Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/faNfzmCsfECKV0BRlxJ6IYubchM.roa
File: faNfzmCsfECKV0BRlxJ6IYubchM.roa (raw, json)
Hash identifier: wA++AS0hTt6L/h71tIPEMAzwohp6l3o6Y0m6MjkX/Pg=
Subject key identifier: 7D:A3:5F:CE:60:AC:7C:40:8A:57:40:51:97:12:7A:21:8B:9B:72:13
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398259A1DBD5FA26AE31CA568C66C4C1
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/faNfzmCsfECKV0BRlxJ6IYubchM.roa
Signing time: Tue 25 Aug 2026 15:20:39 +0000
ROA not before: Tue 25 Aug 2026 15:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 139.28.48.0/24 maxlen: 24
139.28.49.0/24 maxlen: 24
185.254.55.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:59:a1:db:d5:fa:26:ae:31:ca:56:8c:66:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7da35fce60ac7c408a57405197127a218b9b7213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:14:b8:5d:03:5a:7d:2f:e0:f2:3a:d1:0b:
ed:8a:0f:7d:73:0a:38:9c:93:f0:f8:d7:b6:7e:16:
3b:d8:48:c3:c0:5e:a1:7a:40:9b:19:e9:c4:ff:ac:
e3:fa:0a:4a:0b:82:ef:d3:86:2c:0e:81:6a:d4:2a:
1a:cc:38:8d:8b:46:68:35:24:7e:7f:f9:52:bd:73:
90:62:74:14:d4:13:08:9a:f8:56:a4:4c:fb:bf:dd:
3c:8e:fd:8a:fb:9a:ca:fd:53:5f:65:53:f3:3e:4b:
ba:60:96:58:08:4e:89:eb:61:fc:2e:dd:6b:72:16:
19:25:7d:b5:39:9a:ea:00:25:17:8e:0b:71:d8:ae:
00:34:69:05:e2:d3:a6:9a:2a:a9:80:5e:13:0b:d6:
43:0d:ac:13:99:e6:2b:03:b5:3d:8a:ed:0b:10:21:
ea:52:13:51:34:02:78:a8:b8:55:24:f7:75:f1:f0:
13:63:56:e8:63:e8:a4:9d:6c:0a:cf:90:a6:4b:1e:
b5:48:f6:2e:2a:ef:cc:f2:84:73:02:b8:80:d5:04:
e4:8d:25:fc:e3:54:d6:46:8a:bf:70:84:7f:9b:0f:
b7:2d:72:35:0d:ae:b3:fa:82:78:68:7e:21:71:25:
bf:aa:5d:fb:2d:8d:73:a4:87:58:f0:ac:58:55:98:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:5F:CE:60:AC:7C:40:8A:57:40:51:97:12:7A:21:8B:9B:72:13
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/faNfzmCsfECKV0BRlxJ6IYubchM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.48.0/23
185.254.55.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2e:b5:f4:21:87:0b:55:81:c1:87:88:e3:78:12:05:3b:55:
a9:98:c2:39:be:0e:1d:f4:df:2f:d4:3a:66:41:78:1a:d0:f1:
a4:78:13:19:39:8e:c0:70:29:c5:66:61:c0:4f:c3:8c:66:67:
d9:7d:a5:25:45:70:62:a7:3f:9c:4d:f6:a9:86:95:c3:85:c1:
a9:b4:6c:df:07:9e:2a:98:9e:28:6e:44:fb:58:58:82:8a:51:
39:25:58:a8:22:66:12:08:a6:05:8d:8d:ae:8b:93:3a:6d:b4:
f4:29:64:b3:d0:e2:4f:f7:93:8a:64:83:24:92:15:b3:e1:28:
42:b4:88:5b:f9:9b:31:33:11:a0:ed:72:48:d6:a1:9f:8e:ba:
b1:d4:49:82:95:89:47:d4:a4:da:ae:1d:a2:0b:5a:eb:0e:20:
93:7c:83:2d:5d:d7:da:17:75:b2:11:c6:dd:3f:f9:28:b0:eb:
9f:db:98:5c:a3:1f:35:61:7a:2a:f2:f8:bc:75:ac:8c:6b:13:
76:49:c9:65:eb:85:c1:e0:e7:63:5e:ce:7c:09:62:86:71:11:
e5:37:6f:40:c0:4f:4b:0c:1e:a7:6d:94:92:ba:f4:0c:f4:82:
fb:db:6f:db:76:06:3b:3f:14:73:48:b1:f2:1a:92:d5:9a:cc:
96:c3:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:53 2026 by rpki-client