Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/fXnZtaUDrh43uq-zC1mqapT0DEg.roa
File: fXnZtaUDrh43uq-zC1mqapT0DEg.roa (raw, json)
Hash identifier: 6JqlPygY2vobl9zvXxHng2bcbozRsoYkuHDvh0Ax49Y=
Subject key identifier: 7D:79:D9:B5:A5:03:AE:1E:37:BA:AF:B3:0B:59:AA:6A:94:F4:0C:48
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019FDB926C937083EDF954D37C133A1BBA30
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/fXnZtaUDrh43uq-zC1mqapT0DEg.roa
Signing time: Fri 07 Aug 2026 09:33:53 +0000
ROA not before: Fri 07 Aug 2026 09:33:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 194.32.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:92:6c:93:70:83:ed:f9:54:d3:7c:13:3a:1b:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Aug 7 09:33:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d79d9b5a503ae1e37baafb30b59aa6a94f40c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:a5:9e:1a:55:65:e8:4b:68:b8:85:39:69:
45:c0:4f:1e:47:a8:5d:8e:7e:b2:62:c8:e4:59:41:
bb:2a:03:50:cf:5f:ce:8d:0d:78:ab:37:d2:8b:52:
bc:d0:d1:14:14:82:19:db:ff:70:21:c2:41:48:9b:
c6:e1:4e:be:e9:b3:0f:45:f3:7e:30:39:8d:1c:90:
05:47:09:59:c9:97:65:ea:84:50:da:50:5b:e6:83:
1f:b0:0d:d9:fe:4b:0f:5d:1e:33:8b:0f:5c:dd:a0:
ab:64:c9:b4:7c:40:ba:c6:8c:61:09:5f:45:13:f7:
d9:51:54:8c:8a:00:c1:76:12:28:c3:48:04:7e:fd:
59:9f:f2:7c:80:1d:e4:de:79:66:a5:ec:aa:73:d9:
69:7b:e4:39:73:4b:66:a1:1e:20:c3:cb:9d:e9:43:
29:d3:04:cc:60:e5:e7:cd:fc:51:87:9a:48:47:3c:
8d:99:42:9e:b5:78:99:f3:4a:8b:47:f6:b6:3d:d6:
a1:61:85:f2:38:e1:cc:ab:f5:27:8a:8a:19:a1:43:
b7:39:da:83:f1:32:63:ec:84:51:6c:61:5d:14:af:
d3:5a:f9:25:06:dc:15:e5:8e:8b:6b:5c:ef:08:a8:
73:23:ed:48:ae:12:b9:71:e9:12:df:fa:48:2d:0e:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:79:D9:B5:A5:03:AE:1E:37:BA:AF:B3:0B:59:AA:6A:94:F4:0C:48
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/fXnZtaUDrh43uq-zC1mqapT0DEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:20:7e:01:07:b8:95:36:e1:fa:bf:9c:40:2e:b9:09:8d:
b5:65:cc:9e:83:da:1d:df:80:37:c1:50:ff:19:bb:41:5e:0f:
50:c2:86:c8:e5:15:e5:df:9a:2d:b7:48:1d:9d:5c:aa:c2:61:
db:f9:47:b5:2b:42:6f:1e:71:87:0f:65:82:59:62:97:67:cf:
b8:8e:05:a3:c0:78:20:ea:66:1c:6e:b5:d1:fe:ef:b0:34:30:
6d:93:13:31:18:61:63:6e:c8:ac:82:1c:be:fe:0d:7d:81:2c:
8e:ec:ce:9d:04:2b:25:51:b2:ed:c3:c4:f8:1e:ac:71:00:05:
6c:08:c4:09:16:5a:eb:d3:b0:b8:65:f3:b8:6e:d7:79:48:5d:
ce:d7:65:56:e2:11:7c:28:2b:f6:69:16:74:1d:ca:cf:5a:cb:
3c:2b:a2:27:b2:7e:59:b7:b3:76:9b:5e:f4:53:c5:eb:22:18:
5b:6b:13:0a:38:bf:c6:08:71:bc:8e:98:a3:2a:9a:6a:e1:c5:
a2:9b:81:22:e1:39:31:e8:f3:67:2b:e5:78:4f:bd:7f:2a:8c:
ca:b7:a8:6a:e0:b0:84:a8:6b:43:79:60:1b:f9:2c:0c:0e:59:
4e:89:f5:2b:7c:5e:57:b8:a2:06:15:4d:c2:5e:37:0a:13:40:
85:42:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:36:20 2026 by rpki-client