Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa
File: FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa (raw, json)
Hash identifier: cZLJ2r1Doel5lpVBvhmnLBua06MQetotpEsjgD1nP28=
Subject key identifier: 16:B0:C6:AA:D0:25:49:D8:78:C3:A1:A7:C5:D9:33:4D:DE:DB:1D:DF
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 019CDCE8815DA5D3A16A85879DDBC81B3712
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa
Signing time: Wed 11 Mar 2026 12:39:10 +0000
ROA not before: Wed 11 Mar 2026 12:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 378
IP address blocks: 128.139.0.0/16 maxlen: 24
128.139.0.0/17 maxlen: 17
128.139.4.0/24 maxlen: 24
128.139.6.0/24 maxlen: 24
128.139.7.0/24 maxlen: 24
128.139.128.0/17 maxlen: 17
128.139.171.0/24 maxlen: 24
128.139.199.0/24 maxlen: 24
128.139.200.0/24 maxlen: 24
132.78.0.0/16 maxlen: 16
185.115.212.0/22 maxlen: 22
192.114.0.0/21 maxlen: 21
192.114.0.0/24 maxlen: 24
192.114.1.0/24 maxlen: 24
192.114.2.0/24 maxlen: 24
192.114.16.0/21 maxlen: 21
192.114.48.0/21 maxlen: 21
192.114.49.0/24 maxlen: 24
192.114.50.0/24 maxlen: 24
192.114.56.0/22 maxlen: 22
192.114.60.0/23 maxlen: 23
192.114.92.0/22 maxlen: 22
192.114.96.0/20 maxlen: 20
192.114.100.0/24 maxlen: 24
192.114.101.0/24 maxlen: 24
192.114.102.0/24 maxlen: 24
192.114.124.0/22 maxlen: 22
192.114.128.0/20 maxlen: 20
192.114.192.0/18 maxlen: 18
192.115.32.0/20 maxlen: 20
192.115.40.0/24 maxlen: 24
192.115.46.0/24 maxlen: 24
192.115.64.0/22 maxlen: 22
192.115.164.0/22 maxlen: 22
192.115.168.0/21 maxlen: 21
192.115.192.0/21 maxlen: 21
192.117.80.0/20 maxlen: 20
2001:bf8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:e8:81:5d:a5:d3:a1:6a:85:87:9d:db:c8:1b:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Mar 11 12:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16b0c6aad02549d878c3a1a7c5d9334ddedb1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:86:81:56:a2:dd:f1:42:12:85:4d:40:f2:
32:ee:02:48:f4:ca:cc:aa:f4:3f:a9:b8:62:f0:85:
6a:f3:33:19:aa:89:b9:ea:27:db:2e:92:b7:e1:f9:
fa:44:b8:21:50:f3:c0:67:10:c5:e1:c4:e9:62:82:
39:01:ac:03:82:14:76:e3:15:da:75:f3:4d:a8:61:
6c:df:55:5b:cf:c4:88:83:f5:57:91:e8:b6:00:ff:
69:38:f1:d2:4d:4d:86:b0:18:8d:28:98:19:08:cc:
8e:3d:e2:f4:e7:c0:ea:43:98:34:a7:d2:86:27:33:
11:82:cd:35:51:f2:7c:da:e7:4c:88:5f:51:fd:66:
ea:95:5b:ae:76:da:d0:7e:d8:d1:1a:7f:1b:8f:ab:
3b:70:a0:95:71:91:01:2d:52:e0:0b:22:b8:3d:5a:
29:37:f8:72:cd:38:3d:47:66:e9:bd:5e:a8:00:93:
3a:e9:95:24:8e:67:d8:bb:cb:6e:83:4d:c0:15:1c:
46:d0:0b:e8:23:fb:9c:1d:ac:0b:bb:be:39:f5:29:
f2:35:4c:03:13:c6:ae:43:f6:13:d3:68:9e:04:d6:
8f:a3:0f:72:7e:f2:11:f6:fc:01:c6:31:1e:4d:d2:
dc:79:b4:2a:d0:60:30:02:75:0f:f7:e1:0a:ce:83:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:C6:AA:D0:25:49:D8:78:C3:A1:A7:C5:D9:33:4D:DE:DB:1D:DF
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FrDGqtAlSdh4w6GnxdkzTd7bHd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
132.78.0.0/16
185.115.212.0/22
192.114.0.0/21
192.114.16.0/21
192.114.48.0-192.114.61.255
192.114.92.0-192.114.111.255
192.114.124.0-192.114.143.255
192.114.192.0/18
192.115.32.0/20
192.115.64.0/22
192.115.164.0-192.115.175.255
192.115.192.0/21
192.117.80.0/20
IPv6:
2001:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
87:e0:c0:bc:af:34:3b:ba:50:a0:7c:18:9a:16:28:dd:0f:35:
f4:ac:c4:90:5d:c2:2e:fa:f8:79:c0:9b:81:b0:fd:27:72:be:
4c:e4:a9:a8:97:97:93:ea:a7:7d:29:55:8c:02:e7:31:a5:ac:
53:7b:e9:c3:74:fc:02:c3:6a:35:e6:0a:89:ac:fe:65:bc:68:
42:47:b4:c5:a3:43:1b:0e:e8:cc:bc:72:e6:ee:d6:62:88:0c:
0a:8e:30:d1:40:c8:73:9f:c2:04:0a:fa:7d:46:17:4f:7c:a5:
f2:cd:c0:bf:81:69:ed:ab:34:35:6b:fb:32:0a:bf:cc:06:35:
2c:76:fc:12:ca:a2:a1:21:32:48:93:91:3e:49:2f:50:ce:5d:
1a:90:b8:11:0f:37:00:25:d1:d5:62:e9:7a:7d:18:dd:bd:ee:
ba:73:8d:f1:05:c4:f1:cb:12:21:70:50:90:10:44:c7:d9:fb:
94:d8:ee:2a:82:5c:de:7b:0f:9f:16:46:55:e0:2b:ec:8e:90:
fd:9a:46:4e:e9:05:1e:c6:ba:20:f4:fb:ca:14:8a:5e:ab:e3:
5f:b8:d6:bc:a7:ad:a7:ce:72:d7:88:2c:c2:91:62:4a:01:06:
6b:a1:84:26:88:ca:57:a7:d0:9f:8e:be:4a:59:72:c3:2a:9a:
36:cf:da:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 19:42:17 2026 by rpki-client