Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/iZHuJcN5SGRqzNew0iuIDSSeFRo.roa
File: iZHuJcN5SGRqzNew0iuIDSSeFRo.roa (raw, json)
Hash identifier: xBLovi5yJfWqWf4uNxOyhNCZnh9Kt/cScch8+xkXzcw=
Subject key identifier: 89:91:EE:25:C3:79:48:64:6A:CC:D7:B0:D2:2B:88:0D:24:9E:15:1A
Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Certificate serial: 019FACDB329B6ECBFD7D5827C68F6107BACE
Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/iZHuJcN5SGRqzNew0iuIDSSeFRo.roa
Signing time: Wed 29 Jul 2026 07:51:14 +0000
ROA not before: Wed 29 Jul 2026 07:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2497
IP address blocks: 79.170.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:db:32:9b:6e:cb:fd:7d:58:27:c6:8f:61:07:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Validity
Not Before: Jul 29 07:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8991ee25c37948646accd7b0d22b880d249e151a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:5d:ef:a9:58:55:7c:7e:3d:14:c9:47:57:
e2:df:a6:fd:22:49:34:5c:c7:23:59:01:2f:af:c8:
3d:e5:a1:17:1d:00:09:13:a5:6e:6f:d2:6e:de:f0:
70:2c:3c:81:a9:53:3b:bd:8b:ac:35:35:bc:55:e5:
c5:38:13:c1:43:04:1f:25:a9:fe:ac:2f:55:cd:e5:
2c:b9:f7:3b:22:e8:05:4a:59:f3:af:2d:7f:00:5f:
52:0a:f0:20:6a:d9:b6:4b:6f:d5:93:72:27:a2:0d:
54:66:54:b4:a6:d6:d8:6f:62:1e:4d:06:3a:9e:ab:
62:ce:76:62:18:96:11:ec:c6:47:d5:3e:c8:82:ef:
77:56:63:69:8a:97:95:f5:35:d0:18:cc:85:6c:6c:
0f:6f:51:94:e8:d9:36:69:9c:20:20:fc:76:c8:3d:
54:a3:0c:97:cd:00:fe:77:73:af:6d:ce:45:b9:d4:
22:53:7b:b3:60:9b:8a:9f:c2:89:32:11:27:87:26:
3d:ba:57:29:32:a7:33:dd:25:e4:8a:9f:59:4b:b4:
77:58:4e:cd:a1:1d:42:93:44:73:e0:e6:6d:6f:b5:
25:34:65:5b:d3:b6:0c:09:89:d4:fc:10:a8:50:d2:
04:70:0f:04:dd:96:3e:60:85:0a:d1:cc:8d:02:27:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:91:EE:25:C3:79:48:64:6A:CC:D7:B0:D2:2B:88:0D:24:9E:15:1A
X509v3 Authority Key Identifier:
keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/iZHuJcN5SGRqzNew0iuIDSSeFRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.199.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d9:03:e6:ba:d4:ea:7a:ce:59:ab:30:7d:e5:aa:0e:30:be:
bb:9c:0d:3c:7c:60:03:cc:2d:6d:ca:68:c0:48:1b:c4:32:db:
eb:64:2b:44:69:4d:14:41:83:41:c7:f4:30:7c:76:0e:c7:c3:
d3:04:12:a5:fe:55:28:b1:2b:8f:fd:aa:0c:dd:9c:d2:9e:54:
bb:a9:93:9d:8a:20:52:26:a7:3a:7a:73:66:77:b0:b4:bd:d4:
ba:b0:11:42:04:06:7d:75:73:37:7d:a5:db:de:1d:1a:28:7e:
26:3c:57:38:0d:2d:19:69:4c:a5:c0:30:ca:79:83:3e:fd:65:
45:70:9d:7f:d0:51:24:00:74:d6:94:18:8b:a1:50:c2:b0:40:
3c:92:49:c7:56:20:1f:eb:4c:63:11:3d:27:d4:c1:e7:d2:c3:
64:55:81:6c:3d:97:8e:39:3d:b9:ab:9c:7b:bb:e2:96:8d:c6:
a9:49:6b:05:b6:a1:af:44:28:9d:e2:3b:e5:16:f1:8c:44:14:
f6:fa:4f:38:b4:89:ac:55:fc:e1:a4:46:fc:ef:5e:e2:f6:94:
f1:1d:06:2f:56:27:ca:8f:10:55:43:f6:4c:df:bc:a5:4d:16:
18:1d:df:96:df:5a:e1:e5:78:76:94:b0:1b:99:5f:4b:f5:59:
58:89:64:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 01:20:30 2026 by rpki-client