Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/k5l8imJyXXzz3QDSE7WXEepmmpo.roa
File: k5l8imJyXXzz3QDSE7WXEepmmpo.roa (raw, json)
Hash identifier: NLjr0pMr2r+WXjCry+MMRuslx/XS/hTXMSWHanKvTX8=
Subject key identifier: 93:99:7C:8A:62:72:5D:7C:F3:DD:00:D2:13:B5:97:11:EA:66:9A:9A
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368E420D8B4EEBCB957C6ADCDE89B12
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/k5l8imJyXXzz3QDSE7WXEepmmpo.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12566
IP address blocks: 62.62.169.0/24 maxlen: 24
87.255.128.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
185.39.216.0/22 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
212.23.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:20:d8:b4:ee:bc:b9:57:c6:ad:cd:e8:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93997c8a62725d7cf3dd00d213b59711ea669a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d6:bb:13:65:7b:05:5e:be:5e:48:af:46:59:
d0:64:f4:d9:2d:01:16:ed:d8:a6:be:3a:68:ed:4a:
35:b0:bc:f4:75:ed:a9:ae:0e:da:10:0f:f4:6e:fd:
a9:0a:32:04:12:c7:a9:50:62:15:43:cc:a0:45:7f:
6a:d1:3b:e7:ac:63:cf:30:0e:34:83:32:f5:d7:08:
78:80:d8:6f:f3:e7:88:9d:5c:c7:90:8d:46:91:1c:
e0:b6:99:e4:6c:9f:17:2f:78:b8:20:7e:76:28:e9:
28:e8:4f:6d:be:f7:13:96:88:d9:fb:0e:fb:e6:e0:
b6:00:1d:6e:b6:5e:64:c8:3e:b9:bd:f1:bc:1f:d5:
ab:4a:04:1c:fd:c0:c9:f0:36:47:b0:a2:5e:d0:a3:
90:3c:25:58:41:54:37:6b:41:dd:97:67:9d:40:58:
55:bb:19:94:ce:71:f9:d8:da:f8:ca:19:29:99:b4:
38:b0:cb:58:78:09:20:4c:e5:6a:44:02:81:79:39:
ca:df:f6:9d:ee:45:37:82:53:d7:c7:56:b0:fd:c4:
32:e8:d2:ac:a7:6d:14:63:e3:b2:67:28:c6:30:b5:
05:a0:a9:59:0d:b8:bd:82:c3:f7:78:c5:3f:b9:81:
2b:a2:bb:1f:0b:9f:ce:c7:4c:05:45:e2:36:09:08:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:99:7C:8A:62:72:5D:7C:F3:DD:00:D2:13:B5:97:11:EA:66:9A:9A
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/k5l8imJyXXzz3QDSE7WXEepmmpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.62.169.0/24
87.255.128.0/19
95.181.220.0/22
185.39.216.0/22
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
212.23.160.0/19
Signature Algorithm: sha256WithRSAEncryption
00:b8:d7:21:15:d6:73:22:e3:f9:ef:95:2b:bd:f0:94:b1:75:
f1:f6:ca:a6:1a:b7:8e:1f:c0:bd:da:28:de:4c:58:98:ea:34:
c9:5f:55:3e:cb:00:79:05:a8:9d:02:9e:38:83:6c:3f:42:65:
d1:9b:36:48:94:2b:cd:7c:bc:a4:b7:cf:17:be:06:e6:68:f9:
81:12:fb:45:c0:c8:51:0c:93:fb:ed:cc:d6:c9:ce:90:2b:09:
db:65:83:4c:ab:04:f0:6f:66:e1:20:cd:47:fb:5a:a9:8e:ab:
28:24:3d:a6:c2:bf:13:0d:f4:dc:e6:21:74:8e:8d:32:1a:d0:
37:e1:16:ee:96:48:5d:7b:7b:70:86:c5:b7:e3:44:6c:96:85:
40:e8:af:ec:05:53:65:a1:bd:40:16:29:46:c9:a0:9e:23:c3:
cf:df:86:ef:d3:c2:15:03:0a:68:f4:ca:28:b0:08:fd:f1:6a:
81:22:36:81:5c:0e:01:1f:97:89:85:7a:eb:ca:ee:9c:10:c6:
cd:22:c7:15:99:ec:98:38:95:7c:9d:89:c4:a9:f9:19:d4:08:
80:a6:87:bc:52:32:0e:73:d5:6e:7c:1a:43:bd:7f:13:49:92:
4c:42:a5:52:58:11:a2:e6:5a:c3:20:47:9c:11:70:f4:4a:c9:
15:0d:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:38 2026 by rpki-client