Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/aBLsMauGKIS43dLOfcpL0XdNHtM.roa
File: aBLsMauGKIS43dLOfcpL0XdNHtM.roa (raw, json)
Hash identifier: HtmyjY2kf2C9fXcumpzEFVnT60/n/nQya3SUQ0iZuFI=
Subject key identifier: 68:12:EC:31:AB:86:28:84:B8:DD:D2:CE:7D:CA:4B:D1:77:4D:1E:D3
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E66CCFD4DEAC77B64BEFB59AE913
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/aBLsMauGKIS43dLOfcpL0XdNHtM.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21450
IP address blocks: 77.137.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:6c:cf:d4:de:ac:77:b6:4b:ef:b5:9a:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6812ec31ab862884b8ddd2ce7dca4bd1774d1ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:45:08:7b:28:c0:06:d5:c4:57:b0:05:e8:
b0:b2:00:a1:33:a0:4b:13:41:e4:f3:cf:cf:ac:ec:
73:ad:e4:99:c3:24:16:c0:7e:62:97:5b:35:54:5a:
b7:fc:60:37:08:cd:3f:65:94:c6:0c:f4:32:e2:47:
a1:0b:2f:27:99:7f:77:8b:58:db:63:e1:9d:04:94:
49:ab:6e:d2:8d:c6:bd:c9:be:a6:8e:2a:71:51:13:
08:e9:7f:55:30:37:f6:ff:83:50:21:ea:70:17:20:
18:2a:b6:89:6d:22:a0:44:ad:10:8a:a7:77:65:e4:
d0:53:9f:eb:23:a8:3f:28:75:9d:ad:57:0f:ce:cc:
05:ee:c0:bd:1f:58:45:1b:d8:7b:42:2e:5d:a4:04:
88:2e:f9:20:b4:96:a0:46:9f:15:82:37:fc:6b:06:
22:37:84:0b:f1:19:e7:65:fd:a7:7d:fd:14:85:b0:
65:8c:97:05:1b:48:1e:6a:e7:32:d1:ac:24:a3:db:
b7:e2:26:f5:c9:57:ec:5b:5d:fa:6f:74:36:0d:08:
59:ca:e2:c3:4b:41:6b:8d:64:3b:65:26:32:21:03:
d2:68:87:49:21:9d:2c:94:9c:eb:85:3b:37:9d:35:
0b:60:78:56:1a:b0:4b:37:1a:8e:41:6a:1a:79:a3:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:EC:31:AB:86:28:84:B8:DD:D2:CE:7D:CA:4B:D1:77:4D:1E:D3
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/aBLsMauGKIS43dLOfcpL0XdNHtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.137.128.0/18
Signature Algorithm: sha256WithRSAEncryption
53:c6:c0:7b:26:84:4f:a8:d3:00:85:a8:cb:0a:b1:b7:ce:2a:
7c:43:c2:5a:70:5b:21:75:a4:78:ee:e7:c7:35:25:f6:20:2d:
b7:b0:1c:28:ee:43:c8:2d:70:55:3e:d2:c6:48:a2:00:8f:c3:
72:62:64:dc:6a:b6:16:5d:71:9a:3a:76:f7:f2:df:53:ed:3e:
a7:e2:ad:c9:78:1f:1d:cf:dd:3f:63:1c:6e:97:bd:97:2f:74:
6c:81:bb:bd:9e:59:f0:87:4d:4a:b2:db:01:d6:4d:f4:ed:fe:
92:c4:71:4a:20:e7:23:92:ec:9b:0c:54:9a:9f:78:08:c5:dd:
89:17:93:f9:ee:0c:4e:27:79:10:5e:45:5e:6f:08:07:4a:2a:
65:72:cf:0d:2d:26:8b:5c:f7:ce:45:04:b6:a6:48:33:e4:66:
d9:b4:d1:3f:5a:c5:b8:65:fd:5a:e2:22:8f:9b:b4:58:2f:7a:
0f:dc:0a:79:ca:c9:dc:33:26:8d:80:06:d3:ce:d4:b5:ad:18:
48:f1:54:4d:8d:29:79:73:cc:35:33:5d:8f:a7:1c:e8:69:83:
ff:6e:b4:f5:c5:c8:a0:2c:b0:f2:8d:9d:92:19:2a:fe:d0:b6:
76:0e:8e:00:4c:99:c7:be:57:49:28:7f:59:d1:52:4b:a2:ad:
5d:85:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:28 2026 by rpki-client