Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/pIUxTEDoN2Dc7m3Bu8iZK9Qd6p0.roa
File: pIUxTEDoN2Dc7m3Bu8iZK9Qd6p0.roa (raw, json)
Hash identifier: 7pwAinsCrulqhp/0S9xHHK/xP5KbTFYXkcqDqCn/DUE=
Subject key identifier: A4:85:31:4C:40:E8:37:60:DC:EE:6D:C1:BB:C8:99:2B:D4:1D:EA:9D
Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial: 019FF2712D5D9CF9E4B69D99DD7CCB9EAF86
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/pIUxTEDoN2Dc7m3Bu8iZK9Qd6p0.roa
Signing time: Tue 11 Aug 2026 20:08:51 +0000
ROA not before: Tue 11 Aug 2026 20:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47702
IP address blocks: 93.175.192.0/20 maxlen: 24
213.109.224.0/20 maxlen: 24
2001:67c:11d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:71:2d:5d:9c:f9:e4:b6:9d:99:dd:7c:cb:9e:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
Validity
Not Before: Aug 11 20:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a485314c40e83760dcee6dc1bbc8992bd41dea9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:f9:60:51:f9:d9:b8:70:05:2d:a5:da:2a:
79:23:28:1a:af:59:c8:96:92:8a:39:60:24:9e:30:
7f:55:f6:33:34:e6:38:1d:6b:be:a0:94:b4:e7:fc:
32:cb:c2:a6:87:84:65:cc:be:04:e0:83:99:23:f6:
23:29:62:92:02:ea:39:d8:8a:d2:97:22:5e:e1:2b:
95:1d:3b:f5:76:ce:f8:db:4e:eb:1e:c5:a6:7f:52:
1a:99:38:20:cd:36:31:d4:48:f3:a6:c7:1e:85:ce:
cc:90:ce:31:0f:1f:fd:3d:98:3a:6e:7b:0b:61:2d:
66:88:60:0a:cc:9f:06:19:be:3c:20:8d:d9:5c:f8:
93:05:39:17:b7:33:b2:a5:b2:b3:c8:df:29:7f:54:
34:ec:db:6f:85:45:26:4e:ef:73:2d:c9:17:4c:1a:
13:f0:47:52:a9:d4:ea:a3:11:bf:e2:2d:0a:9a:cd:
d5:c3:8d:c1:70:b2:f3:d2:76:eb:91:6e:1a:63:52:
c9:95:3b:6a:9e:40:3b:23:f4:38:01:f8:b8:fc:d9:
2b:4d:14:c3:fb:dc:f0:91:03:de:bb:a3:30:5f:de:
76:10:26:6d:50:71:02:4d:b5:0b:6e:c4:16:cd:ec:
4b:a9:b8:ff:61:7c:6f:c9:59:ca:3a:6e:c0:20:81:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:31:4C:40:E8:37:60:DC:EE:6D:C1:BB:C8:99:2B:D4:1D:EA:9D
X509v3 Authority Key Identifier:
keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/pIUxTEDoN2Dc7m3Bu8iZK9Qd6p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.192.0/20
213.109.224.0/20
IPv6:
2001:67c:11d4::/48
Signature Algorithm: sha256WithRSAEncryption
0b:23:e8:81:1c:5e:ab:65:da:33:ff:3f:30:ae:dd:36:de:d5:
4a:ea:e5:0d:60:16:79:2c:24:b8:38:0c:19:0b:41:a3:fa:e9:
f3:6c:04:71:ba:5d:e6:4e:83:a7:bc:e1:21:d4:77:2d:b7:94:
88:b3:45:4a:8a:90:d9:d7:95:91:87:eb:14:4d:c6:03:61:c3:
22:53:52:2d:cd:b5:c8:d3:56:58:59:96:fc:24:34:e3:29:ec:
73:b7:70:21:88:43:97:c0:5a:03:cb:e7:e7:9e:cb:4d:9b:bf:
48:48:d7:3a:34:ba:37:12:5a:8e:1a:19:05:fb:5a:2d:93:48:
f4:f3:95:0a:88:5d:bc:08:91:d7:1c:07:52:35:9f:be:32:f6:
e9:0b:b5:b6:0e:b1:9d:e3:0f:d0:55:a7:d0:41:8a:6c:c3:1b:
08:44:91:23:ce:03:ad:24:82:0c:53:a7:67:e3:e7:0f:e5:2f:
2b:71:64:6a:87:4d:a3:9e:d7:23:27:78:8f:50:99:c7:5a:d2:
15:58:d9:ff:49:00:43:79:37:e6:9f:f8:8a:aa:d9:df:7d:4a:
86:cd:6f:aa:63:44:67:3a:ef:a6:58:aa:58:2e:74:cc:db:2f:
53:0d:be:c2:8d:b5:36:7a:99:e4:da:94:77:01:5c:50:6e:e1:
9f:8e:2f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:14:44 2026 by rpki-client