Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/_5dlpHFSfnZB5fPESdwe0vcQoK0.roa
File: _5dlpHFSfnZB5fPESdwe0vcQoK0.roa (raw, json)
Hash identifier: 648yr+Yw2hgriwVmDfKLpfCh/5rjlF0ILGcl2PNzoO4=
Subject key identifier: FF:97:65:A4:71:52:7E:76:41:E5:F3:C4:49:DC:1E:D2:F7:10:A0:AD
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 019F299E8B0C402A25BD0D03C3BD9A57FFC9
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/_5dlpHFSfnZB5fPESdwe0vcQoK0.roa
Signing time: Fri 03 Jul 2026 20:14:43 +0000
ROA not before: Fri 03 Jul 2026 20:14:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212720
IP address blocks: 193.148.45.0/24 maxlen: 24
213.177.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:9e:8b:0c:40:2a:25:bd:0d:03:c3:bd:9a:57:ff:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Jul 3 20:14:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff9765a471527e7641e5f3c449dc1ed2f710a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:3b:14:d5:42:49:d5:5d:44:3c:20:1b:95:
9b:4b:70:48:d5:57:84:04:98:4a:da:fe:27:56:ff:
88:11:02:cc:d9:2d:12:f1:25:71:1a:19:72:0d:e9:
75:7b:81:ff:fa:24:03:00:40:db:a4:b1:8a:07:99:
81:b5:8f:b8:fb:88:5d:76:ed:12:03:5a:78:a2:5d:
0f:65:26:59:72:cc:31:dc:c9:88:1b:7e:a3:2c:b4:
e0:a4:de:a3:16:56:cc:f6:ae:35:57:54:97:a2:9b:
35:e2:9d:63:97:98:ad:62:ce:7c:c3:54:ea:34:0b:
c2:d9:65:da:dd:de:53:9d:48:ca:81:a7:83:bb:66:
7a:f9:a0:a3:43:9c:f2:89:77:ba:52:0b:02:b5:e7:
5a:61:86:73:7a:51:b2:09:8b:a2:64:b9:24:a8:72:
55:9b:b1:12:3d:91:62:e6:51:75:e9:cc:a6:e0:f9:
98:38:f9:16:2f:da:b4:fb:3f:b7:23:c9:56:2c:e7:
b2:d9:e9:13:c8:3f:4a:09:12:f7:ad:a1:01:d1:7c:
89:15:a4:0f:42:62:14:3c:a7:9d:e2:43:57:95:5d:
db:b5:50:7d:50:64:af:5a:a0:39:46:fb:83:5f:ea:
f1:14:5a:93:21:38:5e:32:ff:15:71:2c:d7:e0:b3:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:97:65:A4:71:52:7E:76:41:E5:F3:C4:49:DC:1E:D2:F7:10:A0:AD
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/_5dlpHFSfnZB5fPESdwe0vcQoK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.45.0/24
213.177.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:0b:5e:e9:cc:9e:6d:8d:38:11:f8:18:75:1e:6c:92:0f:23:
73:eb:81:4d:c5:3f:2a:fb:59:25:b0:ab:d3:2f:df:33:3d:06:
ba:8f:fe:30:02:18:69:5c:e5:93:4d:c5:ab:06:e4:34:e6:a8:
2f:ff:f3:0d:9e:5f:21:e3:5a:b9:a4:63:5b:59:d4:ac:83:d8:
b1:0b:7b:32:a7:7a:b5:84:15:a0:1d:ad:4d:39:8a:24:64:5d:
4e:24:ec:4b:49:2a:18:b9:7f:5b:42:a3:6e:d6:43:63:a6:d0:
e3:3e:42:4b:61:1a:14:71:2f:dc:94:9e:42:04:17:30:26:1d:
4e:34:df:fb:4e:1f:ca:d4:b4:cc:c8:f5:6c:dc:3d:47:97:5f:
4c:2f:3e:51:ac:2b:d8:a4:cc:96:f9:82:c1:20:91:1d:c1:9a:
d3:17:0a:9b:d0:d1:ba:a7:16:b8:98:89:d5:87:f0:0d:64:a2:
6b:6b:6d:bf:14:dc:6d:e4:e9:c0:45:75:3b:23:f9:1e:dc:91:
f9:1b:3d:45:57:50:2c:c7:fa:f1:19:2a:71:d8:44:17:f8:c7:
21:57:cb:73:c3:52:4a:ed:fd:b1:8e:a3:bd:2f:38:42:f5:40:
d0:4b:d9:6f:c2:c7:cd:cb:f4:5b:6e:af:b6:fe:cb:6c:f3:e4:
53:41:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:27:15 2026 by rpki-client