Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F7Id1lrHpaj6XqKq7pDRoTX_A0g.roa
File: F7Id1lrHpaj6XqKq7pDRoTX_A0g.roa (raw, json)
Hash identifier: ++MQ5b7zH1aFfCkn6YUDpxmH1KpEHZx5TDve/3eYKFU=
Subject key identifier: 17:B2:1D:D6:5A:C7:A5:A8:FA:5E:A2:AA:EE:90:D1:A1:35:FF:03:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F5ECD5CB189C9F2F9D91A351D1E7195D2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F7Id1lrHpaj6XqKq7pDRoTX_A0g.roa
Signing time: Tue 14 Jul 2026 04:05:44 +0000
ROA not before: Tue 14 Jul 2026 04:05:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402405
IP address blocks: 94.249.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:cd:5c:b1:89:c9:f2:f9:d9:1a:35:1d:1e:71:95:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 04:05:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b21dd65ac7a5a8fa5ea2aaee90d1a135ff0348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:98:79:b8:d8:be:da:cc:ef:90:3f:fa:a7:
25:be:51:4a:ff:92:da:44:c4:a2:b0:4b:81:54:f5:
5c:a5:6e:05:25:e2:89:11:df:7f:f2:67:65:83:f3:
5e:d8:f0:c3:8d:0b:a9:f9:64:10:cb:9e:0e:e9:30:
1f:56:95:22:b7:29:10:15:65:f6:22:db:00:d1:4a:
44:62:31:46:eb:3a:73:10:f9:8c:00:31:3c:ec:14:
bb:0f:e2:a9:f4:53:22:8d:97:ad:23:f8:6b:6c:65:
e6:16:3e:7a:05:81:7d:1a:b5:62:13:c8:f4:d4:ef:
3b:31:85:27:ae:8c:08:24:26:d0:b9:69:cb:40:72:
fe:ab:f0:3d:d6:c2:49:d6:64:b7:63:49:95:6a:38:
c9:cc:6c:ec:b4:d3:a6:5b:3a:dc:b5:58:d2:b2:f3:
fc:08:a1:36:a0:54:90:bf:e0:12:c5:42:54:20:ab:
e9:3e:11:fb:96:bb:74:eb:ae:ed:82:2d:14:93:24:
bf:79:4b:aa:96:31:f7:5d:28:1a:5b:d5:ae:9b:ee:
6a:08:61:be:43:a9:ec:c0:04:3c:6b:81:63:2b:b0:
d8:82:c7:e9:1d:5d:4a:db:c4:b7:8e:b6:47:fb:b1:
90:41:9b:4a:c7:ed:3a:c8:39:3e:eb:a2:23:29:fe:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:1D:D6:5A:C7:A5:A8:FA:5E:A2:AA:EE:90:D1:A1:35:FF:03:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/F7Id1lrHpaj6XqKq7pDRoTX_A0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:da:c2:40:b5:b3:09:43:35:1d:b4:02:ce:23:8b:f1:4b:e1:
63:4c:3c:51:54:2a:c9:d1:0a:51:5a:c8:33:c1:94:d1:17:29:
b1:a4:96:5e:b2:29:12:87:b9:0a:66:14:52:c1:5c:2e:91:7d:
e4:2d:48:0d:cf:e1:2c:a0:d9:80:47:a8:a6:cf:35:15:1d:49:
07:3f:4b:db:b2:e4:73:3b:a4:ca:ab:be:61:4c:7e:1a:08:02:
44:d0:c6:23:01:d2:43:c7:02:78:e8:b0:11:b7:1c:14:04:2e:
47:4a:dc:4b:6f:09:2a:08:75:1c:8f:0a:b8:41:9e:cd:a8:d0:
51:cc:d5:03:43:c2:22:41:18:28:30:5e:51:07:12:18:54:de:
03:53:51:a0:d5:9c:9e:a7:e8:3d:41:72:b2:8b:24:41:41:5e:
69:9a:e4:75:9f:5d:a5:1d:d0:de:b3:4a:3d:7b:90:6d:fe:6a:
00:c6:2c:8e:cf:3f:a3:45:f3:38:33:2f:fb:58:30:58:55:fe:
74:94:ad:fd:62:5e:c3:4b:33:a1:3c:97:4e:7e:4d:6f:df:0e:
79:82:78:79:b7:62:33:8c:36:b4:85:4a:e2:90:95:9a:1b:d6:
25:01:b4:ee:6e:69:b2:45:b4:2f:29:5a:e0:cb:d9:2a:76:63:
6c:ee:75:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9ezVyxicny+dkaNR0ecZXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzE0MDQwNTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2IyMWRkNjVhYzdhNWE4ZmE1ZWEyYWFlZTkwZDFhMTM1ZmYwMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5WYebjYvtrM75A/+qclvlFK/5La
RMSisEuBVPVcpW4FJeKJEd9/8mdlg/Ne2PDDjQup+WQQy54O6TAfVpUitykQFWX2
ItsA0UpEYjFG6zpzEPmMADE87BS7D+Kp9FMijZetI/hrbGXmFj56BYF9GrViE8j0
1O87MYUnrowIJCbQuWnLQHL+q/A91sJJ1mS3Y0mVajjJzGzstNOmWzrctVjSsvP8
CKE2oFSQv+ASxUJUIKvpPhH7lrt0667tgi0UkyS/eUuqljH3XSgaW9Wum+5qCGG+
Q6nswAQ8a4FjK7DYgsfpHV1K28S3jrZH+7GQQZtKx+06yDk+66IjKf58yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeyHdZax6Wo+l6iqu6Q0aE1/wNIMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRjdJZDFsckhwYWo2WHFLcTdwRFJvVFhfQTBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvnMMA0G
CSqGSIb3DQEBCwUAA4IBAQDE2sJAtbMJQzUdtALOI4vxS+FjTDxRVCrJ0QpRWsgz
wZTRFymxpJZesikSh7kKZhRSwVwukX3kLUgNz+EsoNmAR6imzzUVHUkHP0vbsuRz
O6TKq75hTH4aCAJE0MYjAdJDxwJ46LARtxwUBC5HStxLbwkqCHUcjwq4QZ7NqNBR
zNUDQ8IiQRgoMF5RBxIYVN4DU1Gg1Zyep+g9QXKyiyRBQV5pmuR1n12lHdDes0o9
e5Bt/moAxiyOzz+jRfM4My/7WDBYVf50lK39Yl7DSzOhPJdOfk1v3w55gnh5t2Iz
jDa0hUrikJWaG9YlAbTubmmyRbQvKVrgy9kqdmNs7nWv
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:24 2026 by rpki-client