Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p8bYgm0z85Kfhxf9Ivry4_oyIQI.roa
File: p8bYgm0z85Kfhxf9Ivry4_oyIQI.roa (raw, json)
Hash identifier: KPmXaVTDY90DYrzFj7LtKmdF8t46Gi3sFTkyP5aGfSw=
Subject key identifier: A7:C6:D8:82:6D:33:F3:92:9F:87:17:FD:22:FA:F2:E3:FA:32:21:02
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F602FAB13967F652D99C3F683FA7A688E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p8bYgm0z85Kfhxf9Ivry4_oyIQI.roa
Signing time: Tue 14 Jul 2026 10:32:44 +0000
ROA not before: Tue 14 Jul 2026 10:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48347
IP address blocks: 195.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:2f:ab:13:96:7f:65:2d:99:c3:f6:83:fa:7a:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 14 10:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7c6d8826d33f3929f8717fd22faf2e3fa322102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5f:03:18:ae:a7:ad:39:3a:66:53:a0:15:1f:
fb:27:a9:37:70:cb:91:2b:e1:20:b1:5b:50:b1:4c:
4a:d8:d8:b6:f3:96:9e:d0:49:19:a5:81:28:96:df:
11:1c:10:df:b8:df:fa:c4:46:3f:9a:a4:cd:b7:36:
f5:c6:b9:8d:32:9f:12:56:a6:ca:f7:5f:01:fa:1a:
31:cb:81:4b:66:15:0e:57:a6:ae:82:65:6c:06:62:
31:f3:95:73:5f:8c:85:d1:85:fa:bc:73:ba:af:c8:
65:be:ae:af:5d:7b:83:86:7b:71:99:25:30:95:bf:
e3:57:03:90:09:87:a5:f4:37:85:3e:7f:e3:89:db:
58:09:db:e8:05:12:93:d6:9b:50:fc:c8:14:cf:c6:
cf:15:e2:39:29:c3:90:a3:f1:5a:61:0c:61:28:19:
67:b0:b4:28:94:d3:e7:1a:83:54:25:98:3c:f2:64:
d5:7b:b5:fe:f3:97:cb:a7:e0:22:28:d8:1e:97:1c:
a2:31:e8:9f:d5:a8:98:21:1c:d9:05:19:0b:da:ab:
4b:8d:28:83:38:c0:f9:4f:ce:58:8c:c2:fa:a0:80:
73:7f:f2:2f:6e:d6:43:98:27:45:66:f7:5e:9d:ea:
25:ad:cf:73:3a:fc:21:07:74:f1:1e:5f:9f:68:da:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C6:D8:82:6D:33:F3:92:9F:87:17:FD:22:FA:F2:E3:FA:32:21:02
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/p8bYgm0z85Kfhxf9Ivry4_oyIQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:29:4a:68:0a:f0:08:b6:bb:de:38:96:ef:29:20:ac:af:84:
bb:47:da:99:47:10:7c:db:69:f9:67:2d:ce:70:a3:b7:58:e4:
e6:c9:aa:02:a1:79:eb:cf:13:22:0c:c8:5d:b0:3f:62:0e:c0:
1b:32:17:da:a5:b9:3d:7a:eb:79:5e:a7:3b:d0:41:63:8d:fb:
be:5c:f0:c4:5f:6a:73:6a:ee:86:d1:6f:14:af:08:78:28:f4:
0f:ab:6e:28:94:cb:88:bd:be:3d:10:6b:4e:27:51:8c:9d:ac:
71:33:72:91:ca:57:c6:9f:40:18:0d:2d:5e:f9:a3:30:dd:27:
0a:d6:45:74:7d:78:d0:6a:d9:1b:74:5b:13:97:33:5a:ec:88:
48:8d:ce:3b:79:9d:a2:95:fd:ba:7e:e8:bb:51:36:ea:17:ef:
a1:5b:4c:2d:6d:7a:10:ed:a5:c2:19:66:53:86:25:6b:74:e8:
d8:95:d6:52:99:b8:ad:9e:93:c9:f8:20:ca:7b:59:55:1b:45:
87:8a:7e:65:b8:54:d7:33:f8:7e:5f:d3:4a:06:42:d5:63:35:
80:2e:ec:30:e1:b7:17:42:28:80:95:bc:86:f5:d9:d7:2a:fd:
a4:23:c6:d7:33:a5:5f:58:49:6e:66:6f:fd:45:af:91:51:02:
90:aa:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:23 2026 by rpki-client