Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F8v932iJLMzvzXy9w6EMQKTA2b0.roa
File: F8v932iJLMzvzXy9w6EMQKTA2b0.roa (raw, json)
Hash identifier: pgSUpr3mZMk4o042G2JRzWdt9tI3l9Z14/7s2hhH+ac=
Subject key identifier: 17:CB:FD:DF:68:89:2C:CC:EF:CD:7C:BD:C3:A1:0C:40:A4:C0:D9:BD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019EB655203E4FA5F83E7FC45108CB3F1171
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F8v932iJLMzvzXy9w6EMQKTA2b0.roa
Signing time: Thu 11 Jun 2026 10:58:12 +0000
ROA not before: Thu 11 Jun 2026 10:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210644
IP address blocks: 85.31.46.0/24 maxlen: 24
87.121.216.0/24 maxlen: 24
193.47.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:55:20:3e:4f:a5:f8:3e:7f:c4:51:08:cb:3f:11:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 11 10:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17cbfddf68892cccefcd7cbdc3a10c40a4c0d9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:fd:6d:0a:44:f8:43:18:33:8b:1b:55:d0:
72:a9:1f:ff:27:a0:fa:66:18:9b:b8:63:e2:d8:c0:
96:86:1a:c7:b0:5d:d0:8e:73:69:62:ea:46:e4:07:
1f:d2:2f:f3:dd:39:32:2d:ab:79:8f:b6:75:33:4c:
37:f8:2c:1a:3f:45:4f:67:3c:13:d4:be:b4:90:06:
4d:4e:96:f4:64:46:f0:8a:da:c4:6c:a6:b1:84:e3:
d7:3a:1a:cc:d0:1b:9b:28:05:fc:06:05:be:59:67:
a4:28:7e:a2:1e:ca:4f:33:31:57:1f:85:00:72:30:
f7:fb:63:53:61:64:42:91:9e:27:6e:1e:81:d4:72:
39:9b:45:9e:54:ef:fa:b8:c0:63:53:98:a5:8a:69:
d0:2c:c9:34:9c:ac:1b:71:86:7a:bd:b2:ec:af:99:
d1:9b:54:2a:16:cf:f9:53:b3:63:3a:cc:6a:ac:d7:
8c:86:c0:c4:93:70:dc:c9:c4:e6:9f:8a:8e:dc:25:
61:8d:f3:fa:12:92:42:45:c0:c1:0b:a9:59:b6:3d:
a0:1e:fd:82:0a:dd:83:6f:35:5d:2f:e6:51:5a:8c:
63:aa:4b:49:13:19:28:1e:69:08:80:da:4a:c7:2d:
e3:71:87:e4:52:f3:32:5c:9f:17:0f:1c:64:5a:08:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CB:FD:DF:68:89:2C:CC:EF:CD:7C:BD:C3:A1:0C:40:A4:C0:D9:BD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/F8v932iJLMzvzXy9w6EMQKTA2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.46.0/24
87.121.216.0/24
193.47.61.0/24
Signature Algorithm: sha256WithRSAEncryption
80:98:ea:16:98:c7:29:83:cc:0d:bc:ef:b8:41:d8:00:fc:4b:
c3:d4:78:41:d3:0a:04:bb:34:d8:2d:1f:f6:ff:ba:99:b9:a8:
51:be:13:42:b4:c9:d0:bb:13:9d:c9:e9:aa:0f:5d:aa:2a:11:
20:d0:1b:eb:7e:9c:c0:14:27:35:c3:5d:99:e8:d3:7e:18:ae:
7f:e1:aa:de:12:f0:12:f1:c5:a0:a4:c4:ef:a3:2c:eb:d3:15:
d6:8e:f2:c2:11:1f:fd:a8:0f:bb:29:db:26:fa:66:93:ab:3e:
84:cf:d1:a7:c5:87:f6:81:48:1d:62:bd:4b:72:8c:8a:17:db:
ba:5a:3b:a2:22:a5:e4:3e:cd:33:1e:26:24:c6:79:c5:fa:83:
11:46:8a:28:8c:9c:fd:e8:8d:89:39:87:b2:c2:99:88:9a:95:
7a:d9:ce:c0:db:ad:37:32:ba:16:b4:cf:3f:7c:54:b8:81:a3:
95:a0:bd:75:3f:ee:90:0d:f9:1a:3d:4e:e9:97:a8:47:91:fb:
48:b1:b5:fd:16:6b:b0:b6:01:3e:b9:ec:2f:5c:f4:ec:f2:57:
d8:1b:29:a2:d1:5e:16:56:97:b6:fe:b7:ad:dd:f3:5d:35:c0:
07:42:51:8c:a5:b6:7d:e9:d7:18:2d:8c:91:28:52:79:c0:a1:
ef:95:4f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:14 2026 by rpki-client