Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/r95ZVjX56jJiWkYQMRKyYv04zAk.roa
File: r95ZVjX56jJiWkYQMRKyYv04zAk.roa (raw, json)
Hash identifier: atQuuUOVhYvlzY/3e8Hwna49gvmMP2+CuoGawCgA1Ww=
Subject key identifier: AF:DE:59:56:35:F9:EA:32:62:5A:46:10:31:12:B2:62:FD:38:CC:09
Certificate issuer: /CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Certificate serial: 019F23688D053FE6EC4768F04A5E4733B80E
Authority key identifier: F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/r95ZVjX56jJiWkYQMRKyYv04zAk.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12591
IP address blocks: 193.178.152.0/23 maxlen: 23
193.178.152.0/24 maxlen: 24
193.178.153.0/24 maxlen: 24
2001:67c:2154::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:05:3f:e6:ec:47:68:f0:4a:5e:47:33:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f404325d59e1e3ff83ac3d511ba02f0f8a415884
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afde595635f9ea32625a46103112b262fd38cc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:34:9f:44:c4:e5:11:e3:12:25:7d:3c:89:
d5:3e:0c:e0:bf:7e:fe:c2:e8:22:7d:1d:1b:95:3a:
bc:b4:12:88:c3:02:6e:70:86:66:bf:02:6e:d9:a6:
8c:f6:24:97:df:b5:08:83:ac:e2:a0:76:64:56:f6:
d2:26:90:cb:12:04:42:87:dc:d0:24:39:a4:36:8a:
dc:c6:25:b9:d6:8c:f9:c0:dc:4f:96:c6:88:2e:cf:
10:c7:02:db:a5:a4:61:5c:17:b7:00:e5:1c:8c:3e:
66:d3:23:bd:b4:b0:20:8b:36:04:3a:5d:bb:23:fe:
4b:e0:a8:42:c6:a9:9a:a6:a5:71:5d:69:3f:2c:fb:
c2:42:c7:1e:c5:22:11:98:e1:95:1c:ac:81:3f:4a:
67:df:9d:03:6d:ce:0e:3f:52:dd:79:cd:c5:fe:10:
92:a7:7f:d8:54:03:c6:90:8c:4e:18:ec:ed:14:40:
02:28:71:fa:b2:20:a8:75:62:59:71:f0:cb:69:7c:
7e:61:a6:3c:6a:ad:42:3b:fe:e5:40:8f:f9:e8:49:
21:22:5d:d7:fe:a9:3f:9c:81:92:0e:67:d7:1b:76:
3d:7a:95:d3:84:b0:ba:e2:3c:ea:60:37:fa:0c:a8:
98:d4:50:05:e4:cd:c6:de:c9:f3:4b:81:b6:1c:82:
50:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:59:56:35:F9:EA:32:62:5A:46:10:31:12:B2:62:FD:38:CC:09
X509v3 Authority Key Identifier:
keyid:F4:04:32:5D:59:E1:E3:FF:83:AC:3D:51:1B:A0:2F:0F:8A:41:58:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/r95ZVjX56jJiWkYQMRKyYv04zAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/9AQyXVnh4_-DrD1RG6AvD4pBWIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.152.0/23
IPv6:
2001:67c:2154::/48
Signature Algorithm: sha256WithRSAEncryption
04:d7:6a:ed:e6:60:23:7a:9b:fc:93:c6:47:b8:05:f6:5c:3f:
c3:3f:32:b2:d0:ca:55:dd:3e:da:3f:f7:94:d9:99:b1:e4:38:
db:5b:13:1f:c2:a4:82:82:aa:17:9d:52:01:51:83:70:3c:33:
c5:8e:5a:19:d0:41:d5:6d:b7:1a:94:e0:8c:f1:57:aa:7e:fc:
75:06:1f:31:bf:28:7d:91:ba:05:50:49:63:6c:6c:95:e4:60:
18:45:cb:85:5c:d5:e9:61:cb:96:3c:eb:9d:ae:59:16:33:61:
e6:4e:1c:f0:ff:c2:a1:3f:3c:73:d3:ac:43:c5:e9:a5:c2:ae:
66:15:da:e3:33:5f:3b:c8:10:ac:29:70:d1:b3:be:fd:29:31:
31:33:66:c5:fe:31:38:a0:9d:50:7b:96:69:02:2c:b9:a9:2f:
52:09:44:43:9a:61:06:5f:7e:9f:e0:00:fb:89:cb:21:4a:8b:
62:25:d6:c6:8a:ea:7e:33:20:ee:52:f2:32:49:d2:27:47:f0:
4a:54:cb:6c:39:24:a9:79:c0:f0:b7:9b:43:45:8c:5f:0e:5e:
64:de:1d:b2:64:1e:04:52:0a:b5:af:4c:8a:0d:4e:9d:53:43:
38:98:ec:d5:ad:85:30:21:af:01:93:69:15:20:a0:40:ce:4d:
4f:ff:e7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:06 2026 by rpki-client