Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IfxFb_H33C41e8D83SOC8uJJHk8.roa
File: IfxFb_H33C41e8D83SOC8uJJHk8.roa (raw, json)
Hash identifier: PVSlfpjf1aOHk11eWdG5EGvS1iaPzsmpV0DWF9QLWhU=
Subject key identifier: 21:FC:45:6F:F1:F7:DC:2E:35:7B:C0:FC:DD:23:82:F2:E2:49:1E:4F
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F84ABCE51203414C6D71CABDB7E05B641
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IfxFb_H33C41e8D83SOC8uJJHk8.roa
Signing time: Tue 21 Jul 2026 12:34:39 +0000
ROA not before: Tue 21 Jul 2026 12:34:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147242
IP address blocks: 85.92.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:ab:ce:51:20:34:14:c6:d7:1c:ab:db:7e:05:b6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 21 12:34:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21fc456ff1f7dc2e357bc0fcdd2382f2e2491e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:f4:94:7d:9d:5f:42:21:d5:b8:04:d0:e6:
83:ee:88:d1:e4:0a:4d:a7:f3:5d:11:51:b4:d4:18:
89:08:42:2f:10:a5:4a:95:a8:2a:43:71:30:1a:f0:
48:b4:3f:54:04:8e:05:d8:f5:36:94:1e:75:2f:7b:
b4:a2:71:19:99:44:ea:74:69:0e:bc:78:13:c1:f8:
2f:28:b4:4a:8a:18:33:8f:d2:ba:14:2f:5d:4e:02:
a3:37:8c:aa:b6:8c:a5:49:60:a4:49:e8:1d:ad:f9:
62:86:9c:68:1b:ad:a8:52:df:82:02:3c:b7:4f:db:
6e:b8:8b:10:09:69:4b:96:22:61:00:51:f3:2f:a6:
0c:f9:0a:79:17:31:ee:56:4b:25:9b:0a:a9:db:08:
00:a1:cf:a2:e6:8f:65:59:46:e5:49:53:31:72:44:
ea:6b:6a:9d:3e:50:60:d1:f0:3b:36:90:0e:ec:2f:
59:60:8a:b9:dc:23:5c:9e:8c:0e:98:59:d5:f2:c0:
9b:f0:7e:17:e6:18:63:dd:2b:d5:ea:af:03:41:a1:
4a:8f:3c:fe:94:84:b5:a0:9d:ff:14:e8:1a:68:8e:
1d:11:56:1b:83:24:e5:c5:e5:bb:1a:57:21:e3:eb:
d5:fb:6f:3f:04:9c:44:5b:df:02:76:b0:1e:51:4d:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:45:6F:F1:F7:DC:2E:35:7B:C0:FC:DD:23:82:F2:E2:49:1E:4F
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/IfxFb_H33C41e8D83SOC8uJJHk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:7d:60:16:a0:dd:b3:fb:32:98:e2:10:9d:a8:ee:f3:54:14:
48:ef:53:e5:b2:78:b0:bc:84:ba:8c:de:8f:ec:f5:3d:c6:31:
da:e6:8e:60:eb:7a:6d:30:a3:9a:f9:d8:eb:b4:25:de:70:02:
d6:ae:f7:54:5c:81:70:36:7c:ca:91:02:f6:4b:8c:8c:e2:73:
4d:9f:d9:92:0d:df:00:d8:fa:51:4b:a7:a7:29:1d:98:6b:b2:
63:07:17:9d:94:8c:cc:e3:ad:9f:01:5a:6c:1d:6c:6b:99:29:
76:f8:b6:ba:9e:30:0d:ad:7f:b8:ef:ae:5f:33:ba:b6:14:9c:
ca:23:22:e6:2d:d0:08:41:88:6e:aa:98:3a:ea:ce:bc:11:81:
12:30:51:67:1f:b5:9b:c8:62:94:dd:51:38:4f:80:23:65:b8:
3e:66:4a:39:6d:f6:4f:33:dc:e1:a3:12:4c:13:28:f0:e1:ea:
97:a5:f8:a6:10:82:9a:87:19:43:26:4f:38:64:c7:aa:94:80:
67:c2:f5:5f:70:13:f7:f4:4d:12:a3:dd:7a:a3:9f:43:59:e8:
3c:c8:7b:a8:34:62:b9:68:7d:35:50:a8:da:8a:8b:d1:4d:8c:
2d:46:08:49:ab:6b:cb:09:25:89:49:53:51:c5:48:9b:45:50:
34:6b:d2:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+Eq85RIDQUxtccq9t+BbZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzIxMTIzNDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZjNDU2ZmYxZjdkYzJlMzU3YmMwZmNkZDIzODJmMmUyNDkxZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvn0lH2dX0Ih1bgE0OaD7ojR5ApN
p/NdEVG01BiJCEIvEKVKlagqQ3EwGvBItD9UBI4F2PU2lB51L3u0onEZmUTqdGkO
vHgTwfgvKLRKihgzj9K6FC9dTgKjN4yqtoylSWCkSegdrflihpxoG62oUt+CAjy3
T9tuuIsQCWlLliJhAFHzL6YM+Qp5FzHuVkslmwqp2wgAoc+i5o9lWUblSVMxckTq
a2qdPlBg0fA7NpAO7C9ZYIq53CNcnowOmFnV8sCb8H4X5hhj3SvV6q8DQaFKjzz+
lIS1oJ3/FOgaaI4dEVYbgyTlxeW7Glch4+vV+28/BJxEW98CdrAeUU0InQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCH8RW/x99wuNXvA/N0jgvLiSR5PMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvSWZ4RmJfSDMzQzQxZThEODNTT0M4dUpKSGs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVVyOMA0G
CSqGSIb3DQEBCwUAA4IBAQALfWAWoN2z+zKY4hCdqO7zVBRI71PlsniwvIS6jN6P
7PU9xjHa5o5g63ptMKOa+djrtCXecALWrvdUXIFwNnzKkQL2S4yM4nNNn9mSDd8A
2PpRS6enKR2Ya7JjBxedlIzM462fAVpsHWxrmSl2+La6njANrX+4765fM7q2FJzK
IyLmLdAIQYhuqpg66s68EYESMFFnH7WbyGKU3VE4T4AjZbg+Zko5bfZPM9zhoxJM
Eyjw4eqXpfimEIKahxlDJk84ZMeqlIBnwvVfcBP39E0So916o59DWeg8yHuoNGK5
aH01UKjaiovRTYwtRghJq2vLCSWJSVNRxUibRVA0a9It
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:21 2026 by rpki-client