Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/1-72PpEScXwzuTjF8EvnQT3x8N9Q.roa
File: 1-72PpEScXwzuTjF8EvnQT3x8N9Q.roa (raw, json)
Hash identifier: YXebJQcUHkP4hnUOqtfiNDtR0tLY7oA5pLaw0h5c9aQ=
Subject key identifier: FB:BD:8F:A4:44:9C:5F:0C:EE:4E:31:7C:12:F9:D0:4F:7C:7C:37:D4
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 01A101FA69A1765D0F57CB4555E4221E5965
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/1-72PpEScXwzuTjF8EvnQT3x8N9Q.roa
Signing time: Sat 03 Oct 2026 13:35:50 +0000
ROA not before: Sat 03 Oct 2026 13:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61327
IP address blocks: 185.11.40.0/22 maxlen: 24
185.42.216.0/22 maxlen: 24
185.42.217.0/24 maxlen: 32
2a03:68c0::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:fa:69:a1:76:5d:0f:57:cb:45:55:e4:22:1e:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Oct 3 13:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbbd8fa4449c5f0cee4e317c12f9d04f7c7c37d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:8b:25:a7:7d:ca:7b:55:c0:bd:e4:b7:b7:
45:1e:6d:fc:65:8b:a3:eb:81:43:8e:8e:3b:4b:a7:
16:5c:0d:08:a7:5d:54:63:0c:80:af:0e:96:8e:65:
5d:84:d9:89:46:8c:52:a9:ae:a5:14:da:4c:92:54:
cc:89:28:ee:fa:ac:bc:8c:50:f0:4b:39:6e:c3:78:
24:b9:5b:57:13:3b:a3:64:35:cb:87:68:1a:d4:c8:
92:9e:b7:a8:08:51:ba:0c:1a:bb:05:e9:9c:b7:55:
e0:f2:fc:b0:2e:48:44:4f:38:1d:b8:b7:55:51:44:
a7:38:19:7a:62:40:5c:4c:6d:7d:8f:d6:53:ed:3c:
26:48:01:96:e2:09:5e:01:58:96:59:d7:e8:db:6f:
f0:03:d3:26:74:6c:db:ca:96:79:1d:1e:f5:b9:35:
30:07:e1:b4:7e:0b:c7:74:43:3d:3a:b1:13:bc:f2:
98:29:c5:89:0a:d8:b7:c4:51:38:f3:a3:ed:a2:c6:
1d:db:65:38:98:7a:57:d4:1c:81:56:2e:e0:3c:98:
69:1a:c8:f6:76:a4:8f:d8:d7:82:a6:81:ad:f6:6d:
4f:5a:c3:b6:73:b1:eb:f3:0a:b5:32:d1:0d:35:b9:
38:43:e4:1b:ba:40:c4:d2:a1:3d:ac:da:09:4c:1e:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:8F:A4:44:9C:5F:0C:EE:4E:31:7C:12:F9:D0:4F:7C:7C:37:D4
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/1-72PpEScXwzuTjF8EvnQT3x8N9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.40.0/22
185.42.216.0/22
IPv6:
2a03:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:8d:af:4b:c4:cd:73:b3:77:48:cf:03:bd:dc:fe:b4:30:1b:
ae:90:f4:c8:61:22:e4:2a:aa:d9:28:f4:77:c3:e7:67:bd:c7:
96:49:ed:83:dd:48:f3:63:81:0a:1b:3e:73:1f:85:1a:6b:82:
cf:11:ff:91:66:5b:d8:c8:45:c7:f1:ed:64:34:aa:bc:6f:07:
34:7b:c8:a9:1e:64:ce:a0:c5:04:52:dc:79:42:e7:c4:75:04:
e5:10:db:5a:9a:a3:5d:2d:c2:a7:e9:7a:2c:fc:75:8e:9b:26:
2d:cb:99:c1:b7:88:ab:dd:36:0b:cc:0d:bb:d5:4a:af:bc:15:
6e:bf:77:e8:e3:45:11:84:b6:9d:f6:2d:e4:7d:ce:ee:77:b0:
d2:45:07:15:3c:80:a3:2c:53:ee:bc:ff:73:ab:63:e6:03:0c:
90:d5:d8:b0:bd:a1:d2:51:e3:12:28:9e:ca:cb:d7:fe:2f:7b:
00:20:3b:3c:ed:0e:f7:c0:30:76:51:e2:35:88:25:59:32:97:
1d:32:16:a3:8f:e0:5d:d9:e9:c4:bc:58:12:f2:a9:35:22:5e:
43:3e:d4:fb:c3:b5:b9:7c:6e:0b:47:88:d8:97:0d:29:8f:e4:
1f:c5:5f:cd:77:29:a0:72:17:b3:ee:1e:56:6d:4c:76:4b:15:
b6:db:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:16:23 2026 by rpki-client