Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/1lHC3eEb4JgrWUhgQdZGe237xNE.roa
File: 1lHC3eEb4JgrWUhgQdZGe237xNE.roa (raw, json)
Hash identifier: tiibMI6HO4qP8jmiKq9SAdjkuilfWtaVHKPxHUTz4wg=
Subject key identifier: D6:51:C2:DD:E1:1B:E0:98:2B:59:48:60:41:D6:46:7B:6D:FB:C4:D1
Certificate issuer: /CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Certificate serial: 019F236918D280AFD95361DA36092C1019DE
Authority key identifier: F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/1lHC3eEb4JgrWUhgQdZGe237xNE.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.90.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:d2:80:af:d9:53:61:da:36:09:2c:10:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38e7b813e9a33830a13b8c188384c2dc4c75c97
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d651c2dde11be0982b59486041d6467b6dfbc4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:c5:20:b7:66:94:d9:9b:c7:ab:15:01:a5:
ab:e1:5d:3f:17:db:d9:32:8e:7a:ba:a8:ca:79:56:
ab:23:ae:09:97:f2:f0:23:e1:53:2e:10:bd:ae:3f:
a9:07:08:b9:8c:48:c0:71:44:38:e3:88:ee:7b:f1:
48:86:4b:4d:3e:b8:ad:40:4d:70:87:98:d3:91:9a:
a0:4d:f8:db:10:d9:63:b4:93:d4:ee:32:11:0c:3e:
73:7a:7a:87:b2:b3:3b:37:34:f0:bc:16:df:e4:ff:
d6:91:e0:13:79:89:d1:92:27:6f:04:8d:e1:0a:77:
b2:18:f5:42:3d:3d:be:53:12:66:33:39:b0:29:94:
e2:b9:b4:37:75:ef:a5:9d:fe:cb:9d:56:65:ca:62:
24:53:a2:4a:cf:1d:8b:85:43:4b:80:a0:49:4e:cd:
73:ae:91:c6:23:8c:11:c0:82:c2:5e:a0:9c:f4:5b:
3b:29:5c:70:aa:ce:15:9e:c2:2f:25:15:d4:8d:f2:
91:25:96:17:19:d4:bf:4c:83:ae:18:5f:d3:ae:ab:
8c:f7:e8:96:79:46:54:f8:f0:67:3e:02:49:94:51:
10:e0:5a:81:68:4f:01:83:59:50:a2:9e:c6:74:70:
1d:04:7d:ff:58:a2:38:63:d5:91:ec:1c:3f:4e:7c:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:51:C2:DD:E1:1B:E0:98:2B:59:48:60:41:D6:46:7B:6D:FB:C4:D1
X509v3 Authority Key Identifier:
keyid:F3:8E:7B:81:3E:9A:33:83:0A:13:B8:C1:88:38:4C:2D:C4:C7:5C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8457gT6aM4MKE7jBiDhMLcTHXJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/1lHC3eEb4JgrWUhgQdZGe237xNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/8457gT6aM4MKE7jBiDhMLcTHXJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.119.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4f:8d:a0:40:2f:24:ab:5d:3c:b9:ed:d0:c4:3d:3f:83:63:
da:28:d6:5d:ff:91:0a:f6:c1:2e:cc:e1:39:4d:44:12:55:90:
8c:28:73:75:87:38:1f:de:ea:1b:71:c5:67:1c:f2:90:b2:f2:
9e:cc:4c:29:81:81:c3:2a:82:0e:2e:35:ad:e1:9c:65:e3:38:
99:dd:f5:f4:3e:de:29:8e:97:f4:af:1b:90:d6:a5:86:17:53:
80:dc:b8:48:84:77:78:22:c9:e9:1b:d7:f7:cf:bf:3a:a2:83:
d8:b8:c4:9a:4a:46:3f:18:55:d3:b1:2d:5f:93:0f:c7:24:5b:
9e:9c:c6:71:49:6a:8f:ae:cd:2b:15:6a:68:84:08:75:96:46:
4d:0b:9f:a9:2d:fc:e1:be:b4:43:75:f7:a3:c1:61:12:8b:f2:
45:97:ac:b0:24:44:df:25:47:d2:32:96:c8:9f:ee:fa:de:9d:
74:d3:81:28:96:50:e2:70:00:64:b4:4f:c5:f4:96:77:d0:7b:
44:11:63:24:c2:bb:80:d1:2b:a4:fc:2b:2c:1a:c6:5c:06:9c:
42:c0:ee:47:57:00:cf:33:7d:4b:c4:46:da:dd:26:f2:e5:fc:
07:ff:1a:52:0b:f9:f5:4f:66:30:8b:74:68:d4:db:85:83:3f:
5b:ee:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:13 2026 by rpki-client