Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/cJFbLtaeoUfXlMt793s1Sx4oIHk.roa
File: cJFbLtaeoUfXlMt793s1Sx4oIHk.roa (raw, json)
Hash identifier: Q8rXRF1zW51xxj2bD+8pa1r9iTu2h5oDnFm7rQ/g/G8=
Subject key identifier: 70:91:5B:2E:D6:9E:A1:47:D7:94:CB:7B:F7:7B:35:4B:1E:28:20:79
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019F1CE6ECB36F8FB9B9C95FEEADEEBC97FB
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/cJFbLtaeoUfXlMt793s1Sx4oIHk.roa
Signing time: Wed 01 Jul 2026 08:58:43 +0000
ROA not before: Wed 01 Jul 2026 08:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213306
IP address blocks: 79.170.194.0/24 maxlen: 24
109.94.102.0/23 maxlen: 23
109.94.102.0/24 maxlen: 24
109.94.103.0/24 maxlen: 24
185.56.223.0/24 maxlen: 24
193.201.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e6:ec:b3:6f:8f:b9:b9:c9:5f:ee:ad:ee:bc:97:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Jul 1 08:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70915b2ed69ea147d794cb7bf77b354b1e282079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:e5:9e:04:d0:be:a3:8d:9f:d7:4f:85:e3:
ee:14:05:1c:bb:7e:68:7d:f6:a9:dd:0d:26:40:a5:
c4:3c:3f:16:56:03:32:cc:57:3c:2e:3c:c6:7c:71:
03:2b:96:21:af:10:c3:e3:96:3b:b8:7d:d1:35:db:
6c:71:e4:ef:69:cb:09:37:43:f6:5a:52:e1:58:fa:
2f:02:91:27:a8:be:fa:6f:58:eb:82:93:82:02:d8:
5d:0b:00:bb:24:f2:9e:0b:68:d1:ae:e8:64:c4:77:
6a:c6:b3:e0:58:31:d4:46:75:bf:ff:b6:b9:26:04:
05:b0:44:23:7f:f7:fe:1c:e0:ec:c5:c6:6a:88:89:
62:7f:b9:7e:29:8c:41:90:7f:cf:5d:12:57:25:4c:
d3:d4:68:00:1f:58:a3:2a:0d:e8:26:1a:e3:fd:bf:
2d:8b:97:5d:08:c4:51:48:49:dc:59:be:4d:92:d9:
7c:f6:69:28:69:d4:bf:12:1b:4a:05:76:64:41:1e:
aa:86:a9:26:73:2c:04:78:4f:e2:ed:73:2d:cf:4a:
33:84:04:87:30:af:cb:78:43:ac:02:78:50:6c:bc:
a4:80:8d:f2:f4:01:0d:37:38:b7:11:2b:d8:b8:8f:
fe:2c:c8:dd:9e:03:67:00:86:26:e5:4d:c1:67:b0:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:5B:2E:D6:9E:A1:47:D7:94:CB:7B:F7:7B:35:4B:1E:28:20:79
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/cJFbLtaeoUfXlMt793s1Sx4oIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.194.0/24
109.94.102.0/23
185.56.223.0/24
193.201.207.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:ac:52:33:9a:53:db:b0:18:33:f4:e5:02:db:ed:3e:29:
d4:02:be:c5:57:e5:ce:da:f2:4c:69:92:8b:78:ed:1f:d0:3e:
30:a7:5e:c2:a0:2e:f4:25:21:50:9b:89:e2:50:04:3e:af:e8:
56:b1:5f:42:9d:94:87:11:a5:30:97:dd:9b:a8:5e:4a:04:32:
b6:87:01:b7:a6:c9:08:fe:98:73:18:d3:27:a5:6f:2b:90:41:
35:10:72:f4:97:6d:e5:b0:b4:29:35:cd:b8:ef:f3:87:c7:01:
e6:93:df:81:97:35:83:d1:d4:db:23:fa:4d:a4:98:a0:03:7b:
5b:b3:5c:2b:3c:b2:b7:fc:8d:77:58:27:1e:eb:db:b4:ac:79:
ac:29:f8:61:7e:2c:6c:9e:ad:0a:ad:a1:93:7d:2e:4c:b6:e8:
1f:a8:ab:9d:0d:b0:1d:4f:fa:14:35:df:ef:16:7d:e5:8e:4c:
21:d1:32:4d:29:66:19:a7:89:73:31:6d:e4:2a:cd:10:51:a1:
f3:c6:69:f1:b4:c6:ba:2c:96:a0:42:af:19:8a:e3:c3:25:2c:
92:7b:f9:18:d9:41:51:87:84:55:88:20:3e:d6:34:8f:5b:89:
f9:9c:d7:97:2b:7f:a7:c8:40:00:49:01:cf:75:37:ab:c6:69:
56:4e:64:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ8c5uyzb4+5uclf7q3uvJf7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDg5YmNlMDhjNTVkYWE1N2I0ZjNhM2M5MDcwZmIzOTE4
NTNjY2YwHhcNMjYwNzAxMDg1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDkxNWIyZWQ2OWVhMTQ3ZDc5NGNiN2JmNzdiMzU0YjFlMjgyMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxnlngTQvqONn9dPhePuFAUcu35o
ffap3Q0mQKXEPD8WVgMyzFc8LjzGfHEDK5YhrxDD45Y7uH3RNdtsceTvacsJN0P2
WlLhWPovApEnqL76b1jrgpOCAthdCwC7JPKeC2jRruhkxHdqxrPgWDHURnW//7a5
JgQFsEQjf/f+HODsxcZqiIlif7l+KYxBkH/PXRJXJUzT1GgAH1ijKg3oJhrj/b8t
i5ddCMRRSEncWb5Nktl89mkoadS/EhtKBXZkQR6qhqkmcywEeE/i7XMtz0ozhASH
MK/LeEOsAnhQbLykgI3y9AENNzi3ESvYuI/+LMjdngNnAIYm5U3BZ7B5DQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHCRWy7WnqFH15TLe/d7NUseKCB5MB8GA1UdIwQY
MBaAFNUIm84IxV2qV7Tzo8kHD7ORhTzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAt
NmQ3MWZlMTNkNjFkLzEvY0pGYkx0YWVvVWZYbE10NzkzczFTeDRvSUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wMmZkZTctZDMyNi00M2RlLTg1MjAtNmQ3MWZlMTNkNjFk
LzEvMVFpYnpnakZYYXBYdFBPanlRY1BzNUdGUE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT6rCAwQB
bV5mAwQAuTjfAwQAwcnPMA0GCSqGSIb3DQEBCwUAA4IBAQBo06xSM5pT27AYM/Tl
AtvtPinUAr7FV+XO2vJMaZKLeO0f0D4wp17CoC70JSFQm4niUAQ+r+hWsV9CnZSH
EaUwl92bqF5KBDK2hwG3pskI/phzGNMnpW8rkEE1EHL0l23lsLQpNc247/OHxwHm
k9+BlzWD0dTbI/pNpJigA3tbs1wrPLK3/I13WCce69u0rHmsKfhhfixsnq0KraGT
fS5MtugfqKudDbAdT/oUNd/vFn3ljkwh0TJNKWYZp4lzMW3kKs0QUaHzxmnxtMa6
LJagQq8ZiuPDJSySe/kY2UFRh4RViCA+1jSPW4n5nNeXK3+nyEAASQHPdTerxmlW
TmSf
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:20:24 2026 by rpki-client