Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/8cqEcPzxc_PzK1sp9MZggKrHIXM.roa
File: 8cqEcPzxc_PzK1sp9MZggKrHIXM.roa (raw, json)
Hash identifier: 2bDh6A9KX94j4nnow3DzE+oKfC8x75Wre3uUOvc1J10=
Subject key identifier: F1:CA:84:70:FC:F1:73:F3:F3:2B:5B:29:F4:C6:60:80:AA:C7:21:73
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 019F69A286EA53EC15E4FA0ACDB36DD5F35A
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/8cqEcPzxc_PzK1sp9MZggKrHIXM.roa
Signing time: Thu 16 Jul 2026 06:34:46 +0000
ROA not before: Thu 16 Jul 2026 06:34:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51395
IP address blocks: 79.132.141.0/24 maxlen: 32
89.127.196.0/24 maxlen: 24
194.154.29.0/24 maxlen: 24
199.68.196.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:a2:86:ea:53:ec:15:e4:fa:0a:cd:b3:6d:d5:f3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jul 16 06:34:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1ca8470fcf173f3f32b5b29f4c66080aac72173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:3d:0f:0b:81:e3:c1:81:7e:30:94:e2:f8:
9b:4f:5e:58:74:35:0c:d2:1e:be:cc:a4:9b:2f:7e:
25:9b:6b:f8:1b:e5:68:59:ec:fc:f2:42:45:3e:74:
a6:7f:07:dd:36:58:8d:0a:eb:c8:0c:2f:4b:9d:15:
76:13:7d:b9:72:3c:aa:20:af:64:ae:41:ff:af:d9:
ac:c2:fa:4c:c5:ce:c3:0e:be:fc:84:6d:9a:34:50:
b8:9a:a4:99:c4:35:30:66:d4:87:de:ed:c1:16:b4:
8b:4b:08:fb:65:1c:40:b2:d5:aa:07:6a:50:53:47:
4f:a2:a0:61:1c:b3:a3:44:3c:dd:59:de:f7:c3:55:
b2:12:21:b7:39:75:7d:40:64:64:d9:38:c5:4e:98:
d8:42:19:a2:98:bb:89:85:a6:e1:42:b4:a6:06:1d:
81:2d:9f:42:8b:83:f4:7b:81:ff:ba:84:89:33:99:
e8:2e:f9:44:24:fc:3c:e1:31:2d:89:10:98:4c:8d:
34:bd:2e:b9:f2:77:84:9b:60:bf:b9:8f:e5:73:da:
b0:21:a8:ba:a0:16:b2:99:fd:9e:82:fd:69:dc:6f:
77:d2:9e:41:32:69:46:86:63:d3:87:ff:83:5e:91:
05:a3:5e:c9:fd:84:51:4b:21:0f:06:f1:db:38:ec:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:84:70:FC:F1:73:F3:F3:2B:5B:29:F4:C6:60:80:AA:C7:21:73
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/8cqEcPzxc_PzK1sp9MZggKrHIXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.141.0/24
89.127.196.0/24
194.154.29.0/24
199.68.196.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ce:9e:7c:93:c7:19:b7:96:75:36:cb:ac:bf:58:13:d0:8d:
4a:ea:c8:56:30:18:67:07:ab:41:26:ee:63:8a:cc:36:99:19:
94:2b:c9:0a:10:74:59:60:8b:5e:c6:c1:3f:17:37:67:2a:99:
79:8f:69:5a:e2:ce:a1:3f:25:6d:7e:4e:72:95:5e:db:65:45:
49:86:61:0b:6b:cb:a6:dd:a5:c0:58:d0:36:8f:32:d1:33:81:
e9:66:f1:5d:04:d6:be:df:d9:ed:c1:66:72:34:e7:3d:3e:cd:
64:b0:83:55:21:a2:6d:1b:51:cf:af:dc:90:50:bd:5c:c8:28:
57:f0:f8:0a:d3:90:b6:dc:b2:b9:a3:45:33:6b:b9:44:98:ce:
55:9d:3e:34:1b:33:0c:08:03:33:9e:88:ab:43:a3:08:72:01:
40:fa:c6:5b:0e:07:35:d0:93:5d:8d:c3:93:a1:20:b9:bb:73:
b0:12:b3:99:39:74:0d:1d:22:76:9d:cc:67:b9:39:8b:8a:cf:
78:e2:84:bc:a4:78:10:4e:37:aa:5e:68:4e:33:9a:6c:59:b2:
23:b6:3e:ec:26:cf:77:0c:bb:b1:d5:6b:dd:c9:0b:24:2b:98:
ac:ee:72:68:f4:7f:a9:7e:b7:69:19:10:bf:a6:bf:0e:36:63:
2b:09:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:06 2026 by rpki-client