Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AtCvDZ1gkwKaUr0RAylS9H6WM3o.roa
File: AtCvDZ1gkwKaUr0RAylS9H6WM3o.roa (raw, json)
Hash identifier: DvUxPPL0ZeYMgyuO8EozAf26cpQppfVc22cW8ci010U=
Subject key identifier: 02:D0:AF:0D:9D:60:93:02:9A:52:BD:11:03:29:52:F4:7E:96:33:7A
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F08ADE553B0D350A2AEEB069AACE
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AtCvDZ1gkwKaUr0RAylS9H6WM3o.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49011
IP address blocks: 95.174.160.0/19 maxlen: 19
178.19.0.0/20 maxlen: 20
2a00:cc80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:8a:de:55:3b:0d:35:0a:2a:ee:b0:69:aa:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=02d0af0d9d6093029a52bd11032952f47e96337a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:2f:bf:b1:83:47:f1:94:f7:90:54:d5:f4:
5d:ba:9b:11:31:0b:c6:76:a5:6a:69:8b:8e:78:d4:
89:ea:75:b9:cd:71:cb:4e:b4:aa:03:ee:fd:3b:14:
ea:7f:97:21:d1:04:b9:2b:46:a1:52:4f:97:6b:7b:
e3:96:86:30:62:66:73:ad:4a:5e:54:02:65:40:7c:
7d:29:91:a6:88:d3:cc:2f:a5:0f:4f:34:9f:27:63:
a6:37:f8:3d:e8:d4:ac:21:98:cb:f3:cd:b3:36:8a:
e5:68:48:b3:7d:d2:10:ae:32:ca:a8:ce:c4:61:3e:
24:09:da:67:d1:8c:b3:8a:ea:e0:73:f0:68:33:cf:
16:5c:b3:81:3a:0a:38:2b:32:89:88:14:4c:64:27:
dc:75:15:2d:71:96:41:41:e9:e4:18:87:50:c6:3b:
12:c1:7d:ff:d0:db:fb:70:84:d1:db:40:44:9b:9b:
36:cd:cb:35:e3:21:65:ef:8b:1e:32:b6:80:b8:cc:
c9:e1:d1:b6:ef:df:fa:fb:97:4c:a0:cb:4a:29:6d:
95:9d:40:1b:e8:22:75:4e:be:4d:9c:89:6b:eb:62:
90:59:f3:6a:33:0c:d0:ea:09:4a:ce:c1:23:77:47:
ba:89:22:fa:dd:10:27:b5:62:5d:c3:ca:c0:e2:3c:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:AF:0D:9D:60:93:02:9A:52:BD:11:03:29:52:F4:7E:96:33:7A
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/AtCvDZ1gkwKaUr0RAylS9H6WM3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.160.0/19
178.19.0.0/20
IPv6:
2a00:cc80::/32
Signature Algorithm: sha256WithRSAEncryption
6f:7c:05:55:5b:72:48:37:22:1f:a1:71:99:48:da:4c:9f:4a:
19:43:5b:46:f6:7b:32:9c:d9:ac:3d:15:64:3b:05:a4:e3:37:
df:e6:93:56:54:ff:03:27:79:f5:10:3c:e9:60:7e:71:05:d7:
76:09:1e:b4:7e:a6:c9:bc:ee:35:87:1e:0d:64:6f:21:fc:e3:
61:60:93:91:6a:4a:52:24:ab:8f:e5:12:98:db:64:46:fe:32:
5e:81:10:78:85:e2:51:99:58:04:d9:dc:cc:1c:9f:de:a6:1c:
e7:56:05:b7:bc:39:2e:4f:4b:34:43:a4:0d:03:64:7b:40:88:
29:62:17:23:b6:aa:c4:2d:ef:68:8c:5f:af:73:89:87:3f:02:
40:e5:82:ce:09:4b:99:77:91:23:29:9b:75:72:c0:8e:2b:5e:
1f:8a:8c:96:43:6c:56:62:ec:9e:d7:72:e0:5b:5f:e2:39:e6:
e0:16:7e:87:f4:92:0e:ad:aa:e8:ac:b7:16:40:71:9a:c4:37:
e2:18:ae:7c:be:32:63:a2:e3:1f:ce:1e:7c:a2:ce:35:ab:3a:
a4:12:df:ec:74:04:db:73:5f:59:9c:22:a2:ef:39:c5:a5:bd:
6b:e9:d7:dc:33:81:f7:23:3f:f6:fc:a2:45:9c:dd:a2:72:68:
15:04:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:07 2026 by rpki-client