Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fq3XjITgyCpBfRb5dZODNlC78rA.roa
File: fq3XjITgyCpBfRb5dZODNlC78rA.roa (raw, json)
Hash identifier: 8NCVqaeZ/P+lGhOlQTcJ/FE6jWTwRsi8YCx6ZhUrJnw=
Subject key identifier: 7E:AD:D7:8C:84:E0:C8:2A:41:7D:16:F9:75:93:83:36:50:BB:F2:B0
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368F0FD196D60C25506EE0B6C01064A
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fq3XjITgyCpBfRb5dZODNlC78rA.roa
Signing time: Thu 02 Jul 2026 15:18:27 +0000
ROA not before: Thu 02 Jul 2026 15:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49112
IP address blocks: 95.157.128.0/18 maxlen: 18
130.0.96.0/19 maxlen: 19
176.52.224.0/20 maxlen: 20
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f0:fd:19:6d:60:c2:55:06:ee:0b:6c:01:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7eadd78c84e0c82a417d16f97593833650bbf2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:65:fe:fc:cc:29:4f:14:c5:5b:d8:81:da:a7:
c6:f0:c8:ae:96:f0:74:23:90:88:b6:ac:c4:35:06:
70:1c:f2:e0:6b:52:4f:d6:92:db:36:4b:9f:6c:b3:
78:3b:1c:ae:4f:e2:d7:5c:28:db:28:69:30:c1:1a:
55:61:31:cd:10:48:7a:94:0d:73:9f:4a:0e:19:c2:
4d:56:b5:58:6c:07:5e:d5:32:aa:48:f5:11:aa:a0:
35:cf:93:52:4d:d1:44:52:a7:6b:ba:1f:4e:22:18:
61:28:d0:34:12:3f:38:2a:77:98:21:0a:8d:d6:bf:
fa:3d:0a:79:57:7f:4f:85:51:85:68:87:c7:0f:d2:
50:5a:24:25:05:6b:28:17:28:5b:87:4d:37:52:8b:
2c:97:23:83:de:eb:3a:cc:27:97:9b:c9:3f:74:99:
a9:4a:32:07:0c:1d:02:9b:3e:8d:3d:84:26:b1:8b:
96:65:2e:04:5a:49:29:19:00:7c:60:95:d9:22:6b:
d4:cb:72:f8:cd:e9:ca:71:92:a4:00:68:91:c0:0d:
15:b8:23:a5:ea:e8:f8:d8:7c:9b:8f:7a:56:b2:bd:
20:5d:cd:ec:2b:4c:88:ce:8d:80:6f:d0:8a:ac:a2:
e2:22:8c:13:1f:b4:d5:c0:e7:e8:ed:6d:5d:d6:14:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AD:D7:8C:84:E0:C8:2A:41:7D:16:F9:75:93:83:36:50:BB:F2:B0
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/fq3XjITgyCpBfRb5dZODNlC78rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
176.52.224.0/20
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
6b:50:24:c6:d9:41:ea:c9:af:02:99:6b:4e:e4:ae:d3:49:6b:
e6:6f:be:ff:98:34:0b:e8:86:36:16:85:08:73:e3:e7:d5:54:
3b:c3:19:45:3b:b4:61:2a:d9:c3:48:57:6c:c3:a5:72:59:63:
90:ff:02:49:99:84:8d:f0:62:3c:c7:6b:6c:76:88:2e:35:40:
27:22:57:5d:40:92:24:5f:a5:e6:c6:e0:b4:b8:28:6f:15:78:
09:fb:26:8c:39:a0:c8:35:79:66:09:36:69:b8:d2:f0:e0:53:
3a:9c:7f:9e:81:49:48:f4:7d:2a:f9:9d:d4:43:77:6a:fb:3e:
c6:16:3e:72:be:a0:4f:fc:8a:d0:e0:e0:fb:c0:e2:ca:67:39:
83:e4:c9:b8:8f:c9:93:cc:2c:e9:39:df:4f:6f:59:54:dd:18:
17:e7:0b:75:b2:b2:9f:62:8f:d7:ce:12:82:cb:c1:75:98:9b:
7f:0b:f2:b6:d3:ee:24:f2:94:66:6d:44:8f:c7:5e:3d:71:92:
4f:bb:3e:cf:98:fc:67:8f:fb:ac:5c:77:ce:72:a8:d1:6f:16:
4c:f0:18:05:7a:6d:33:86:db:d2:8f:33:4a:1b:91:6f:3b:4b:
8f:de:ed:9c:3a:e2:12:f5:6f:3e:d8:57:6c:49:41:a8:ba:85:
96:fb:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client