Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/NF7wh5XtVzQFP8XtslPI32haJaQ.roa
File: NF7wh5XtVzQFP8XtslPI32haJaQ.roa (raw, json)
Hash identifier: 5uh23E8ZYXbA1nwKA2QCUC1wPKEuO5kBSIdtC8OVFYk=
Subject key identifier: 34:5E:F0:87:95:ED:57:34:05:3F:C5:ED:B2:53:C8:DF:68:5A:25:A4
Certificate issuer: /CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Certificate serial: 019F23685D732443CAAD0BAF1067303EC886
Authority key identifier: 1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/NF7wh5XtVzQFP8XtslPI32haJaQ.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48417
IP address blocks: 193.169.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:73:24:43:ca:ad:0b:af:10:67:30:3e:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f77dad2ad7eba8140de334aafafdf0c8416bc8a
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=345ef08795ed5734053fc5edb253c8df685a25a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:9d:2e:a4:a7:b1:7e:8b:4d:75:1a:58:8a:
bc:52:66:6e:5e:92:59:c8:0b:05:87:89:94:87:69:
10:73:a1:ee:8e:de:c5:e1:bb:6f:ce:80:5c:dc:0e:
29:e9:87:30:d6:75:5c:16:c6:11:24:9f:5e:8c:a9:
ed:65:66:75:b7:cb:b5:20:de:22:fe:86:1d:b1:fa:
a8:d0:d4:ec:57:ca:9c:27:8b:d6:ab:ca:d8:42:a3:
5a:8d:7c:a9:72:91:db:c7:08:6c:fa:23:60:d1:01:
20:f9:ef:5e:19:34:82:12:e4:e5:a1:d1:81:11:a3:
4f:75:4a:23:a7:e6:a2:7e:c2:ff:0b:fa:f1:bd:f0:
f4:e2:de:60:0f:23:02:a8:f5:55:29:b6:01:15:d3:
d2:b1:9b:23:ae:63:b8:2d:4b:5b:33:53:45:3d:66:
c7:b9:4c:3d:e9:f3:d6:eb:71:50:50:c8:5f:94:1b:
01:86:e6:3f:b6:3f:ef:2c:4d:4f:58:b1:4d:75:c9:
e6:f9:2f:96:8f:64:02:8a:93:18:7b:e6:8d:b7:cd:
c2:4e:08:67:38:6a:e2:b3:2f:9a:09:6e:b6:bf:a2:
44:4d:0c:5a:80:ea:16:be:b2:60:10:13:f2:41:fe:
a3:cd:8f:be:5e:6a:f7:ac:32:49:8b:26:50:31:19:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5E:F0:87:95:ED:57:34:05:3F:C5:ED:B2:53:C8:DF:68:5A:25:A4
X509v3 Authority Key Identifier:
keyid:1F:77:DA:D2:AD:7E:BA:81:40:DE:33:4A:AF:AF:DF:0C:84:16:BC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3fa0q1-uoFA3jNKr6_fDIQWvIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/NF7wh5XtVzQFP8XtslPI32haJaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/96f6ee-84db-45a0-abf0-307e5b81bbce/1/H3fa0q1-uoFA3jNKr6_fDIQWvIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.182.0/23
Signature Algorithm: sha256WithRSAEncryption
74:3f:7d:2f:21:6f:13:4a:4c:f2:cb:0c:81:fd:5e:44:b0:a5:
1b:a1:b4:0f:8d:bd:b5:44:ec:30:ff:89:4e:22:5e:f9:35:09:
5f:e5:4c:a8:c4:f1:7a:a2:6f:cf:4e:28:7e:f1:4c:32:e7:70:
c2:01:ad:1d:42:9e:07:64:d1:1d:23:5e:ad:98:4b:0e:bc:a0:
a9:d9:2f:b7:29:62:f0:04:06:3d:be:27:75:f9:ac:f1:3c:61:
9f:d6:b7:8a:6a:ff:3b:c7:4a:6c:e8:26:ba:0c:17:a2:8d:a7:
af:95:3e:9b:12:21:54:a4:72:1b:31:4e:7f:50:ba:aa:0b:e6:
b0:44:ec:c2:63:b0:6d:f6:00:44:d9:ef:1b:d9:4f:a8:ab:5a:
4d:f3:6c:f2:70:cd:17:7b:7f:35:d4:b5:70:fc:5b:af:cd:78:
0b:7e:dc:f9:f6:87:13:40:bc:27:c5:61:69:96:ea:2e:ce:ac:
c0:fb:3e:4d:25:b9:c5:bd:b6:bf:0e:06:81:2b:22:f8:e1:37:
9c:7c:65:d7:40:04:79:23:b4:b5:e4:48:57:f0:35:01:6d:b5:
6b:25:e2:82:52:2f:65:ff:4b:cd:e2:0e:0a:38:30:5e:fb:9f:
ed:90:6a:e5:bc:5a:3a:24:fd:65:24:47:91:43:92:b1:b8:a8:
10:e3:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:43 2026 by rpki-client