Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/F-XzCN7Z6yyf988iOvTKBqMAT9M.roa
File: F-XzCN7Z6yyf988iOvTKBqMAT9M.roa (raw, json)
Hash identifier: ph0B1ggQvIrHcHEAMTFHOb5go7oZA1k/Z917jRVSdfA=
Subject key identifier: 17:E5:F3:08:DE:D9:EB:2C:9F:F7:CF:22:3A:F4:CA:06:A3:00:4F:D3
Certificate issuer: /CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Certificate serial: 019F23692C156178D77AB7CFAF0952BA8D3C
Authority key identifier: 78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/F-XzCN7Z6yyf988iOvTKBqMAT9M.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200486
IP address blocks: 185.156.204.0/22 maxlen: 24
185.156.205.0/24 maxlen: 24
194.5.100.0/22 maxlen: 24
2a07:a105::/32 maxlen: 32
2a07:a106::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:15:61:78:d7:7a:b7:cf:af:09:52:ba:8d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17e5f308ded9eb2c9ff7cf223af4ca06a3004fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:32:8f:af:af:16:ea:d5:b1:78:fe:95:cd:
68:d3:45:c6:da:15:0e:a3:21:6d:cc:94:bf:91:8b:
bd:f5:36:0a:98:fb:7a:32:be:b8:97:ed:e2:a9:bf:
cd:71:bf:af:90:88:cb:cc:99:96:00:ce:76:0c:cb:
ff:4d:21:df:81:23:5f:01:b1:50:88:36:ae:00:4a:
6a:f0:21:ee:6a:36:2a:bd:05:d7:33:b3:52:af:0c:
7c:88:d2:02:2b:36:27:6f:5d:fa:7b:90:5d:39:73:
51:e2:e1:57:9f:1e:3e:1d:51:64:da:bb:bf:0b:6e:
6b:ed:39:e7:b2:d9:f2:3d:8e:be:d3:f9:55:a4:04:
58:2c:fa:5a:49:f6:3d:5e:ad:d9:6a:82:6c:c4:79:
29:3b:39:b3:87:d9:69:f7:54:80:12:e6:bc:21:a5:
95:c4:53:75:75:88:cc:90:91:7e:b6:1d:a5:76:a7:
0a:b4:e8:f9:39:75:e4:17:3a:df:a1:a7:fb:30:ca:
9a:88:21:cb:ab:9a:6b:16:14:38:90:d8:a3:e1:80:
12:9d:da:b3:38:03:96:f4:af:91:6c:a6:60:64:03:
58:8c:48:16:eb:07:d6:c2:4a:70:78:d0:97:39:af:
41:72:b6:9a:af:2a:b0:1e:b0:c8:fd:d4:d8:a4:5d:
23:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E5:F3:08:DE:D9:EB:2C:9F:F7:CF:22:3A:F4:CA:06:A3:00:4F:D3
X509v3 Authority Key Identifier:
keyid:78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/F-XzCN7Z6yyf988iOvTKBqMAT9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.204.0/22
194.5.100.0/22
IPv6:
2a07:a105::-2a07:a106:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
52:df:18:4a:cc:4a:89:22:7a:2e:0a:6e:cd:8f:9e:88:36:4e:
a9:38:7b:e6:10:f8:09:ef:7b:6a:96:9e:c4:00:c4:2c:ec:77:
77:85:fb:9d:16:7b:4f:5f:a0:18:cf:db:35:11:59:06:61:bd:
76:b1:f0:aa:ca:9e:5c:14:be:6e:8c:07:28:ab:3b:79:d5:8b:
ea:0d:a7:bd:27:94:f8:3c:42:b4:46:58:c7:18:ad:14:1a:07:
e0:35:1c:09:e9:34:5d:44:73:d9:d0:62:55:5c:5d:bb:c3:11:
e8:a8:70:9f:9a:2d:f4:15:44:79:c8:fe:16:7c:74:19:2e:ba:
29:1a:3f:b6:a1:f9:a6:75:83:f3:e6:a0:8d:97:30:f6:c5:32:
54:76:29:69:fd:83:cb:ce:73:4b:11:c8:c5:57:fb:48:58:c7:
3b:f5:de:07:90:08:bf:4f:a4:02:72:e4:1b:5b:13:03:9b:24:
44:3e:f3:e2:b5:b4:20:28:83:fe:ba:66:e0:9d:25:0a:14:1a:
0b:36:4d:83:85:81:70:33:5d:97:d6:bf:61:d0:58:4b:13:49:
b3:69:6c:83:16:33:0e:af:d0:6f:9c:b6:e4:23:79:a4:0e:a4:
69:07:0d:17:f7:74:f0:9a:67:1b:65:08:99:28:3a:d3:23:7c:
3d:ec:ae:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:15:15 2026 by rpki-client