Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FHv_sI0Km1m-iHBBvHJXEff_gXA.roa
File: FHv_sI0Km1m-iHBBvHJXEff_gXA.roa (raw, json)
Hash identifier: GE1eXGawrkV32HxM+t/ekzUPeNlQtlcosyhYrEaN6vA=
Subject key identifier: 14:7B:FF:B0:8D:0A:9B:59:BE:88:70:41:BC:72:57:11:F7:FF:81:70
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019F702CE975FCA2952BC037118B945AD21A
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FHv_sI0Km1m-iHBBvHJXEff_gXA.roa
Signing time: Fri 17 Jul 2026 13:03:39 +0000
ROA not before: Fri 17 Jul 2026 13:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.21.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2c:e9:75:fc:a2:95:2b:c0:37:11:8b:94:5a:d2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jul 17 13:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=147bffb08d0a9b59be887041bc725711f7ff8170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:37:f1:d4:6b:1a:99:9b:96:d7:b8:c5:34:
08:0b:7d:05:96:93:7e:a7:9a:c5:a3:cf:96:97:f4:
46:f0:9c:1d:9e:67:31:a8:fd:76:ad:46:5b:5a:e0:
1f:5e:a3:49:8f:e4:60:f0:c7:72:9d:78:e8:28:1b:
d9:d7:81:1b:f7:6d:ae:5d:9d:b7:99:02:7b:30:0c:
d1:7c:d7:54:51:62:7a:38:e2:2c:4e:88:94:64:6a:
09:95:3c:ed:2c:8c:61:1c:73:d0:32:e4:43:c9:53:
f2:d4:4c:92:ad:ae:45:d2:de:81:97:58:27:86:a6:
74:02:0d:3d:61:24:b9:58:27:24:ae:5a:79:22:67:
1a:92:3f:77:8d:5b:7a:dc:37:35:ff:4c:be:6a:19:
70:56:27:de:b8:44:56:07:76:9e:90:65:3c:46:93:
1c:72:e5:4a:90:7c:12:01:86:95:e2:4c:fd:af:68:
68:62:82:aa:16:f4:a6:52:71:88:7f:b4:a1:c0:d7:
a9:6f:5b:dc:5c:8b:a3:d4:a5:e9:bc:cc:43:a7:ef:
05:06:52:a9:f4:50:35:05:37:d2:0a:6c:54:03:4b:
2e:a6:4c:78:96:48:a0:a2:4b:b1:4b:ed:84:08:e0:
b2:4e:8c:9c:33:1c:99:a5:7d:43:08:c5:e4:87:97:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:FF:B0:8D:0A:9B:59:BE:88:70:41:BC:72:57:11:F7:FF:81:70
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/FHv_sI0Km1m-iHBBvHJXEff_gXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ec:b6:e7:21:9a:81:a5:9c:68:8c:e1:d7:fc:2f:e5:fa:67:
77:92:31:61:87:aa:bc:3b:12:58:11:57:f4:80:a8:af:75:36:
71:01:69:c6:e9:8a:fb:37:a5:c3:a9:32:e2:c5:9f:4e:cf:e8:
c2:54:a1:92:14:33:e5:da:85:59:b8:4e:93:02:97:3b:b2:36:
04:0d:d7:20:5f:c4:3f:61:34:33:a2:fa:10:0c:e4:fd:f6:e0:
d3:86:0e:a8:d5:0b:e2:80:7f:ad:5e:e7:83:33:37:0d:58:74:
c7:43:2d:04:ac:74:91:36:8c:59:d5:a0:1a:3b:f5:92:9c:7b:
21:f3:71:1e:ab:59:0d:a6:07:98:77:ed:bf:e5:eb:a6:0f:a7:
71:c8:30:ad:f7:6e:5d:b3:98:10:eb:89:4d:ee:d1:f9:3a:60:
53:c7:75:24:25:0c:53:b0:14:80:f7:1f:bf:37:b5:68:77:fb:
ff:f0:57:93:59:6c:43:a1:f6:e7:9c:f0:80:4a:e6:03:39:b6:
82:cc:62:39:32:39:7a:b6:0d:c6:7f:69:28:94:1b:40:0a:8d:
7d:54:9f:a7:1c:91:dc:0d:2f:23:83:67:a0:2a:69:8d:ef:4b:
a8:c9:16:e9:b0:d2:7f:b5:5c:d3:42:3d:ed:ce:37:e2:53:45:
d7:e7:06:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:17 2026 by rpki-client