Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FfrOEIFAv0T80zNth3Hvc_5ggYA.roa
File: FfrOEIFAv0T80zNth3Hvc_5ggYA.roa (raw, json)
Hash identifier: IV8Wok3O/3vcoCSj2wAvs33mp8PTmFNCxnszsN37OF4=
Subject key identifier: 15:FA:CE:10:81:40:BF:44:FC:D3:33:6D:87:71:EF:73:FE:60:81:80
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F66C55D98D47F4D30006960526EE5A2E2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FfrOEIFAv0T80zNth3Hvc_5ggYA.roa
Signing time: Wed 15 Jul 2026 17:13:58 +0000
ROA not before: Wed 15 Jul 2026 17:13:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 85.189.3.0/24 maxlen: 24
217.79.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:c5:5d:98:d4:7f:4d:30:00:69:60:52:6e:e5:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 15 17:13:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15face108140bf44fcd3336d8771ef73fe608180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:62:c3:b5:e5:7a:16:d8:4d:06:70:88:77:
4e:b3:e3:02:00:b1:23:64:a4:84:7f:2e:a8:9b:ca:
d9:0d:78:66:a3:1c:5b:f1:c3:0d:ac:b3:10:9d:60:
14:f1:ac:5f:dc:ae:16:3a:5b:6d:c3:d8:9d:60:9d:
76:1f:69:37:3d:e4:de:c9:1d:21:2b:06:c3:fa:d2:
93:b3:93:3d:07:74:b6:51:3d:aa:59:df:fd:2c:0f:
97:c4:17:2a:dd:41:30:e0:d3:b9:50:61:32:02:75:
51:3a:c4:cb:f5:11:dc:f8:b2:85:96:08:48:c7:3c:
e9:b3:f8:ab:53:3c:61:58:3d:23:75:3c:87:bd:c5:
56:c6:1b:06:00:6a:10:0c:25:17:9d:41:bc:80:0a:
c4:4d:be:f0:d0:13:49:24:af:f3:e7:0d:32:52:d1:
7d:b0:e1:2c:b6:6e:9e:0f:8d:16:bd:1f:df:da:a2:
99:d7:a4:43:fc:6a:a0:5d:0a:19:5a:04:65:18:82:
ed:63:03:58:41:72:2e:5c:49:19:5a:ce:fe:7b:c9:
16:52:44:7a:29:75:4f:c0:29:25:88:1b:4b:4f:26:
70:48:5d:c3:c3:03:1d:59:a4:c5:6c:62:bc:b0:87:
e5:88:e9:a8:d8:e3:6e:25:df:32:0f:4d:f1:4b:64:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:CE:10:81:40:BF:44:FC:D3:33:6D:87:71:EF:73:FE:60:81:80
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FfrOEIFAv0T80zNth3Hvc_5ggYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.3.0/24
217.79.99.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:b0:7e:25:b2:f4:1a:1d:97:57:3b:20:56:3c:9c:32:85:
01:41:1e:b9:41:61:f3:9d:5c:d4:80:1f:83:c2:65:50:f4:65:
46:ba:cc:78:39:e5:28:88:63:62:ad:91:b8:b5:b8:59:78:3b:
7c:9a:bb:91:d0:23:56:84:68:8f:81:87:a5:b2:34:74:c2:57:
90:4d:02:84:89:7f:eb:c8:c4:58:39:46:18:3b:fb:e3:84:6f:
ac:7d:ef:18:7e:69:26:75:8d:70:29:48:b5:3f:0c:69:cc:26:
82:ab:8a:0a:a8:63:64:da:b4:3d:09:d7:21:52:b3:53:f7:6c:
67:2f:a8:54:1c:f5:70:67:1a:96:a6:04:58:e5:d1:8d:01:cd:
1f:20:b6:95:e7:6c:d4:fc:34:0a:a7:88:84:9d:b4:38:d6:aa:
eb:c6:2a:87:21:7b:16:d9:c2:e3:f8:84:eb:8e:a1:d4:16:89:
ff:fe:fd:7b:35:5d:7d:29:64:06:5d:45:d8:d4:ae:7d:a3:66:
79:c7:07:c6:6e:d8:0f:90:c6:7f:37:9d:bf:3f:be:c6:c9:5a:
f5:44:33:d2:a8:df:67:fe:22:25:e6:57:a6:95:3a:ed:f9:95:
26:86:cc:d8:eb:74:8c:df:88:50:f9:bc:10:ec:0c:12:44:1e:
54:7e:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:01 2026 by rpki-client