Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/f8fB2-Qf4SVzzOW_JDZYcxjYmyY.roa
File: f8fB2-Qf4SVzzOW_JDZYcxjYmyY.roa (raw, json)
Hash identifier: eO+EEySjW//KqJ+fRXV+nxHW9pPSdPHmoE13mfUn/o4=
Subject key identifier: 7F:C7:C1:DB:E4:1F:E1:25:73:CC:E5:BF:24:36:58:73:18:D8:9B:26
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 01A05910C980486A0D3503D20873C736CF64
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/f8fB2-Qf4SVzzOW_JDZYcxjYmyY.roa
Signing time: Mon 31 Aug 2026 18:24:27 +0000
ROA not before: Mon 31 Aug 2026 18:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7843
IP address blocks: 157.5.48.0/22 maxlen: 22
157.5.52.0/22 maxlen: 22
157.5.56.0/22 maxlen: 22
157.5.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:10:c9:80:48:6a:0d:35:03:d2:08:73:c7:36:cf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Aug 31 18:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc7c1dbe41fe12573cce5bf2436587318d89b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:23:2a:bc:d0:6e:da:f5:f2:89:34:34:68:59:
25:e8:f1:6f:68:49:32:b0:82:a0:26:c8:4c:c1:3d:
8d:74:bd:77:93:8d:1a:3b:3f:a8:d8:1b:b6:8c:9a:
17:f8:64:28:29:55:59:ac:1a:39:0b:21:73:1a:a7:
ff:a7:35:25:72:4b:30:8e:02:1d:2c:ca:dc:ac:c9:
a7:a8:8a:72:a9:97:03:74:70:cc:7a:a6:43:bd:eb:
9a:de:e0:65:e6:46:6d:f3:a3:87:ce:44:18:51:42:
fd:5c:d8:6e:c4:7b:40:65:00:0a:23:77:52:2a:dc:
a8:6c:63:52:4c:44:b3:8a:e1:d6:0e:ba:65:71:ff:
39:fc:be:fb:6d:e5:ae:1c:f5:5b:eb:dd:20:a7:69:
3c:e5:6d:bc:33:6c:9a:33:e6:6a:53:5e:40:d6:96:
38:f8:b3:cc:60:d5:06:3f:ba:28:c0:b5:1e:8e:b6:
7e:76:87:a0:00:a6:b1:4b:ed:c1:85:12:00:9c:71:
a0:34:7a:99:96:b8:bf:70:3b:5f:65:9e:e0:37:77:
12:0f:ef:f4:4b:77:8a:ff:82:c5:69:7b:c2:02:6f:
8e:31:34:b2:2f:c2:17:35:bd:a2:96:c9:f3:6c:8d:
07:a1:74:d2:21:81:76:d2:6b:81:ff:c7:ba:ec:81:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C7:C1:DB:E4:1F:E1:25:73:CC:E5:BF:24:36:58:73:18:D8:9B:26
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/f8fB2-Qf4SVzzOW_JDZYcxjYmyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:c4:d7:3d:ff:2d:12:4c:49:18:11:86:ab:75:ba:05:c3:9d:
e4:6b:4a:24:11:a5:0c:ff:77:f0:ae:80:79:3e:b1:04:9d:cd:
b7:4c:8b:99:c6:36:d5:00:ca:08:7c:2d:fa:57:22:dd:60:20:
e1:c1:54:6a:2f:c7:a0:2f:78:07:a7:97:79:aa:92:6e:84:4f:
86:e9:15:b8:f3:0d:b7:0b:5f:e0:12:15:13:2c:e1:ca:8e:7d:
2a:7e:6c:ae:12:0b:a3:ff:d5:e9:f9:be:37:8d:7b:37:51:fb:
25:b2:9b:b4:15:4e:74:9c:c8:9e:0b:9e:9f:e4:ee:dc:2c:36:
4d:26:cd:1a:44:6c:3d:03:fe:cb:47:b8:15:2c:f4:37:1c:bc:
44:1a:d3:94:fa:3a:43:49:1a:f2:df:47:a2:ef:87:69:94:c3:
ea:a4:d7:4a:44:44:70:f6:f7:35:97:fb:7f:29:02:e9:c2:1c:
36:75:fa:87:47:27:13:5e:d8:63:4c:48:fb:97:52:d6:6a:b3:
27:7c:10:f9:91:bf:93:49:ce:c7:25:be:c1:bf:72:95:7b:2b:
54:1f:1f:ea:72:ca:bc:f0:35:d6:fc:e5:76:f5:6c:32:60:8d:
4b:c7:66:29:15:00:9f:1d:eb:b3:e4:09:5f:74:0a:84:b5:e8:
1d:cf:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:53:14 2026 by rpki-client