Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/flhObDzx1KtbsVSHyLOmQqkx-HY.roa
File: flhObDzx1KtbsVSHyLOmQqkx-HY.roa (raw, json)
Hash identifier: Vt5ThAMsr4u520U/fNd/xoLh6v3jLDZUNj1PNqGadPY=
Subject key identifier: 7E:58:4E:6C:3C:F1:D4:AB:5B:B1:54:87:C8:B3:A6:42:A9:31:F8:76
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F6C14BF7C29332DDED8889E11377EB47C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/flhObDzx1KtbsVSHyLOmQqkx-HY.roa
Signing time: Thu 16 Jul 2026 17:58:46 +0000
ROA not before: Thu 16 Jul 2026 17:58:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219363
IP address blocks: 217.79.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:14:bf:7c:29:33:2d:de:d8:88:9e:11:37:7e:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 16 17:58:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e584e6c3cf1d4ab5bb15487c8b3a642a931f876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:bf:8e:05:2f:03:e5:f5:91:b9:e1:86:bf:
b3:55:18:18:69:86:dd:97:39:eb:62:09:eb:03:52:
6c:d4:7d:98:3f:bf:94:10:b4:c4:58:95:d4:fc:66:
c3:22:3e:86:ef:31:7f:90:35:6d:ac:1c:51:9d:06:
66:cc:ac:14:4a:78:e6:09:c9:6d:ed:4b:c2:db:33:
2f:a9:e5:c1:c7:88:68:34:6d:72:ec:be:70:b2:5c:
f3:27:72:c1:cc:bc:32:ef:cd:c0:4b:28:f0:29:b4:
13:62:d0:da:36:e2:6f:5e:79:3e:82:2b:4e:d7:84:
22:2e:3c:a1:1d:74:c3:fb:ab:7c:bc:d6:c7:8a:25:
89:8b:d1:de:4e:a0:7f:39:4e:36:e5:47:e9:4e:cf:
93:67:33:4c:73:10:d8:06:28:13:84:48:6b:74:f7:
97:fc:72:a1:ee:84:66:60:82:d0:e9:11:d8:2c:54:
f1:af:e5:d2:6f:1c:45:2a:bd:82:b2:59:e1:c2:07:
61:e5:ec:fa:b0:fb:e7:ab:3d:fe:e9:b1:b7:1f:fe:
14:a9:8b:65:fb:47:71:17:a4:fa:a6:4d:7a:32:de:
fb:7e:7d:fa:b2:e6:27:c6:39:1b:95:f8:e0:f7:21:
04:d3:2b:7c:ce:ce:6d:8b:64:a7:23:5a:82:a3:94:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:4E:6C:3C:F1:D4:AB:5B:B1:54:87:C8:B3:A6:42:A9:31:F8:76
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/flhObDzx1KtbsVSHyLOmQqkx-HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.121.0/24
Signature Algorithm: sha256WithRSAEncryption
07:37:0e:ee:e8:a5:4a:91:6e:1e:d7:49:f7:f7:9d:55:f8:2c:
dd:f6:ea:b9:92:c4:1a:47:85:57:e0:f2:94:35:11:6d:16:f7:
a6:38:01:8f:d1:38:48:ba:71:03:3e:db:f6:01:a2:b7:be:b1:
88:ea:2f:66:d4:19:6b:64:c0:2a:d1:9a:40:50:09:82:ea:5f:
ac:30:0f:90:a8:54:66:b2:f8:33:a1:c7:34:4d:f3:f8:b7:8e:
00:e3:e0:59:c6:bf:49:3a:c5:82:75:09:75:62:65:92:6a:e5:
06:f2:4e:c6:b0:07:12:35:f4:76:e4:be:a8:f7:e8:5d:de:b9:
37:9f:a1:ff:e9:15:f1:5f:6d:52:7a:08:36:c9:94:6e:ab:95:
41:1d:29:4c:6c:0c:1c:b6:4e:aa:9e:30:a6:6f:85:d5:b4:12:
c7:dd:06:12:18:12:75:17:c4:00:90:ac:57:19:6e:e1:4a:ac:
ca:85:65:f6:e4:d9:ef:fc:c5:ff:f5:27:ef:f0:b9:67:1e:0b:
ee:05:ec:80:b1:45:16:09:ce:d8:6c:aa:21:13:f4:25:44:8b:
42:64:b7:79:b8:91:08:67:3e:f2:e3:ab:ff:0d:b0:48:bb:c0:
15:64:6b:66:4d:31:bd:88:ce:24:ac:27:aa:56:74:fb:d8:4e:
e8:e8:c3:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9sFL98KTMt3tiInhE3frR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzE2MTc1ODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU4NGU2YzNjZjFkNGFiNWJiMTU0ODdjOGIzYTY0MmE5MzFmODc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdC/jgUvA+X1kbnhhr+zVRgYaYbd
lznrYgnrA1Js1H2YP7+UELTEWJXU/GbDIj6G7zF/kDVtrBxRnQZmzKwUSnjmCclt
7UvC2zMvqeXBx4hoNG1y7L5wslzzJ3LBzLwy783ASyjwKbQTYtDaNuJvXnk+gitO
14QiLjyhHXTD+6t8vNbHiiWJi9HeTqB/OU425UfpTs+TZzNMcxDYBigThEhrdPeX
/HKh7oRmYILQ6RHYLFTxr+XSbxxFKr2Cslnhwgdh5ez6sPvnqz3+6bG3H/4UqYtl
+0dxF6T6pk16Mt77fn36suYnxjkblfjg9yEE0yt8zs5ti2SnI1qCo5SkcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH5YTmw88dSrW7FUh8izpkKpMfh2MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZmxoT2JEengxS3Ric1ZTSHlMT21RcWt4LUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U95MA0G
CSqGSIb3DQEBCwUAA4IBAQAHNw7u6KVKkW4e10n3951V+Czd9uq5ksQaR4VX4PKU
NRFtFvemOAGP0ThIunEDPtv2AaK3vrGI6i9m1BlrZMAq0ZpAUAmC6l+sMA+QqFRm
svgzocc0TfP4t44A4+BZxr9JOsWCdQl1YmWSauUG8k7GsAcSNfR25L6o9+hd3rk3
n6H/6RXxX21Segg2yZRuq5VBHSlMbAwctk6qnjCmb4XVtBLH3QYSGBJ1F8QAkKxX
GW7hSqzKhWX25Nnv/MX/9Sfv8LlnHgvuBeyAsUUWCc7YbKohE/QlRItCZLd5uJEI
Zz7y46v/DbBIu8AVZGtmTTG9iM4krCeqVnT72E7o6MM+
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client