Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/FyDX43spYXNo_rALXQoEHpva-_U.roa
File: FyDX43spYXNo_rALXQoEHpva-_U.roa (raw, json)
Hash identifier: y/HZbciEjAN07/IOJ8MEymame2T5vLFs8tnOac6LlFg=
Subject key identifier: 17:20:D7:E3:7B:29:61:73:68:FE:B0:0B:5D:0A:04:1E:9B:DA:FB:F5
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F4731F3C76735E6C38E275011FDA80C6F
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/FyDX43spYXNo_rALXQoEHpva-_U.roa
Signing time: Thu 09 Jul 2026 14:04:43 +0000
ROA not before: Thu 09 Jul 2026 14:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198711
IP address blocks: 185.224.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:31:f3:c7:67:35:e6:c3:8e:27:50:11:fd:a8:0c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 9 14:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1720d7e37b29617368feb00b5d0a041e9bdafbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:16:9e:23:98:cf:7a:4b:85:ad:23:1d:4f:
c4:29:62:ed:8a:54:bf:47:9b:8b:9b:95:7e:9a:ac:
cb:5a:2a:fb:9e:1f:ea:f7:82:c9:32:83:f5:40:72:
5c:86:7a:87:5c:6a:df:15:fe:17:e6:41:68:69:23:
55:a9:a1:e4:10:30:0f:97:29:06:e6:3f:ec:8a:b4:
18:05:72:7b:43:1c:bf:f0:47:53:52:06:ec:75:cb:
45:1c:a6:db:89:18:a3:94:6f:23:2e:77:f5:d8:8a:
90:f2:5c:34:6c:5c:25:a1:fa:f4:a2:9d:ab:76:f5:
10:e4:ed:73:22:a9:cd:1a:44:81:ed:30:b1:5b:62:
50:a2:36:cb:49:aa:a7:d3:26:de:d4:42:9b:1a:10:
9d:18:11:d3:eb:93:79:8f:71:25:05:17:46:a1:a0:
55:24:65:b7:b5:82:c3:9f:71:f1:c3:d7:39:11:77:
3e:e2:7c:98:ac:85:5f:97:8d:1e:39:c0:99:97:ec:
2c:c1:25:8b:63:7a:96:31:ed:de:dd:99:b5:60:0d:
ed:67:54:37:32:3f:8c:9c:6a:9a:a9:1f:60:bf:2e:
32:09:0e:11:92:cd:58:bb:18:81:24:c7:82:ca:b3:
24:a5:33:d7:ee:e6:06:ea:04:cd:03:33:84:b9:e0:
93:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:D7:E3:7B:29:61:73:68:FE:B0:0B:5D:0A:04:1E:9B:DA:FB:F5
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/FyDX43spYXNo_rALXQoEHpva-_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.219.0/24
Signature Algorithm: sha256WithRSAEncryption
77:62:6e:7e:78:05:3d:ac:07:bf:d2:42:de:4b:c8:c4:ad:38:
c2:4f:dc:d8:b4:d1:81:1f:9b:f8:0d:37:32:80:1c:35:f7:cc:
22:fd:e4:68:94:ef:b7:d0:a3:fd:13:d0:2c:7e:7a:65:8c:10:
9b:b7:2c:5e:b2:a8:18:eb:45:06:c7:8f:d1:1c:ed:65:97:c8:
3c:f8:28:1d:0b:40:fc:d7:2a:38:f1:80:4c:f5:fd:e9:2b:d6:
1b:e4:9d:f3:17:e3:c7:37:22:04:ae:3c:a3:6a:7b:f0:cc:61:
e4:95:5e:ba:b3:f7:c6:06:d2:a6:1a:ff:05:a9:93:95:cd:f6:
bf:b0:79:95:1b:0d:c6:a6:f3:81:b7:a7:b5:f1:4f:9c:5a:13:
f1:d0:2a:29:62:f7:88:38:89:5b:d9:b8:8f:9f:de:2d:2c:8b:
07:03:ec:f7:53:c2:a0:41:34:63:74:da:7e:52:96:e5:ff:e4:
30:65:57:f8:ad:40:e1:ea:a2:6f:ee:3c:ce:e0:85:1b:6a:89:
37:94:9e:ae:58:3d:f7:4c:8a:95:0e:f2:6e:b4:ae:ef:97:f7:
ff:f4:55:b8:49:1a:fd:5a:6b:bc:65:e4:10:90:3c:4f:a3:0d:
97:a9:ab:ef:47:dd:4e:c4:25:1d:4b:08:5a:d1:b8:30:3e:c4:
9b:23:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:32 2026 by rpki-client