Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/L_7j6XipV_rl9hNUiOHj4WxMSmo.roa
File: L_7j6XipV_rl9hNUiOHj4WxMSmo.roa (raw, json)
Hash identifier: z3a3VYcxFpYn9ODiZyLM9UwhT9JBwpNbCVANtU3EGAU=
Subject key identifier: 2F:FE:E3:E9:78:A9:57:FA:E5:F6:13:54:88:E1:E3:E1:6C:4C:4A:6A
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 01A115DFBB97268B11C997C401F456CA073A
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/L_7j6XipV_rl9hNUiOHj4WxMSmo.roa
Signing time: Wed 07 Oct 2026 10:19:06 +0000
ROA not before: Wed 07 Oct 2026 10:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49436
IP address blocks: 185.250.168.0/22 maxlen: 22
195.42.158.0/23 maxlen: 23
195.43.80.0/23 maxlen: 23
2a0c:f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:df:bb:97:26:8b:11:c9:97:c4:01:f4:56:ca:07:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Oct 7 10:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ffee3e978a957fae5f6135488e1e3e16c4c4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:26:d5:af:19:69:bb:b5:f1:7a:ac:97:ef:
36:dc:62:29:bc:65:b2:02:44:e6:e5:66:b4:a5:56:
de:4b:a0:26:b1:b5:97:6d:6a:fd:40:01:f9:e6:f0:
68:33:d1:9e:b1:8e:56:f0:32:da:ac:d2:f5:ca:d4:
19:4d:4e:b0:c2:7a:73:a5:3a:10:d2:a8:ab:ef:f4:
ea:23:8b:d5:ce:eb:f1:b7:44:fd:60:f4:f5:d1:f2:
ea:d4:59:3e:06:5e:fd:45:80:67:d3:d3:02:bc:62:
6a:bd:b7:5d:a4:2f:3a:bf:79:7d:ad:bb:e8:5c:f7:
89:b7:66:13:f3:cc:73:49:75:3a:71:e9:3c:07:2f:
36:18:7f:00:63:a1:8e:c9:8e:06:e1:43:0b:c0:23:
60:27:d8:b8:4c:ea:e9:25:fd:75:79:e0:b9:cc:ea:
5b:e9:35:cf:5a:fd:5b:d8:07:df:bd:81:5f:98:ce:
35:67:5d:79:ee:e2:d8:5e:88:24:3f:e7:c9:be:cc:
30:47:06:37:da:2e:aa:3f:ee:17:1d:8a:e3:62:37:
af:33:b9:f2:50:cc:24:4c:a3:11:29:b2:a6:55:3d:
3b:1f:11:94:ea:e0:69:1b:a4:e2:2a:0d:c5:00:f1:
28:51:df:03:49:52:db:e2:e5:ac:b0:54:be:54:89:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:E3:E9:78:A9:57:FA:E5:F6:13:54:88:E1:E3:E1:6C:4C:4A:6A
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/L_7j6XipV_rl9hNUiOHj4WxMSmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.168.0/22
195.42.158.0/23
195.43.80.0/23
IPv6:
2a0c:f47::/32
Signature Algorithm: sha256WithRSAEncryption
75:ef:e8:72:32:99:1e:a0:d5:85:f2:41:75:14:bc:58:87:19:
ef:03:e2:d9:6c:4f:33:d8:29:89:08:ab:d1:ab:4f:49:da:13:
80:8d:bc:b3:e0:c6:2f:54:fd:4d:4e:b7:9e:ec:50:37:db:02:
54:9f:ab:51:28:64:a1:84:69:bc:67:fa:24:de:c6:fa:48:38:
03:d8:f3:9e:83:31:dc:6e:19:a8:aa:47:76:cb:d5:e9:75:4d:
90:06:9f:8e:1e:d3:22:3d:01:73:3d:0b:c2:fe:f6:b0:b3:28:
8f:58:37:c6:eb:40:d8:48:0a:3c:15:70:ca:ae:4a:9e:83:89:
92:8a:5d:cb:a4:92:4c:9d:99:be:85:b9:b8:03:eb:20:a4:19:
12:15:bd:e3:de:d1:0d:3d:0e:09:e4:ce:d5:0c:ab:fd:f7:fb:
04:b2:2f:fb:f9:0f:28:24:33:e5:4c:54:0e:33:51:18:93:17:
d4:07:8a:7e:28:31:14:c1:1f:04:7e:d7:81:65:02:a7:c1:1d:
a3:c6:85:ee:7d:be:d8:95:3f:a6:a6:5e:98:6a:2c:f7:a4:14:
89:61:1f:84:ad:a3:44:bd:34:31:a3:90:a5:36:72:c0:f6:55:
72:f4:56:8a:06:9b:21:91:c0:21:9c:a4:96:1e:a6:ca:0f:02:
d6:37:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:12 2026 by rpki-client