Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/fk1NDywalDt7uylAx-JbeK2KndA.roa
File: fk1NDywalDt7uylAx-JbeK2KndA.roa (raw, json)
Hash identifier: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=
Subject key identifier: 7E:4D:4D:0F:2C:1A:94:3B:7B:BB:29:40:C7:E2:5B:78:AD:8A:9D:D0
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 019F84C6E273DD33C5E874AA84FD2F626C57
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/fk1NDywalDt7uylAx-JbeK2KndA.roa
Signing time: Tue 21 Jul 2026 13:04:14 +0000
ROA not before: Tue 21 Jul 2026 13:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 5.23.0.0/19 maxlen: 19
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
80.231.112.0/21 maxlen: 21
80.231.136.0/24 maxlen: 24
80.231.155.0/24 maxlen: 24
80.231.176.0/21 maxlen: 21
80.231.187.0/24 maxlen: 24
80.231.202.0/24 maxlen: 24
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
195.219.38.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
195.219.41.0/24 maxlen: 24
195.219.43.0/24 maxlen: 24
195.219.44.0/24 maxlen: 24
195.219.45.0/24 maxlen: 24
195.219.47.0/24 maxlen: 24
195.219.96.0/24 maxlen: 24
195.219.168.0/23 maxlen: 23
195.219.204.0/24 maxlen: 24
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
2a01:3e0::/29 maxlen: 29
2a01:3e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c6:e2:73:dd:33:c5:e8:74:aa:84:fd:2f:62:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jul 21 13:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e4d4d0f2c1a943b7bbb2940c7e25b78ad8a9dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:2e:25:ca:7f:e8:43:f9:47:18:cd:02:e4:
a6:b9:2b:b2:e2:b0:1f:9b:39:8f:3b:73:c4:b6:57:
26:89:45:99:5f:c1:f6:1b:7c:6f:06:3f:ce:ad:97:
4d:0d:02:28:1c:ff:da:e7:12:b0:5f:72:11:a0:41:
92:16:af:ae:74:96:49:42:73:72:80:b3:bc:6d:80:
b6:69:58:3b:5e:a4:61:48:00:4f:5a:fd:25:a3:a1:
04:51:3b:21:d6:bb:d1:44:3e:9e:b0:ce:e3:37:f0:
de:f3:9d:c4:17:5e:a5:ee:ce:01:62:fe:8b:4c:e7:
b4:c8:1f:6f:b4:3b:39:2a:ac:a4:a1:92:0c:c1:7d:
4c:cf:74:37:0c:ea:23:b1:aa:7e:c3:df:a4:a1:c7:
56:bb:ff:f5:06:03:12:33:1f:e4:26:18:21:9c:2e:
d6:b2:c7:b3:8e:8e:b6:99:7b:76:ea:7c:a3:ac:ea:
fb:72:53:ef:eb:96:39:b7:1a:4c:94:93:eb:35:04:
6c:1a:89:ae:ed:b8:f1:08:e0:57:ee:81:08:cc:06:
ee:51:c3:70:25:92:73:6c:09:31:e1:49:7b:d4:de:
7d:40:e3:80:ee:98:a6:f5:e5:61:80:72:86:52:21:
2d:ec:1d:5d:8c:fb:c9:ac:37:c4:48:b6:e6:b6:53:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4D:4D:0F:2C:1A:94:3B:7B:BB:29:40:C7:E2:5B:78:AD:8A:9D:D0
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/fk1NDywalDt7uylAx-JbeK2KndA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
21:73:6d:ed:21:c8:f4:53:54:5f:9a:c1:61:d1:91:63:6c:7a:
71:bb:9f:7b:80:05:e4:ea:86:ae:72:6c:06:4f:1e:64:1d:96:
76:fa:c6:f6:09:18:50:70:7f:d1:98:21:b3:d9:84:0b:be:91:
d2:73:65:a8:80:f3:d7:04:62:35:2f:3e:6a:17:9d:6a:f3:f1:
2f:42:7b:ba:4d:31:db:ab:ab:5b:f5:66:ee:b7:86:ce:42:a2:
fd:f5:2c:dc:b0:cd:07:1b:52:a6:b6:7d:b2:e7:5d:db:3e:cd:
cd:40:16:5f:33:b9:73:78:41:16:0e:73:4b:02:0d:2e:2c:0e:
91:14:d3:32:f5:01:26:c2:97:80:b0:ef:eb:a6:9e:b4:50:00:
f2:42:4c:f7:dd:db:11:38:57:a2:1a:cd:e4:9d:f0:e7:9e:42:
c3:38:5e:fe:fb:a5:f6:5c:cc:59:e7:8c:57:32:33:6e:e2:23:
e2:75:9c:9c:44:d4:b8:75:92:63:39:ff:6f:14:e5:1b:b3:74:
3c:f1:ac:11:03:a1:c1:04:65:01:bb:02:5e:54:e3:31:4a:dc:
ee:e3:a5:9b:4a:76:93:1d:a6:75:05:e0:39:4f:8c:b5:f5:a9:
66:48:17:d9:a7:fc:98:98:86:98:bc:bb:89:c7:c2:29:7e:97:
0e:f8:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client