Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa
File: AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa (raw, json)
Hash identifier: 5mqmiz/CXkUW+cTJVY8j71HIi5cAxYNi2xnFmKTG/HY=
Subject key identifier: 02:FB:A1:50:E6:4F:CA:D4:66:A8:9D:C9:61:D0:E4:7E:73:60:9B:48
Certificate issuer: /CN=e731bb83a213f966e142b40da4f32cd6419ae219
Certificate serial: 019F23691CAAA37E8ADD23C3F3B812122F29
Authority key identifier: E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 139.28.192.0/22 maxlen: 22
139.28.192.0/23 maxlen: 23
139.28.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:aa:a3:7e:8a:dd:23:c3:f3:b8:12:12:2f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e731bb83a213f966e142b40da4f32cd6419ae219
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02fba150e64fcad466a89dc961d0e47e73609b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:08:bc:af:4b:7c:b1:58:92:33:83:d3:22:
81:3c:b5:2a:9f:19:84:fe:34:7b:ad:b4:1c:b7:2e:
c0:8f:d6:f3:be:cc:57:a9:5d:44:1e:3e:d8:af:d2:
af:6f:41:ea:32:a3:c4:22:a6:44:f2:b2:99:c0:80:
ac:ca:a0:78:ee:a1:15:71:d3:bd:06:03:eb:0c:7a:
76:6f:2b:86:4b:d9:bd:24:bc:77:07:db:be:b8:4d:
d2:cc:49:6b:36:bc:97:35:8d:a7:56:85:1c:54:10:
b6:f2:35:2a:06:e5:6f:58:cd:7d:ca:1a:9d:ed:9f:
6e:8f:3f:af:cb:3c:b7:28:69:9c:b3:b5:64:32:20:
61:6c:2c:b1:0b:59:48:44:32:06:ac:c1:cb:49:82:
84:85:5d:08:8d:5c:2d:82:66:73:9d:fc:1d:ae:bd:
e6:da:b4:68:15:6d:18:11:b5:9d:c6:22:4b:bd:d6:
ba:a8:e8:90:a6:3e:03:89:4b:d6:08:5a:46:11:3c:
3a:8c:f4:96:36:a8:34:61:31:26:4e:94:5c:c0:2a:
8f:b1:5e:d8:94:fd:47:88:7b:62:31:c0:83:b5:1f:
a7:5f:69:58:cb:14:ed:f6:b7:d2:5f:84:a9:9e:ec:
59:15:e4:48:2a:e6:c3:63:87:97:bb:93:bc:ba:1c:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:A1:50:E6:4F:CA:D4:66:A8:9D:C9:61:D0:E4:7E:73:60:9B:48
X509v3 Authority Key Identifier:
keyid:E7:31:BB:83:A2:13:F9:66:E1:42:B4:0D:A4:F3:2C:D6:41:9A:E2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zG7g6IT-WbhQrQNpPMs1kGa4hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/AvuhUOZPytRmqJ3JYdDkfnNgm0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/f9342c-57a9-48f3-9e67-8a3d8dc358eb/1/5zG7g6IT-WbhQrQNpPMs1kGa4hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.192.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a1:94:a0:40:9b:7b:ce:df:d1:e7:0f:d0:36:ec:00:37:cb:
cf:e4:cb:04:50:92:53:a5:bf:3c:08:2d:43:08:9e:c3:15:09:
7f:1b:76:1b:a1:09:7b:6b:7f:2b:36:9c:a5:5b:c2:42:66:ca:
7a:f8:80:df:44:0e:22:7a:f0:21:49:cf:df:48:b7:dd:5d:f3:
1c:86:64:d4:6c:aa:d0:d0:b6:10:e6:f4:e6:58:41:e8:88:f3:
cc:fa:25:d4:c3:c2:5c:c9:07:38:c5:ce:c7:95:8f:72:c4:9e:
c9:93:b7:7b:af:f5:5b:57:02:be:73:d0:cc:b5:65:05:28:a3:
56:c6:78:d9:84:9d:25:ee:f6:b5:75:8d:48:9c:c6:39:5f:62:
c1:9b:52:be:0b:cb:70:31:10:c0:8c:f4:8f:cb:17:47:2b:ee:
87:44:91:90:5c:e3:27:6d:47:d1:65:17:77:ea:c5:30:ab:e8:
a5:a5:71:b2:df:4f:47:88:e8:84:13:f3:5f:ad:9c:16:65:c6:
a4:bc:8b:cc:21:d6:99:a2:b6:c0:ef:43:ea:fe:83:87:fb:eb:
4e:ac:93:3a:33:16:10:45:d4:4d:f4:7a:79:df:a2:9a:d5:d3:
7f:a2:c9:ec:f6:f9:d4:63:a5:83:0a:01:f3:98:e1:21:48:cc:
32:43:50:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 13:58:42 2026 by rpki-client