Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8S7nv_bEue43qF6kiE85z5O__U.roa
File: f8S7nv_bEue43qF6kiE85z5O__U.roa (raw, json)
Hash identifier: 9x1MLgdw/MHB9JikGJBpeiKz3uP86TNNzYUbRQzSFPA=
Subject key identifier: 7F:C4:BB:9E:FF:DB:12:E7:B8:DE:A1:7A:92:21:3C:E7:3E:4E:FF:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A19D5743F497C9EDFDE2F17750B6649314
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8S7nv_bEue43qF6kiE85z5O__U.roa
Signing time: Mon 02 Nov 2026 17:38:24 +0000
ROA not before: Mon 02 Nov 2026 17:38:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218232
IP address blocks: 81.161.231.0/24 maxlen: 24
93.123.112.0/24 maxlen: 24
171.22.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:57:43:f4:97:c9:ed:fd:e2:f1:77:50:b6:64:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 2 17:38:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc4bb9effdb12e7b8dea17a92213ce73e4efff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:9c:1a:3b:db:f6:01:46:d9:4f:e1:65:6b:
8e:50:a3:71:ad:74:bb:6c:83:51:c0:f3:27:74:f2:
b3:81:69:81:83:59:4f:5f:18:9f:47:1a:c8:a4:6e:
8c:c7:e8:06:44:0e:6a:4b:71:61:e5:d9:1a:aa:4a:
75:e4:8b:6b:16:1b:b5:3f:09:90:71:6a:6c:48:d2:
3a:e5:be:73:95:1d:79:16:16:b1:3e:43:ab:48:df:
77:29:3e:58:c6:0a:4f:af:3a:3d:18:e7:5f:4d:7e:
f7:3b:8e:5a:70:11:61:db:5c:6c:79:53:4a:51:d5:
a1:7c:ea:d4:54:af:f7:12:d7:cd:8e:6b:6d:be:24:
05:52:21:2b:f3:5f:f3:fc:72:83:06:8a:b8:bd:ef:
07:fb:7a:c4:90:05:50:41:42:2c:4d:d3:4a:ce:bd:
0b:a6:ee:f0:9b:e3:e2:59:1c:b7:3b:99:d3:73:a3:
01:06:99:b2:fa:77:cc:bf:f7:7a:34:ee:50:7e:38:
6a:fb:9c:ce:41:f8:21:98:43:12:18:e8:25:96:39:
7c:a5:5a:d3:d7:80:61:15:b7:96:ac:d9:ef:81:2f:
98:ad:99:1c:37:a5:bb:5a:25:f2:a6:5a:20:61:f5:
64:ab:f0:a6:1a:fa:bb:2a:45:f3:10:3c:fd:0f:82:
af:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C4:BB:9E:FF:DB:12:E7:B8:DE:A1:7A:92:21:3C:E7:3E:4E:FF:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8S7nv_bEue43qF6kiE85z5O__U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.231.0/24
93.123.112.0/24
171.22.19.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ff:e9:5a:1a:9d:c0:8d:29:f1:9b:7d:66:d9:f3:7d:d9:65:
35:4a:b1:19:18:7f:57:c2:ee:2b:a2:28:7f:9b:68:62:96:b4:
44:59:3a:cd:a8:90:41:86:3d:2a:a4:98:da:fd:a1:be:cf:8e:
f9:05:31:03:8b:67:ab:eb:80:80:b1:93:52:2f:74:59:56:5d:
d1:91:cb:1e:12:79:92:63:82:f0:71:36:fb:a9:7b:2b:94:79:
e3:75:f4:06:e7:03:64:88:86:5a:84:34:c8:82:86:0a:95:a5:
0e:4c:cf:0b:df:ef:19:d9:6a:8d:a6:be:d4:a3:4d:66:37:e4:
6b:f5:df:b5:0a:ec:d5:ac:e3:fd:9b:de:5c:09:8a:37:1c:af:
a0:6c:1e:64:46:ef:9a:fb:32:f4:08:19:96:b5:34:30:3c:cd:
24:c4:34:e2:50:aa:89:4c:de:bf:e9:37:45:fa:a8:31:56:8c:
85:0c:15:76:99:d2:8c:92:8c:63:ce:2a:26:45:12:cf:31:30:
3e:b6:6b:16:b5:4a:c8:2b:7b:47:1f:3d:72:56:bd:c8:12:67:
15:d3:e6:a6:1a:61:e8:2e:f9:8f:51:0b:4f:72:a5:3b:0f:96:
01:35:2b:32:00:eb:6c:a1:dc:78:81:dc:70:c1:ad:09:44:4e:
93:ff:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:19:55 2026 by rpki-client