Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ipf3vPyr9NetWhGVK_nCUd1C3C0.roa
File: ipf3vPyr9NetWhGVK_nCUd1C3C0.roa (raw, json)
Hash identifier: sclXXFgoKX/MYgWqUIPfVTA1jee3A0kg462YXRlH1V4=
Subject key identifier: 8A:97:F7:BC:FC:AB:F4:D7:AD:5A:11:95:2B:F9:C2:51:DD:42:DC:2D
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019F38CA359C5CB7A975E6B3A02F37E80DBF
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ipf3vPyr9NetWhGVK_nCUd1C3C0.roa
Signing time: Mon 06 Jul 2026 18:56:43 +0000
ROA not before: Mon 06 Jul 2026 18:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43141
IP address blocks: 31.44.40.0/22 maxlen: 24
31.44.44.0/23 maxlen: 23
31.44.46.0/23 maxlen: 23
185.155.176.0/22 maxlen: 24
193.222.104.0/23 maxlen: 24
2a04:1580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:ca:35:9c:5c:b7:a9:75:e6:b3:a0:2f:37:e8:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Jul 6 18:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a97f7bcfcabf4d7ad5a11952bf9c251dd42dc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:d1:36:9b:6b:d5:24:b9:2a:93:b8:b5:cc:
77:ac:d2:4e:ea:c2:f3:e0:58:5e:bc:f3:83:89:fd:
07:8e:a2:e3:d7:fc:3b:68:8e:f0:7e:bc:37:24:64:
5d:3c:f1:d4:b3:3e:1d:a6:60:de:00:84:44:e7:74:
84:45:08:e6:e6:21:05:a3:47:f0:6e:49:a2:50:ae:
b5:62:68:1b:70:69:6d:b5:f3:6a:cc:5b:e6:7b:77:
45:36:70:ee:95:a3:9d:cb:ad:a0:1c:50:50:b3:85:
b6:54:77:b5:aa:7d:75:a1:1a:99:fa:4a:41:b2:fc:
fa:d7:17:82:0b:f9:63:ef:8d:2c:ad:40:71:69:e4:
59:0e:af:7b:d2:bf:95:80:2e:b0:97:d2:16:7f:27:
a5:f4:13:59:0e:81:54:57:38:d8:a9:7a:fd:2b:39:
78:7a:0b:1c:21:04:94:7a:cd:3e:6b:77:a8:65:ab:
6e:2d:48:aa:94:33:5a:a3:97:67:84:9b:fa:7a:c5:
e7:d9:19:11:de:93:e1:79:87:77:d9:d0:1c:96:a8:
7a:dc:a9:af:b5:fe:fe:d0:6e:5f:4f:88:a4:e0:24:
5f:64:72:a2:a8:db:33:3a:95:c7:d7:11:41:aa:f2:
34:81:be:bc:6d:14:0e:27:41:e8:fe:97:cb:f0:fe:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:97:F7:BC:FC:AB:F4:D7:AD:5A:11:95:2B:F9:C2:51:DD:42:DC:2D
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/ipf3vPyr9NetWhGVK_nCUd1C3C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.40.0/21
185.155.176.0/22
193.222.104.0/23
IPv6:
2a04:1580::/29
Signature Algorithm: sha256WithRSAEncryption
96:87:f8:3d:3e:c2:b0:7e:d0:a0:7f:08:38:cf:df:0e:da:8a:
90:e7:84:22:c5:51:2a:aa:0f:de:46:bc:3e:8e:11:74:48:95:
31:27:06:f6:77:f9:96:7b:d7:62:ec:72:34:96:10:1d:72:59:
e7:57:23:ce:38:5d:80:55:4f:52:e2:09:68:e2:f7:94:fb:9f:
e3:9c:d5:4d:d3:9c:d2:ab:0a:b0:28:f1:d5:3c:25:b1:cd:f1:
a4:ab:b8:7d:9f:14:64:17:f2:4d:0c:a6:eb:80:e6:87:44:4d:
91:48:5d:3b:c7:d6:df:dc:b6:67:a1:85:95:67:6c:80:2e:8d:
6c:ac:8e:c8:60:74:88:25:7e:a9:fd:29:84:84:79:35:e7:5e:
40:65:a8:16:07:e9:47:3d:a7:ef:2e:23:69:c7:4e:21:73:9c:
fe:47:a0:e4:15:fa:c5:30:f2:ed:b5:0b:09:aa:91:12:bf:e9:
f5:a0:80:fa:65:e0:87:4e:e1:8a:45:f9:7e:ca:5c:6c:a9:c3:
97:94:96:4f:5a:4f:d6:ef:95:50:fc:70:7e:58:38:af:f7:67:
e4:56:12:39:c9:e6:d4:40:a9:a4:39:a9:5a:0b:b2:2b:2e:5d:
a5:a8:17:4c:de:f9:92:cd:30:a1:8a:60:35:6a:18:4f:c5:93:
ff:ee:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:08 2026 by rpki-client