Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/R7Lu4Y1fCyTXONuoklyDGrymZag.roa
File: R7Lu4Y1fCyTXONuoklyDGrymZag.roa (raw, json)
Hash identifier: 5a8I6IIILgZSlU2ehvXhgeJfg0YzkicxbnbV++shmxM=
Subject key identifier: 47:B2:EE:E1:8D:5F:0B:24:D7:38:DB:A8:92:5C:83:1A:BC:A6:65:A8
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 019DD920A868395E103D66317D45938B2515
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/R7Lu4Y1fCyTXONuoklyDGrymZag.roa
Signing time: Wed 29 Apr 2026 12:04:49 +0000
ROA not before: Wed 29 Apr 2026 12:04:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51789
IP address blocks: 193.164.152.0/24 maxlen: 32
194.35.116.0/24 maxlen: 32
194.35.118.0/24 maxlen: 32
194.35.119.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:20:a8:68:39:5e:10:3d:66:31:7d:45:93:8b:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Apr 29 12:04:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b2eee18d5f0b24d738dba8925c831abca665a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:45:82:a4:d2:81:03:4e:f9:ca:0e:b8:77:
07:3a:a8:f8:dd:18:dc:b7:46:0a:fe:75:9b:39:9e:
a1:64:ba:73:84:c4:38:49:0a:56:21:fa:93:69:de:
3b:5f:62:90:0d:32:32:a9:55:36:17:ce:b8:f7:40:
97:8a:39:88:57:88:85:d8:86:f5:16:70:91:ee:89:
8d:38:65:14:96:09:69:e0:c6:41:e3:fd:90:84:ed:
f6:c6:12:51:bf:c5:1d:36:b6:b2:7f:ff:3c:de:d2:
b1:cb:c6:12:67:78:b2:51:85:77:e3:cd:a8:8b:48:
c5:a5:cf:de:05:9b:48:fa:98:50:25:4c:51:87:7b:
7f:91:9f:e1:15:c0:e7:0b:c1:57:e7:47:f8:ee:75:
9f:85:32:a6:1b:02:c5:6b:10:a8:f2:5c:08:48:80:
f3:4a:68:b1:8c:e4:ab:0e:73:84:33:e4:65:7a:ba:
ba:8e:7d:28:41:a5:0c:1e:0d:36:02:0a:66:d9:c0:
d9:c4:9e:5c:0d:35:a6:f5:07:c1:d5:ef:23:89:b7:
d7:e0:5a:ee:07:bc:7f:d9:5d:57:e8:e2:44:23:c6:
bd:92:a3:d3:21:cd:ca:c3:8a:c9:12:68:97:e0:da:
c5:a3:d9:fa:9b:5c:1c:b6:53:e2:5a:8c:0c:f5:5b:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B2:EE:E1:8D:5F:0B:24:D7:38:DB:A8:92:5C:83:1A:BC:A6:65:A8
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/R7Lu4Y1fCyTXONuoklyDGrymZag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.152.0/24
194.35.116.0/24
194.35.118.0/23
Signature Algorithm: sha256WithRSAEncryption
11:29:72:06:3d:fd:28:f4:b2:36:6f:82:d8:db:ff:1c:82:ba:
87:54:e0:b5:35:c5:d9:ca:d5:60:fe:34:76:ba:cf:aa:04:2b:
20:90:8a:e2:8f:60:c2:64:4a:df:6b:ff:4f:b6:f6:75:fb:98:
e4:1b:07:05:e6:99:3f:11:86:31:1a:b0:67:f3:99:7a:54:ae:
ea:b9:2c:75:86:4c:72:1d:dd:39:10:cc:ea:0f:10:74:ba:48:
5e:f3:12:73:e5:52:64:12:f7:ef:d2:f5:7c:b6:12:43:ad:d3:
76:7a:61:ef:e2:76:23:fb:67:a2:1c:6b:1b:a9:b3:ff:57:22:
3a:30:de:c6:f2:28:1c:c9:2a:1f:ba:98:01:d1:89:d8:65:5e:
a8:2a:f3:e8:1d:0f:0c:f6:2a:05:97:65:14:dd:af:81:a4:fd:
bc:e7:fa:fb:fe:36:33:95:ec:43:e8:dc:db:71:00:d6:be:b8:
3e:b2:7d:a6:c2:f9:dc:66:43:e1:ae:a5:b9:1d:7f:c6:e9:a9:
ac:03:05:ee:cc:69:86:9a:41:77:03:83:6a:f0:03:7d:81:56:
4e:1c:e1:13:53:61:61:3d:bf:54:2c:10:65:a1:8a:b1:47:cf:
f8:28:ea:23:cd:13:f6:8a:c1:76:b6:cd:3e:1e:2a:86:5e:d6:
8b:d3:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:30 2026 by rpki-client