.0/24 maxlen: 24
79.174.38.0/23 maxlen: 23
79.174.38.0/24 maxlen: 24
79.174.39.0/24 maxlen: 24
79.174.40.0/22 maxlen: 22
79.174.40.0/23 maxlen: 23
79.174.40.0/24 maxlen: 24
79.174.41.0/24 maxlen: 24
79.174.42.0/23 maxlen: 23
79.174.42.0/24 maxlen: 24
79.174.43.0/24 maxlen: 24
79.174.44.0/22 maxlen: 22
79.174.44.0/23 maxlen: 23
79.174.44.0/24 maxlen: 24
79.174.45.0/24 maxlen: 24
79.174.46.0/23 maxlen: 23
79.174.46.0/24 maxlen: 24
79.174.47.0/24 maxlen: 24
79.174.48.0/20 maxlen: 20
79.174.48.0/22 maxlen: 22
79.174.48.0/23 maxlen: 23
79.174.48.0/24 maxlen: 24
79.174.49.0/24 maxlen: 24
79.174.50.0/23 maxlen: 23
79.174.50.0/24 maxlen: 24
79.174.51.0/24 maxlen: 24
79.174.52.0/23 maxlen: 23
79.174.52.0/24 maxlen: 24
79.174.53.0/24 maxlen: 24
79.174.54.0/23 maxlen: 23
79.174.54.0/24 maxlen: 24
79.174.55.0/24 maxlen: 24
79.174.56.0/22 maxlen: 22
79.174.56.0/23 maxlen: 23
79.174.56.0/24 maxlen: 24
79.174.57.0/24 maxlen: 24
79.174.58.0/23 maxlen: 23
79.174.58.0/24 maxlen: 24
79.174.59.0/24 maxlen: 24
79.174.60.0/22 maxlen: 22
79.174.60.0/23 maxlen: 23
79.174.60.0/24 maxlen: 24
79.174.61.0/24 maxlen: 24
79.174.62.0/23 maxlen: 23
79.174.62.0/24 maxlen: 24
79.174.63.0/24 maxlen: 24
136.169.220.0/22 maxlen: 22
136.169.220.0/23 maxlen: 23
136.169.220.0/24 maxlen: 24
136.169.221.0/24 maxlen: 24
136.169.222.0/23 maxlen: 23
136.169.222.0/24 maxlen: 24
136.169.223.0/24 maxlen: 24
188.191.112.0/20 maxlen: 20
188.191.112.0/21 maxlen: 21
188.191.112.0/22 maxlen: 22
188.191.112.0/23 maxlen: 23
188.191.112.0/24 maxlen: 24
188.191.113.0/24 maxlen: 24
188.191.114.0/23 maxlen: 23
188.191.114.0/24 maxlen: 24
188.191.115.0/24 maxlen: 24
188.191.116.0/22 maxlen: 22
188.191.116.0/23 maxlen: 23
188.191.116.0/24 maxlen: 24
188.191.117.0/24 maxlen: 24
188.191.118.0/23 maxlen: 23
188.191.118.0/24 maxlen: 24
188.191.119.0/24 maxlen: 24
188.191.120.0/22 maxlen: 22
188.191.120.0/23 maxlen: 23
188.191.120.0/24 maxlen: 24
188.191.121.0/24 maxlen: 24
188.191.122.0/23 maxlen: 23
188.191.122.0/24 maxlen: 24
188.191.123.0/24 maxlen: 24
188.191.124.0/22 maxlen: 22
188.191.124.0/23 maxlen: 23
188.191.124.0/24 maxlen: 24
188.191.126.0/23 maxlen: 23
188.191.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:38:ab:b1:8d:d6:a6:1b:44:14:73:06:ec:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5f7155a5bfeab1d79d909a80fd60e72b512ecb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:b5:00:55:c8:c0:ca:95:f8:0b:6e:f4:21:
f2:14:3d:fe:33:ee:38:a2:2e:1c:e1:9c:5a:c8:8b:
86:38:9b:de:b2:16:ed:6b:69:d4:cd:22:45:6a:6d:
04:eb:ce:e0:c0:63:69:ad:d0:f3:84:7e:4a:6d:cb:
da:01:e2:61:90:c7:29:29:02:47:0b:ae:25:6d:9b:
06:2b:13:57:71:9c:bc:ef:c2:9b:7b:be:11:4c:81:
62:99:47:1b:5c:1f:60:68:8e:94:36:2c:2f:f8:c4:
62:d1:f4:12:35:8c:39:5a:b6:a0:11:99:93:80:50:
4b:c9:fc:bb:69:76:95:1b:00:de:68:95:2b:5a:dc:
77:cb:2c:1f:45:b6:a7:70:16:47:7a:56:24:f1:a3:
91:4b:7c:3c:45:c4:cc:b6:b1:3f:58:9b:c0:9d:e0:
56:71:4f:10:38:c3:ea:3d:18:99:05:40:f7:ea:e6:
1e:e0:a9:37:9f:d5:af:9e:85:58:1c:e7:b3:f7:21:
07:f8:c6:85:10:38:d9:ac:f1:55:b7:e1:5c:32:31:
59:a5:92:63:89:5c:be:8b:d6:c9:d5:7d:63:a6:3d:
f8:3e:e8:2d:5b:fa:b5:75:93:ac:d8:78:dc:fc:44:
41:29:72:69:78:f0:e0:68:23:34:b9:2e:1b:a2:99:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:15:5A:5B:FE:AB:1D:79:D9:09:A8:0F:D6:0E:72:B5:12:EC:B8
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/1fcVWlv-qx152QmoD9YOcrUS7Lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.32.0/19
136.169.220.0/22
188.191.112.0/20
Signature Algorithm: sha256WithRSAEncryption
17:fd:86:8a:7f:11:48:5c:18:6a:96:05:76:2d:71:ac:c8:0b:
4c:f2:18:09:3f:6a:2a:b1:49:0a:dc:ce:58:37:21:9c:f8:74:
83:67:9a:cf:fa:7c:f2:f7:82:a8:53:8d:64:70:94:ca:3f:95:
bc:8f:39:8e:10:4a:32:3e:02:6e:30:7a:17:fb:14:b5:76:47:
98:25:98:3c:50:a9:61:dd:60:43:30:73:79:04:28:d6:01:19:
19:0f:a3:be:0e:11:e9:6f:6f:bb:b1:45:76:2e:ed:11:52:c3:
c6:aa:e5:14:f1:a0:09:06:cc:db:f9:6d:c4:13:70:28:fc:62:
14:7b:24:60:3c:eb:ed:6c:3d:12:16:b4:58:9b:af:7e:11:66:
30:e1:de:a7:31:31:4c:58:db:0c:38:f2:94:79:cf:e8:ff:a0:
71:c2:c0:86:3d:ff:d7:f3:6a:8f:b9:3a:68:9e:18:9e:ac:38:
7a:8d:4a:cd:0a:92:e6:79:0e:25:d2:ec:8f:bb:b0:33:0c:b9:
fe:f6:9d:0c:04:a8:a1:2a:9c:06:f9:ac:ad:46:b5:c7:9f:9b:
c1:b2:b1:74:9f:33:0d:2e:87:1c:61:35:d5:37:7a:e0:b5:45:
bf:fd:3e:61:a6:5d:da:d1:34:d6:21:e4:b7:f0:9c:7d:9a:c3:
cc:eb:a1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:43 2026 by rpki-client