Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa
File: 1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa (raw, json)
Hash identifier: phX6owyDB4twltvk1dyR8ljZf5zcVZSNNxPOme7Wmno=
Subject key identifier: F8:9E:2F:34:A5:20:E6:44:CF:17:A5:DE:B2:B0:19:E1:58:C3:5F:DF
Certificate issuer: /CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Certificate serial: 019F2368BB9B7C444A01B6155C95D3697C09
Authority key identifier: 6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59597
IP address blocks: 5.179.72.0/21 maxlen: 24
185.14.140.0/22 maxlen: 24
2a01:9540::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bb:9b:7c:44:4a:01:b6:15:5c:95:d3:69:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af2a66a9971e477effd5f0887a29a2f9a374fe6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f89e2f34a520e644cf17a5deb2b019e158c35fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:31:4c:3e:2b:a0:a5:2f:9b:07:0d:f8:e6:
ca:61:c3:b2:06:64:51:f9:2c:aa:59:60:6a:52:73:
4d:28:46:30:ce:d8:8a:86:e6:45:63:0e:82:36:57:
68:e6:b4:80:85:e8:f7:64:4c:7b:70:36:aa:75:55:
cc:82:a6:e9:09:5f:62:87:b9:05:e1:35:b2:84:9e:
45:99:b7:a5:99:b5:db:d4:f6:52:5b:54:17:c7:ca:
a9:3b:eb:ec:70:44:21:53:15:d6:92:fe:7c:50:8f:
49:10:ae:fa:05:82:a6:42:36:cd:93:88:93:46:c2:
7e:bf:a6:a7:d2:9f:58:42:ca:06:73:c0:cd:cc:51:
31:3b:2b:58:91:0b:f3:8c:70:63:00:a2:62:60:54:
f1:88:aa:2a:d3:d0:c3:e4:bd:0a:ae:42:00:9e:32:
a8:e6:e6:e2:3c:08:23:14:4c:96:42:93:0f:b4:6a:
52:a2:d5:a6:98:b0:83:18:05:80:6a:90:20:97:51:
7f:73:9e:6b:50:1a:73:1d:f6:f8:cf:7e:f0:3c:47:
3c:54:d7:78:a5:18:b6:5f:b0:8d:47:b3:e8:0a:0a:
68:09:2e:7d:6b:c0:8d:46:d3:fe:e4:5b:23:12:93:
eb:7b:3b:1e:a3:76:fd:c7:10:b6:b2:8e:08:d8:d1:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9E:2F:34:A5:20:E6:44:CF:17:A5:DE:B2:B0:19:E1:58:C3:5F:DF
X509v3 Authority Key Identifier:
keyid:6A:F2:A6:6A:99:71:E4:77:EF:FD:5F:08:87:A2:9A:2F:9A:37:4F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/1-J4vNKUg5kTPF6XesrAZ4VjDX98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/avKmaplx5Hfv_V8Ih6KaL5o3T-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.72.0/21
185.14.140.0/22
IPv6:
2a01:9540::/32
Signature Algorithm: sha256WithRSAEncryption
50:6d:de:17:55:cf:40:ca:82:ee:7d:7e:68:2f:30:2a:56:1a:
74:3b:79:6f:41:b3:b2:7b:3d:e5:39:30:cf:15:c3:9e:ea:bb:
91:3f:c5:21:f5:71:d1:0e:fd:72:7f:f2:a3:fe:45:02:78:70:
9b:c5:8e:0c:5d:58:ee:c8:e4:76:a7:f8:8f:be:34:a3:1f:d7:
68:ef:1b:41:7e:63:f1:74:f6:a7:0e:c5:36:85:3c:78:db:cc:
72:7e:d3:c7:8a:a2:e3:0b:28:7a:da:d7:3f:56:7b:7d:16:25:
d0:a3:22:ad:76:20:ee:b5:50:a0:05:7e:9e:3c:dc:78:69:d1:
89:6b:8e:48:b4:3a:01:d5:21:df:34:bf:84:bc:93:29:19:54:
0d:66:85:92:5f:50:83:00:79:94:c5:f7:5d:f7:7b:06:68:0d:
e4:8e:80:22:23:ac:5e:73:51:e0:f8:f8:56:20:29:fc:ac:2f:
90:6c:6a:59:7b:17:de:0c:d6:a4:de:c7:81:3e:31:18:a7:19:
64:cc:f5:6d:d4:5d:2b:22:00:c2:c8:1f:49:ad:4a:89:48:0e:
f8:7f:4e:6d:47:b8:0d:df:ea:19:44:9d:31:e8:0e:c4:3a:c4:
56:92:5d:9c:57:8b:27:57:cb:49:08:e8:35:ba:1c:db:ff:19:
bd:78:54:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:43 2026 by rpki-client