Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/_WtOo9YuQrokwTxQAJF58cfpSiw.roa
File: _WtOo9YuQrokwTxQAJF58cfpSiw.roa (raw, json)
Hash identifier: OUo6i8y7m+/3FUoqkAIpfYsD0Rzx/nPmH8P0JQ2rHyk=
Subject key identifier: FD:6B:4E:A3:D6:2E:42:BA:24:C1:3C:50:00:91:79:F1:C7:E9:4A:2C
Certificate issuer: /CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Certificate serial: 019F2368FC1102431B7CEDBA0E9A36D77D84
Authority key identifier: B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/_WtOo9YuQrokwTxQAJF58cfpSiw.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42394
IP address blocks: 193.33.84.0/23 maxlen: 23
193.33.84.0/24 maxlen: 24
193.33.85.0/24 maxlen: 24
193.33.85.240/28 maxlen: 28
195.62.92.0/23 maxlen: 23
195.62.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fc:11:02:43:1b:7c:ed:ba:0e:9a:36:d7:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3957dcbff508214dca1dba7f53217205b3e4eaa
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd6b4ea3d62e42ba24c13c50009179f1c7e94a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:a1:95:44:43:28:b5:70:e2:cf:9a:c0:80:
b4:9f:75:79:a6:b1:3e:29:ad:94:6a:ed:71:26:ea:
33:6e:ae:a7:0f:da:ff:25:ad:d1:dd:b0:8d:af:d5:
38:44:f4:65:09:02:95:7b:9e:32:39:70:f1:00:2c:
c9:fd:36:24:bd:72:84:d5:45:49:d6:a2:10:d4:af:
d2:bf:41:c1:86:40:68:0c:62:34:d2:26:8e:7b:8e:
0c:f1:65:1d:b9:0b:f4:5a:7b:c5:b8:00:4e:5c:5e:
2a:cd:4b:b7:11:92:0f:24:6b:6c:16:6f:86:2b:0a:
5d:d5:80:2f:32:0c:43:1f:4b:9e:fd:52:3b:eb:6d:
18:31:a3:94:77:3a:b9:64:5c:5b:d4:f5:9d:2c:65:
d0:be:a2:ac:f8:36:4a:cb:4e:fa:6d:03:25:53:42:
41:f0:0b:e7:bb:a2:97:05:ab:5a:17:cf:f0:e0:e8:
08:83:c7:91:73:55:92:26:5d:0b:0f:bb:e0:4b:27:
5e:dd:f7:7f:d2:08:75:45:52:57:31:8b:42:5a:cd:
c3:95:0a:76:55:07:25:f6:98:13:f3:07:8a:e9:3b:
a3:bc:ff:98:d1:df:e3:77:ae:23:80:c6:ab:bc:fb:
13:d8:8c:9c:d6:18:2a:a9:48:22:4e:bf:02:62:5d:
24:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6B:4E:A3:D6:2E:42:BA:24:C1:3C:50:00:91:79:F1:C7:E9:4A:2C
X509v3 Authority Key Identifier:
keyid:B3:95:7D:CB:FF:50:82:14:DC:A1:DB:A7:F5:32:17:20:5B:3E:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5V9y_9QghTcodun9TIXIFs-Tqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/_WtOo9YuQrokwTxQAJF58cfpSiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a39496-99a1-4c18-94a3-c170c65f0938/1/s5V9y_9QghTcodun9TIXIFs-Tqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.84.0/23
195.62.92.0/23
Signature Algorithm: sha256WithRSAEncryption
08:8f:e0:1f:56:fd:2c:be:21:80:b2:18:89:21:8f:25:ac:7a:
ae:c1:e9:e4:c8:e5:2a:bb:db:d3:a0:7b:9c:ce:c1:a6:dd:7d:
01:bf:d1:ce:25:a5:75:ea:7c:b3:7c:79:0a:81:96:e2:a8:7b:
b7:5f:f5:4f:75:68:75:6e:a5:70:0e:ed:e5:fc:62:c1:51:7d:
ad:b2:44:2b:d7:27:3f:ac:79:92:6a:55:30:64:c8:76:dc:ee:
6b:e3:2f:e7:40:ec:23:72:4a:db:fa:64:d6:7b:02:98:e2:8e:
02:1c:e6:cf:a0:80:6a:3b:d5:69:79:63:9d:f5:e2:10:ff:a3:
bb:7f:ab:60:59:d6:0b:1b:20:fa:0d:83:45:7e:ac:0b:00:ae:
08:8c:a1:4b:46:ba:fd:4b:4f:e5:2f:24:db:82:71:7d:bb:74:
21:cd:80:b1:28:9a:dc:64:8e:8c:c6:77:6b:64:03:65:5f:87:
51:74:87:ab:da:2e:ce:5a:a2:0b:e1:75:36:18:1c:f5:7d:52:
aa:0d:4d:1c:e4:6c:29:9f:13:4d:44:35:f2:00:b7:1f:0b:b1:
d2:e1:99:af:16:fb:66:7b:cc:3e:7a:dc:f9:1f:6f:8c:4f:29:
05:2b:21:74:3e:f5:81:08:c4:58:c8:a0:91:db:e3:6f:ea:94:
09:5b:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:36:01 2026 by rpki-client