Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/1-tpDDyKo43VM9BSCjomtalPcE1M.roa
File: 1-tpDDyKo43VM9BSCjomtalPcE1M.roa (raw, json)
Hash identifier: w0hJqQXowAz+i3JwzCOx0V3WbbzbkPBGaFg5QCTJ2F4=
Subject key identifier: FA:DA:43:0F:22:A8:E3:75:4C:F4:14:82:8E:89:AD:6A:53:DC:13:53
Certificate issuer: /CN=06fc05aceda48c7ada7fafada231be86a48162b7
Certificate serial: 019F23686788F927FD07E2674BA10DE6CB84
Authority key identifier: 06:FC:05:AC:ED:A4:8C:7A:DA:7F:AF:AD:A2:31:BE:86:A4:81:62:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/1-tpDDyKo43VM9BSCjomtalPcE1M.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50572
IP address blocks: 37.49.240.0/20 maxlen: 20
91.211.168.0/24 maxlen: 24
91.211.169.0/24 maxlen: 24
91.211.170.0/23 maxlen: 23
109.205.216.0/21 maxlen: 21
185.5.20.0/22 maxlen: 22
2a02:1380::/32 maxlen: 32
2a02:1381::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:88:f9:27:fd:07:e2:67:4b:a1:0d:e6:cb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06fc05aceda48c7ada7fafada231be86a48162b7
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fada430f22a8e3754cf414828e89ad6a53dc1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:9a:d7:4b:f9:51:c6:7a:52:f6:ab:8e:01:
29:0c:1e:b7:04:dd:e5:31:d9:38:59:33:8c:21:5f:
e4:eb:f8:59:33:d3:06:8a:ed:db:14:77:44:2f:d4:
59:cf:c3:73:a7:21:59:aa:05:b3:64:14:43:94:b9:
92:b6:1f:60:38:dc:f2:11:ce:32:15:68:6a:ce:6d:
6f:77:4f:2d:1f:39:73:33:62:70:c7:d4:1f:d4:d1:
0a:73:6b:d2:53:9e:70:99:6a:2f:a8:ff:63:86:e4:
49:2a:98:d4:8d:d1:97:cd:f5:16:01:b1:7a:3b:0c:
2e:37:dc:c4:fe:00:ea:10:72:6a:c4:bd:73:f5:c2:
2e:8a:3b:83:15:b0:a3:c5:ed:99:07:0b:38:8f:2c:
87:ae:4a:d6:a0:e3:45:9b:79:ac:32:4f:3a:e9:1c:
de:91:e7:66:8b:af:24:ea:96:f6:43:2c:24:1c:e7:
5c:b1:af:91:c9:96:ca:62:96:c2:d1:9d:14:26:50:
54:c9:3b:ad:a9:cf:41:b4:29:2b:40:ce:7d:06:69:
06:13:1d:4c:99:e5:a9:b1:00:8f:56:fc:a2:3d:1b:
3a:19:b9:ee:dd:e9:03:3b:9c:9f:8d:b2:66:cc:74:
a8:b7:45:e3:6f:d5:4d:a3:99:ae:ff:39:21:c4:35:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:43:0F:22:A8:E3:75:4C:F4:14:82:8E:89:AD:6A:53:DC:13:53
X509v3 Authority Key Identifier:
keyid:06:FC:05:AC:ED:A4:8C:7A:DA:7F:AF:AD:A2:31:BE:86:A4:81:62:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvwFrO2kjHraf6-tojG-hqSBYrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/1-tpDDyKo43VM9BSCjomtalPcE1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/BvwFrO2kjHraf6-tojG-hqSBYrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.240.0/20
91.211.168.0/22
109.205.216.0/21
185.5.20.0/22
IPv6:
2a02:1380::/31
Signature Algorithm: sha256WithRSAEncryption
95:44:5e:73:6e:81:8c:94:1a:f8:e4:82:0b:20:83:3a:c1:7a:
d2:30:c9:35:8c:4d:fd:30:ea:29:cf:8d:9e:c5:10:e3:bf:95:
a2:7c:07:29:3a:21:ad:84:2c:ca:b0:c2:4d:46:5c:a4:d0:6d:
3b:74:af:1f:d2:5a:39:5f:ce:2b:84:60:44:8a:d7:1e:b1:8b:
08:be:88:5d:08:fe:48:9d:3a:f6:cb:a6:d6:2c:df:1f:d2:4f:
ac:18:22:77:ff:15:37:07:91:b4:dc:72:27:c7:f2:21:46:95:
79:c7:13:76:3e:75:49:3a:af:29:e5:1d:c1:7b:17:99:b2:c7:
77:ab:e2:16:68:ec:cc:33:f9:51:b3:62:f4:ee:02:82:7c:59:
26:61:43:93:93:fd:34:fc:c2:e8:f8:7a:c3:d8:46:ea:d9:a0:
c4:ed:8b:dd:71:e5:35:fe:3d:3a:ce:02:f8:d3:26:12:de:c2:
ca:a5:c1:5f:b0:b7:38:9e:98:0b:31:f7:bb:3a:b8:ae:e1:91:
3c:22:a7:d6:aa:30:80:43:53:28:57:5b:30:ba:69:d2:44:f9:
d7:cd:c7:d7:c7:82:72:2b:18:70:56:1b:d3:57:1f:db:e3:9d:
e0:8d:e1:2e:b6:e1:7c:42:73:ba:8a:79:20:4c:40:25:40:37:
5f:36:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:03 2026 by rpki-client