Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R2FvrpWBkPapWN_xvf5IWUkjpkM.roa
File: R2FvrpWBkPapWN_xvf5IWUkjpkM.roa (raw, json)
Hash identifier: bq8i4MQ9efcox+83d+Y45xraVj4z3ppmdogncssskDk=
Subject key identifier: 47:61:6F:AE:95:81:90:F6:A9:58:DF:F1:BD:FE:48:59:49:23:A6:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01635EFEB1D3A4A715DE62381F0155833
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R2FvrpWBkPapWN_xvf5IWUkjpkM.roa
Signing time: Tue 18 Aug 2026 18:50:28 +0000
ROA not before: Tue 18 Aug 2026 18:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199592
IP address blocks: 194.242.130.0/23 maxlen: 24
195.72.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:35:ef:eb:1d:3a:4a:71:5d:e6:23:81:f0:15:58:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 18:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47616fae958190f6a958dff1bdfe48594923a643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e8:9b:1e:c5:fd:d7:7f:99:c4:39:d6:e4:a8:
6f:90:50:b3:5e:d3:81:3a:83:29:b3:89:7c:3c:ab:
69:9a:39:36:8c:73:7a:a5:36:40:84:ff:7c:de:9f:
8b:27:27:a6:d0:1a:3f:04:2f:e9:bf:7d:aa:c7:82:
9d:ca:69:d0:da:56:70:3d:91:d7:16:54:62:aa:f2:
85:3e:0c:a4:47:88:1f:75:f8:53:cf:b3:05:08:aa:
f1:ac:ed:5f:c9:a4:16:0f:68:41:75:c9:20:85:30:
0b:e1:73:72:d5:a7:0b:e1:49:d1:41:fa:27:65:30:
92:52:fc:cf:57:cc:81:ba:de:50:f3:ab:a1:46:bf:
fb:d0:2b:90:c4:93:c8:a6:20:55:80:ad:f5:6f:59:
d5:8a:16:cc:cf:69:d2:24:d4:f6:3a:ee:8b:97:d7:
12:96:22:76:25:42:a9:f1:0b:5a:f7:9c:4b:0f:40:
91:8d:ef:50:38:12:09:88:da:15:35:d8:23:33:92:
ff:53:9c:4a:85:89:dc:69:bd:01:66:51:f7:5b:35:
20:af:9f:2a:47:8c:61:37:89:91:38:66:33:d6:5e:
77:1d:39:b7:18:dd:76:86:6c:4f:ff:07:c1:52:e1:
80:06:77:a9:3b:15:5a:c8:90:99:6b:e7:69:0e:4b:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:61:6F:AE:95:81:90:F6:A9:58:DF:F1:BD:FE:48:59:49:23:A6:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/R2FvrpWBkPapWN_xvf5IWUkjpkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.130.0/23
195.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
56:98:2d:44:b5:da:f3:06:dd:0a:87:fb:f9:c5:ef:f5:d3:24:
a2:55:3b:91:d5:61:f5:8b:e3:88:53:1d:f5:f0:1b:37:69:26:
5e:48:87:5c:38:ad:29:9d:bb:74:5c:39:fa:48:9a:8b:f7:2f:
fc:49:5b:26:dc:0d:e7:71:e9:b4:85:12:bf:9e:ab:e6:56:a1:
da:73:d0:bf:63:96:00:1c:67:15:1a:94:a1:45:1f:0d:41:6b:
40:26:0d:fc:d9:2d:ec:0f:60:46:ba:4a:0d:19:d5:20:29:43:
f9:77:cd:4e:bf:8a:f2:d4:6f:78:a4:de:d1:14:ad:b2:a7:2f:
5b:19:18:8f:ba:e2:e6:22:3f:ba:66:44:cd:93:51:9e:c6:66:
d6:cb:cb:78:d2:f1:d0:d9:c3:38:8f:b9:99:2a:7e:e8:9f:27:
da:1b:a7:9e:df:c2:ac:07:1b:4a:39:19:ef:16:f6:0f:d8:84:
be:32:d4:47:ef:a4:17:44:8c:e8:19:11:44:02:69:da:78:3b:
9b:ca:c3:0c:df:ae:e7:b3:7e:8e:9b:74:ca:38:9b:de:45:34:
28:3f:85:6f:35:93:83:82:9f:15:84:89:83:4c:fe:1c:c7:be:
1c:c7:de:b3:e0:36:d1:4d:72:5a:8a:d4:22:69:f0:41:b2:77:
9d:06:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:19 2026 by rpki-client