Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/172J7Q8mZsr0VC6StV7ph30UAog.roa
File: 172J7Q8mZsr0VC6StV7ph30UAog.roa (raw, json)
Hash identifier: JJms2nQRkX9Y3NBzgyt6sK+QPIVuTMzGhhx4yrWYyvo=
Subject key identifier: D7:BD:89:ED:0F:26:66:CA:F4:54:2E:92:B5:5E:E9:87:7D:14:02:88
Certificate issuer: /CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Certificate serial: 019F0026E270D29413BC4192D3C81DD38C30
Authority key identifier: 4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/172J7Q8mZsr0VC6StV7ph30UAog.roa
Signing time: Thu 25 Jun 2026 18:59:36 +0000
ROA not before: Thu 25 Jun 2026 18:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216063
IP address blocks: 62.129.150.0/23 maxlen: 24
195.10.226.0/23 maxlen: 24
2a01:bc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:00:26:e2:70:d2:94:13:bc:41:92:d3:c8:1d:d3:8c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bfe6786e7411affcff4ce68b5b706982adbb216
Validity
Not Before: Jun 25 18:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7bd89ed0f2666caf4542e92b55ee9877d140288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:96:b6:de:ae:bc:4b:e7:f5:cf:4e:b1:07:
33:ba:31:26:ba:91:a2:c3:0f:7b:90:c2:d8:36:71:
01:87:79:fd:02:12:83:9b:53:fe:8c:4a:96:e4:7a:
77:62:e0:bf:84:77:de:38:37:ce:be:ad:9b:bd:61:
15:98:c3:61:5e:be:2a:8d:60:da:d9:0a:fd:90:5c:
8b:8f:ef:4f:94:79:e6:48:4c:5d:9c:da:38:1d:a9:
7d:96:fb:5a:b1:1c:05:b9:57:9d:1b:15:21:2d:2f:
2b:86:d8:3f:aa:0c:a2:de:8f:99:7d:78:d6:81:4a:
c9:fc:e2:2e:0f:9a:de:12:d8:21:22:5d:fa:4c:e5:
ae:7b:de:c8:c8:1e:44:df:f9:4b:75:f3:64:27:2a:
b1:a8:c3:c5:df:83:14:b3:1c:1e:38:e7:3a:bd:2c:
0e:7f:5f:dd:e0:35:4c:c7:03:62:54:c6:cb:47:d4:
75:91:ee:5e:20:44:74:27:d3:eb:1d:d6:08:fe:97:
7f:73:d7:88:bf:24:43:13:06:02:be:57:4e:27:6f:
7f:2f:0a:46:ef:07:8f:f4:9c:2b:02:72:04:1a:f9:
22:a3:3b:53:70:93:53:e0:ef:0e:39:71:2f:96:2d:
b0:ae:17:ae:d1:e3:8b:6e:2c:2a:01:18:66:d2:4f:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BD:89:ED:0F:26:66:CA:F4:54:2E:92:B5:5E:E9:87:7D:14:02:88
X509v3 Authority Key Identifier:
keyid:4B:FE:67:86:E7:41:1A:FF:CF:F4:CE:68:B5:B7:06:98:2A:DB:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_5nhudBGv_P9M5otbcGmCrbshY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/172J7Q8mZsr0VC6StV7ph30UAog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/dfbbb5-634c-4e46-a069-cb1fd1211b01/1/S_5nhudBGv_P9M5otbcGmCrbshY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.150.0/23
195.10.226.0/23
IPv6:
2a01:bc0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:2e:a7:f4:7d:84:de:12:34:ef:7e:e2:d9:d4:c6:0c:7d:5a:
d6:27:f5:44:e4:8b:7a:41:cc:a6:c1:49:41:f3:0f:bb:42:1e:
0d:4d:72:66:42:13:27:70:ec:0b:7a:34:f8:6d:7b:f8:41:d1:
05:38:94:13:44:6c:7c:e6:63:fa:02:bc:05:8b:1e:1a:fa:35:
38:f7:bd:4d:56:ed:32:10:44:0d:03:62:90:5f:ea:62:ba:b2:
35:95:dc:6e:7c:03:9a:a2:3a:b2:5f:de:f8:11:85:07:04:a7:
ab:5a:30:01:16:35:1b:9e:d5:a9:e7:a0:88:39:91:a4:9c:fb:
3b:d2:63:97:bf:99:0f:6c:6c:7f:e8:3a:1e:c7:2d:1a:4e:2d:
e9:15:5f:a4:a8:af:f4:b4:85:7b:1b:45:9e:a0:10:20:10:12:
93:3a:88:61:02:8c:b6:7e:fe:75:ea:dd:bb:04:f8:15:16:ad:
69:43:d8:61:1a:31:cb:f9:aa:a3:6a:33:98:3f:e0:3c:e3:9b:
ec:d2:39:b2:fa:25:8c:f7:67:10:d2:ef:11:15:eb:97:a8:f8:
5d:6f:49:37:4c:b2:3b:c2:f5:cc:d9:91:a3:c3:68:95:bb:a7:
12:6c:1a:aa:96:46:b6:19:8d:c0:9e:6b:16:38:d4:e1:8b:2c:
ba:7d:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:50 2026 by rpki-client