Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T56fM1m45qQgVNea8exUJ77hM_c.roa
File: T56fM1m45qQgVNea8exUJ77hM_c.roa (raw, json)
Hash identifier: ASPHiyQQeXyk5s00ArtRd99zydqbUZDobSH7UTUk9T4=
Subject key identifier: 4F:9E:9F:33:59:B8:E6:A4:20:54:D7:9A:F1:EC:54:27:BE:E1:33:F7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A13E916AE4C32F489D45DC2C0CFB5B10DC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T56fM1m45qQgVNea8exUJ77hM_c.roa
Signing time: Thu 15 Oct 2026 07:57:59 +0000
ROA not before: Thu 15 Oct 2026 07:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138737
IP address blocks: 195.72.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:91:6a:e4:c3:2f:48:9d:45:dc:2c:0c:fb:5b:10:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 07:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f9e9f3359b8e6a42054d79af1ec5427bee133f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:d4:78:c0:10:84:b6:0c:e1:30:8a:e2:61:
36:72:a5:69:10:98:92:7b:a4:b4:f1:10:c7:77:49:
82:f8:0a:f3:de:54:d3:27:4d:96:24:ac:a2:62:fd:
25:91:ee:a6:79:f1:92:70:b0:62:9d:a6:17:96:ab:
47:6c:55:81:0b:3a:87:8b:d6:d0:df:d8:98:fd:51:
41:7b:a3:a9:d9:a9:e5:6b:f2:99:c8:88:7b:41:c0:
7c:45:11:01:8c:af:6e:d4:49:14:7a:c9:b0:a5:7e:
08:fb:ae:bc:f8:f5:2a:66:63:d1:3d:41:ca:13:3d:
e0:08:4d:b9:f9:69:02:8a:ef:5f:df:e9:f1:f3:d2:
24:bc:01:05:90:7a:dd:30:90:c0:0d:f8:b3:89:ff:
4a:e5:1e:27:7f:34:d1:39:ce:20:4e:19:96:03:f4:
90:04:64:0c:e2:36:7a:a0:35:f9:26:d0:a2:d9:47:
d2:2f:15:49:cf:ab:05:91:c3:50:49:d3:ab:f8:20:
0d:d2:dc:ac:5c:05:f3:b8:6d:f1:6b:85:de:15:e5:
e3:bb:69:37:40:2e:e9:74:f9:1e:56:9d:5e:e9:b1:
1c:8d:ff:09:b5:ea:7b:f2:98:df:c0:28:ea:35:a9:
47:c8:ff:16:77:00:47:69:07:01:57:b2:60:29:ee:
79:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:9F:33:59:B8:E6:A4:20:54:D7:9A:F1:EC:54:27:BE:E1:33:F7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/T56fM1m45qQgVNea8exUJ77hM_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.173.0/24
Signature Algorithm: sha256WithRSAEncryption
55:f5:97:3a:e1:66:65:2f:40:3b:6f:b9:be:6c:30:3d:da:85:
12:b1:2f:09:bb:e3:79:c3:e3:76:48:fe:13:fe:71:6b:81:c2:
a5:93:28:f2:83:8d:a3:6d:a9:a8:8d:68:b8:87:1a:a3:82:25:
c4:f2:cd:c9:0a:ab:b3:2f:37:9c:e0:cb:68:36:e1:77:d7:fb:
87:9e:db:2f:69:2c:21:3b:fa:98:38:9c:70:8f:61:79:74:47:
c6:9a:ce:71:5c:c9:ac:41:14:3a:1a:e1:e5:60:75:5f:b1:ca:
70:87:c0:a9:48:4e:2a:04:66:b1:ed:66:c3:aa:59:26:d8:23:
5d:bc:71:9b:6e:17:aa:9b:27:87:90:80:99:10:21:74:d5:dc:
04:75:3d:5b:5c:78:53:9d:19:22:b6:00:62:3d:4a:e6:b3:48:
aa:f7:49:5f:5b:08:6f:04:50:74:4e:4a:1f:93:08:ce:bc:d2:
56:73:32:19:15:b9:79:d7:6b:f7:1b:99:bb:54:67:97:54:f6:
58:7f:77:a7:55:8a:06:c0:40:4a:e8:92:f7:d3:21:c5:5d:55:
fa:75:11:24:1e:a9:b4:37:c0:3e:8f:a0:4f:a6:b0:0d:98:57:
f4:0f:bc:61:f6:eb:04:a1:30:22:57:7a:a3:75:ca:d5:9f:d4:
a8:c7:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:41 2026 by rpki-client