Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fCONVA_H_y_FKl2oI-QdBfoNtcg.roa
File: fCONVA_H_y_FKl2oI-QdBfoNtcg.roa (raw, json)
Hash identifier: llBQ0AKKP3Wc2EN5oeCCivao/LFC3xd8Q3DVwSI2XVY=
Subject key identifier: 7C:23:8D:54:0F:C7:FF:2F:C5:2A:5D:A8:23:E4:1D:05:FA:0D:B5:C8
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CE30409B21D3E343590CD1033921
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fCONVA_H_y_FKl2oI-QdBfoNtcg.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204154
IP address blocks: 45.86.47.0/24 maxlen: 24
46.17.107.0/24 maxlen: 24
185.172.129.0/24 maxlen: 24
185.200.191.0/24 maxlen: 24
2a04:5201:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ce:30:40:9b:21:d3:e3:43:59:0c:d1:03:39:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c238d540fc7ff2fc52a5da823e41d05fa0db5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:2a:56:61:ba:8f:6b:da:0d:48:cc:95:8b:
c6:c5:7b:43:36:c6:37:e7:57:9a:62:39:55:db:4e:
cb:0c:29:19:4b:95:9b:19:8e:b2:98:93:7f:fa:5b:
35:f9:d7:47:13:da:7c:18:04:90:7a:22:9f:48:02:
32:82:5d:28:29:08:99:eb:fb:c1:ff:a6:9d:26:da:
d7:47:69:c2:82:d2:16:e9:07:4f:50:2a:eb:7a:8c:
ac:6a:64:5c:53:18:66:94:a4:39:e6:a8:b9:e5:5a:
32:69:74:ab:0c:b7:94:d2:98:25:0e:1d:4c:fe:5e:
b3:37:8f:11:cb:03:da:a3:0a:9b:da:85:bb:89:07:
3d:43:7e:91:c3:71:68:ba:8a:a5:c1:d7:51:f0:11:
d4:1b:60:db:bc:0e:d7:33:1b:8d:4c:2a:19:29:36:
69:ca:23:44:cf:b4:82:2b:9e:d4:14:5c:16:ed:91:
a4:1d:5d:0b:68:9c:22:02:23:42:32:de:48:24:72:
61:3a:88:c0:f5:29:e6:1c:f5:d8:9f:23:61:16:02:
d2:d2:e6:96:ca:ab:71:98:ca:08:e4:7b:f6:50:14:
d7:53:d6:8d:0c:3a:00:b6:64:5d:9f:ab:49:07:e2:
b4:4b:24:72:2e:90:99:dd:17:fe:00:b6:6e:eb:db:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:8D:54:0F:C7:FF:2F:C5:2A:5D:A8:23:E4:1D:05:FA:0D:B5:C8
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/fCONVA_H_y_FKl2oI-QdBfoNtcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.47.0/24
46.17.107.0/24
185.172.129.0/24
185.200.191.0/24
IPv6:
2a04:5201:1::/48
Signature Algorithm: sha256WithRSAEncryption
57:ea:93:0a:73:46:26:d3:3e:bb:4a:c6:19:26:0c:85:b8:1a:
22:2e:80:6f:a2:f2:c6:be:fa:fb:13:bc:ef:23:47:ad:79:2e:
7b:3d:21:99:16:e8:c8:d7:62:64:f8:17:fd:a7:ee:d0:14:77:
4e:8f:d3:7d:93:0f:7c:0d:6c:8c:cc:4f:64:f9:e6:04:ef:ab:
1f:33:18:c4:8b:ac:c5:e6:69:ad:16:02:34:1e:aa:81:82:40:
eb:b9:9a:6e:4a:62:6f:84:53:4e:ff:43:ce:db:6b:d5:b0:5b:
5a:83:4b:d7:6a:ca:3f:d7:08:ba:79:be:43:aa:49:cd:b0:35:
d2:87:1a:99:ef:b6:6c:c2:2b:5f:db:5c:a8:6b:c1:50:88:65:
7c:18:d2:bd:f8:55:1a:b7:c8:e6:95:90:dc:02:23:5e:f1:2a:
4b:82:91:64:78:1b:61:c3:cd:cc:43:40:50:fa:07:09:71:fe:
f9:93:29:79:fe:5c:9c:b2:31:c9:5c:81:40:23:ad:20:07:c7:
b5:36:a5:d7:b2:f5:7b:46:dc:af:a2:cd:41:b9:b8:a3:79:b1:
8e:6b:b5:56:d4:56:a4:ca:00:fd:44:cb:9c:c2:be:79:9d:d7:
d3:00:3c:86:3d:1d:c9:cf:29:4a:9d:7e:40:68:f3:7d:57:82:
3a:00:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:29 2026 by rpki-client