Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/f1R_KVw6pDr-4luASuZxDgTRs54.roa
File: f1R_KVw6pDr-4luASuZxDgTRs54.roa (raw, json)
Hash identifier: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=
Subject key identifier: 7F:54:7F:29:5C:3A:A4:3A:FE:E2:5B:80:4A:E6:71:0E:04:D1:B3:9E
Certificate issuer: /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial: 019F236915EA558E20CA95A2D05A744CB379
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/f1R_KVw6pDr-4luASuZxDgTRs54.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 185.39.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:ea:55:8e:20:ca:95:a2:d0:5a:74:4c:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f547f295c3aa43afee25b804ae6710e04d1b39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:a4:72:c6:96:2c:f5:a9:61:0b:6e:6f:12:
92:32:ce:7b:0d:f5:b6:a5:27:cd:9f:7f:6b:fc:28:
c9:1c:85:e7:37:f8:07:95:30:01:7b:6c:d9:99:b3:
98:d9:fd:d4:35:e3:d2:4a:6f:d7:f3:68:a1:96:9c:
20:88:a7:df:c7:77:ee:a1:36:8b:d7:52:5b:8a:a3:
a5:f6:a8:cc:22:bd:db:e7:d7:21:ef:64:bc:76:f0:
7e:8e:ba:d7:47:0e:fb:fe:15:1e:9d:54:93:83:d6:
57:0f:c7:f2:98:6e:d1:89:91:01:91:95:85:d3:0f:
a3:fa:de:af:bb:5e:66:22:26:af:93:ea:6d:d5:f5:
2b:5d:11:25:80:e3:a7:37:cd:6c:d2:8a:c0:79:03:
80:35:07:eb:09:f8:6a:e6:5a:62:44:ff:18:0d:71:
67:97:2b:c9:f2:ae:ce:55:85:9b:d0:c0:8c:3a:3d:
c6:a0:9b:1d:a2:27:9f:f7:90:0a:10:74:30:06:4a:
01:11:ad:73:c4:66:11:c0:76:38:e3:b8:f7:58:93:
9d:76:b6:3b:11:a0:d8:ad:e7:75:0c:8a:94:f7:c2:
55:69:a4:97:f5:c4:b2:21:a8:e4:00:09:ac:74:22:
ac:6f:97:15:b8:e8:c6:51:ea:74:be:8d:6f:96:d8:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:7F:29:5C:3A:A4:3A:FE:E2:5B:80:4A:E6:71:0E:04:D1:B3:9E
X509v3 Authority Key Identifier:
keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/f1R_KVw6pDr-4luASuZxDgTRs54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ca:34:74:99:4d:cb:1e:5d:50:68:2d:67:08:ab:c6:b1:d4:
38:4c:22:6b:ad:51:3b:0f:4f:9c:a9:d3:b2:9b:82:ec:a2:11:
d5:0d:d0:04:7d:ae:95:89:32:ad:ca:27:22:4c:35:b1:b6:7b:
90:ca:32:44:2d:7a:08:ca:58:bf:8a:44:0a:a5:f1:83:e5:ac:
6b:5b:9c:33:f3:2b:d7:63:0d:86:02:a8:86:06:19:c8:09:4e:
1a:f4:96:66:ab:2d:62:3c:f4:59:6e:35:cb:4e:98:78:b4:2d:
9e:68:f2:dd:7d:c7:2f:37:78:e1:c4:75:88:d9:7c:b9:12:3b:
47:90:65:62:a8:6d:be:70:04:f9:42:93:22:94:21:0e:7c:de:
86:fd:84:38:ba:e9:fa:a7:5f:dc:8f:d3:60:ae:ff:65:bd:0c:
f5:98:f1:6f:77:fd:aa:22:5a:20:08:63:da:84:dd:79:ac:d1:
be:80:20:14:a9:d3:e8:83:17:8b:2f:b4:27:03:8a:59:2c:75:
da:c2:c3:fc:34:d5:28:07:83:a8:ac:8f:17:0b:af:0b:c7:ec:
6d:9f:61:2a:69:e6:c8:eb:e9:1e:0a:01:0a:21:ec:81:2c:c2:
db:4c:78:e5:e4:80:19:ac:ed:ad:0c:d5:8c:78:94:13:6d:a6:
29:cb:6a:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRXqVY4gypWi0Fp0TLN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YTk1MmVmMmQ3MTMzNDg4NzgwNzg0NTM4ZGI2ZGI4NjJl
YzA0MDgwHhcNMjYwNzAyMTUxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjU0N2YyOTVjM2FhNDNhZmVlMjViODA0YWU2NzEwZTA0ZDFiMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MykcsaWLPWpYQtubxKSMs57DfW2
pSfNn39r/CjJHIXnN/gHlTABe2zZmbOY2f3UNePSSm/X82ihlpwgiKffx3fuoTaL
11JbiqOl9qjMIr3b59ch72S8dvB+jrrXRw77/hUenVSTg9ZXD8fymG7RiZEBkZWF
0w+j+t6vu15mIiavk+pt1fUrXRElgOOnN81s0orAeQOANQfrCfhq5lpiRP8YDXFn
lyvJ8q7OVYWb0MCMOj3GoJsdoief95AKEHQwBkoBEa1zxGYRwHY447j3WJOddrY7
EaDYred1DIqU98JVaaSX9cSyIajkAAmsdCKsb5cVuOjGUep0vo1vltiBRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9UfylcOqQ6/uJbgErmcQ4E0bOeMB8GA1UdIwQY
MBaAFOepUu8tcTNIh4B4RTjbbbhi7AQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTZsUzd5MXhNMGlIZ0hoRk9OdHR1R0xzQkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEt
ODRjY2YzNDIwMjg2LzEvZjFSX0tWdzZwRHItNGx1QVN1WnhEZ1RSczU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84NTEzY2QtYWFjNy00NjZkLWEwMzEtODRjY2YzNDIwMjg2
LzEvNTZsUzd5MXhNMGlIZ0hoRk9OdHR1R0xzQkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSeYMA0G
CSqGSIb3DQEBCwUAA4IBAQBayjR0mU3LHl1QaC1nCKvGsdQ4TCJrrVE7D0+cqdOy
m4LsohHVDdAEfa6ViTKtyiciTDWxtnuQyjJELXoIyli/ikQKpfGD5axrW5wz8yvX
Yw2GAqiGBhnICU4a9JZmqy1iPPRZbjXLTph4tC2eaPLdfccvN3jhxHWI2Xy5EjtH
kGViqG2+cAT5QpMilCEOfN6G/YQ4uun6p1/cj9Ngrv9lvQz1mPFvd/2qIlogCGPa
hN15rNG+gCAUqdPogxeLL7QnA4pZLHXawsP8NNUoB4OorI8XC68Lx+xtn2EqaebI
6+keCgEKIeyBLMLbTHjl5IAZrO2tDNWMeJQTbaYpy2ry
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:30 2026 by rpki-client