Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/fgbvzgb70NEoaagktTqxdMYst4c.roa
File: fgbvzgb70NEoaagktTqxdMYst4c.roa (raw, json)
Hash identifier: Eoip5fkz+jvKGq0WNw0xxn6yHtKCLgJl9ph2sUZ/62o=
Subject key identifier: 7E:06:EF:CE:06:FB:D0:D1:28:69:A8:24:B5:3A:B1:74:C6:2C:B7:87
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 019FDD1F31438EBB959342E133088B8217A4
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/fgbvzgb70NEoaagktTqxdMYst4c.roa
Signing time: Fri 07 Aug 2026 16:47:16 +0000
ROA not before: Fri 07 Aug 2026 16:47:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39402
IP address blocks: 95.214.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:1f:31:43:8e:bb:95:93:42:e1:33:08:8b:82:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Aug 7 16:47:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e06efce06fbd0d12869a824b53ab174c62cb787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:bf:12:57:57:c3:78:79:72:6c:af:67:e1:
eb:6a:e8:a4:d6:3e:e6:57:8f:b5:74:c0:e9:c2:3b:
83:e1:32:09:47:ea:d5:05:d7:65:f9:63:e1:bc:6b:
c6:a4:48:84:da:bd:bd:98:2f:c8:99:90:fb:18:5e:
15:6e:80:a1:ee:95:ed:1b:e4:d2:08:e1:9b:3d:27:
4a:86:d2:32:1e:b7:9f:3e:cd:18:c2:27:ed:d3:5c:
4c:2c:e3:e9:7f:8a:81:92:ee:22:a4:9e:b7:cb:bf:
db:49:64:fe:a3:d7:1f:56:63:c8:b8:a2:b2:5c:11:
60:58:b3:78:31:fa:e7:0c:54:db:9d:a6:85:1f:48:
e3:20:29:18:9f:73:20:55:a5:82:45:f5:dc:e5:ab:
e1:fe:d9:8a:0e:cd:2f:99:a9:b3:9a:68:20:59:2c:
ce:9b:18:1e:d8:2f:bd:51:d0:f4:99:03:e5:81:16:
d8:1e:fd:c9:34:58:c1:92:82:ec:b4:5e:b1:eb:b9:
7d:79:85:5b:0b:75:e0:3e:00:e0:a6:b6:43:cd:7a:
03:e1:f7:0e:0d:1c:08:20:96:12:3c:53:57:dc:99:
b8:b8:53:d8:bc:f5:a3:16:6b:6e:47:bc:b4:ea:9e:
d5:e0:77:e6:f3:89:30:4c:eb:78:f4:0c:0c:4b:db:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:EF:CE:06:FB:D0:D1:28:69:A8:24:B5:3A:B1:74:C6:2C:B7:87
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/fgbvzgb70NEoaagktTqxdMYst4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:be:c3:a8:86:7d:69:af:8e:92:c2:3a:8b:e1:dd:a7:8f:27:
52:94:a7:bd:75:c2:5f:3f:c8:20:a1:b4:c9:f8:6c:ff:63:a1:
e4:5d:16:94:ca:e8:9e:d3:99:00:54:80:0e:a1:a8:5e:22:de:
72:c2:b0:2b:55:a8:b8:a3:10:49:59:b5:34:aa:82:08:c7:52:
66:93:8d:c1:1a:64:a5:68:92:7d:47:be:c2:25:7d:e8:a6:32:
0f:8a:28:31:97:45:f4:ec:b6:a5:21:58:7a:41:d0:a8:29:9b:
94:2b:ab:8a:03:f8:3d:ef:ee:8b:64:a4:b4:58:ac:5f:e7:e7:
11:5c:9d:84:96:94:d5:eb:86:ea:51:e9:6e:4e:ec:12:98:0c:
a2:9f:c0:fd:2a:e1:d6:f2:d2:07:d1:55:fa:ef:be:23:3d:50:
de:c1:32:e6:09:3a:37:35:ab:90:73:c2:4b:9c:80:6c:2f:ff:
10:f0:95:d2:a0:2f:dc:37:e5:8b:a0:4d:f5:2b:cb:80:31:13:
09:41:00:62:54:a9:90:6a:98:e1:6d:5a:78:42:fa:03:8f:5a:
21:b8:5d:3d:86:3f:3f:b8:4c:7c:3c:67:da:b5:10:65:d2:82:
9f:26:e9:eb:0f:93:46:43:2a:8f:70:46:86:c1:5b:a6:1f:3a:
39:1c:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:43 2026 by rpki-client