Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/awQdHVIR10Sfnf3qMMuTCd3lhsI.roa
File: awQdHVIR10Sfnf3qMMuTCd3lhsI.roa (raw, json)
Hash identifier: NtZJ2aDYhwabQadn3kE0qvG4S6OLIASqys8+ERwasrg=
Subject key identifier: 6B:04:1D:1D:52:11:D7:44:9F:9D:FD:EA:30:CB:93:09:DD:E5:86:C2
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E84F1E80790B77BB391C22FAE259
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/awQdHVIR10Sfnf3qMMuTCd3lhsI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34383
IP address blocks: 85.117.128.0/19 maxlen: 19
85.192.192.0/18 maxlen: 18
89.170.0.0/16 maxlen: 16
95.136.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e8:4f:1e:80:79:0b:77:bb:39:1c:22:fa:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b041d1d5211d7449f9dfdea30cb9309dde586c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:6b:14:ba:79:e4:e7:40:b1:c9:16:9b:ad:
d8:54:cf:7a:1f:89:a5:47:0a:5a:ff:dd:31:f5:71:
1c:a4:90:e4:7e:7b:19:96:9b:c3:39:9d:e7:cf:3c:
66:ea:5c:83:65:cd:b1:53:71:c1:19:8d:bb:ec:d1:
cc:14:39:79:ed:70:71:46:fb:f1:43:8a:b1:34:83:
95:2a:92:bb:4c:73:e5:13:47:ab:b2:5d:ab:3d:da:
f2:e9:4b:07:10:f0:87:95:4e:60:b4:4b:25:2b:50:
ab:56:a9:be:9c:39:2e:30:aa:c2:e2:cc:b4:26:16:
58:b7:7c:04:d2:55:98:d0:6c:8f:b2:91:6c:a9:ec:
9d:c4:71:84:96:87:a9:f6:2f:11:e0:fc:93:96:13:
64:7b:7f:3c:a8:04:da:90:27:db:5a:41:ce:15:55:
be:5e:5c:dd:45:ba:53:91:12:36:b7:10:2d:ca:f9:
91:c6:a2:af:dc:0c:28:6a:fd:f3:31:6c:85:cb:60:
9e:57:91:ff:4c:ff:00:81:28:62:de:97:9d:b2:aa:
3a:60:7c:b8:73:db:df:58:12:68:ba:55:b1:1c:41:
14:6d:6a:05:9a:5f:aa:23:f9:f8:bf:5b:57:fb:8c:
32:4d:f1:4e:77:4b:88:12:ea:74:31:64:76:2a:68:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:04:1D:1D:52:11:D7:44:9F:9D:FD:EA:30:CB:93:09:DD:E5:86:C2
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/awQdHVIR10Sfnf3qMMuTCd3lhsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.128.0/19
85.192.192.0/18
89.170.0.0/16
95.136.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:54:80:18:fd:10:a5:18:92:f3:6c:3e:46:3a:1c:26:7c:54:
6b:69:d6:fe:dc:40:0a:f9:3f:a5:8c:7e:6c:a7:a5:69:51:6e:
b1:93:43:be:06:76:5b:e6:d4:6a:c5:ac:f2:47:50:57:50:c9:
0b:35:6b:47:55:1a:b9:61:b5:d9:bc:8a:8d:11:ec:02:83:9c:
48:03:16:de:ee:18:a1:16:97:46:e7:36:30:2e:8a:97:84:f9:
c1:24:97:cf:26:b7:ca:33:8d:d7:51:d8:b6:a0:cf:16:f5:44:
c7:17:ee:91:69:70:bd:16:ae:c0:76:a9:3f:eb:e3:e9:5d:f2:
a9:61:d0:50:58:fb:d2:0f:6c:02:f8:8a:dc:32:28:7e:6f:15:
4a:04:2b:30:fe:88:87:57:c1:5b:24:3f:62:1a:1b:09:fb:d9:
2e:6c:58:c8:fc:a9:ef:4c:74:22:d1:e3:27:24:69:42:07:63:
34:95:04:b2:f7:af:18:24:c0:2c:7d:a1:c3:bc:c6:de:1d:e4:
66:c7:9e:5e:97:47:f3:f0:ca:a2:91:ea:9a:3e:a8:a2:ef:00:
42:bf:c6:a4:80:a6:19:e6:39:c7:bb:56:e6:cf:58:36:39:b9:
03:d0:66:1a:c2:60:17:4a:6e:6e:aa:be:cd:f5:30:e2:32:8a:
58:ba:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:36 2026 by rpki-client