Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RF_oJzedGN9LU1qV2KxS5kPzKzs.roa
File: RF_oJzedGN9LU1qV2KxS5kPzKzs.roa (raw, json)
Hash identifier: XTT+vMGxme3MjsXfUunv0kvDQOhrCp5uohUm6aDJtgA=
Subject key identifier: 44:5F:E8:27:37:9D:18:DF:4B:53:5A:95:D8:AC:52:E6:43:F3:2B:3B
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686B7735303C0DF8AF8AB2A5680591
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RF_oJzedGN9LU1qV2KxS5kPzKzs.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 189.74.125.0/24 maxlen: 24
191.44.37.0/24 maxlen: 24
191.44.38.0/24 maxlen: 24
201.50.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6b:77:35:30:3c:0d:f8:af:8a:b2:a5:68:05:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=445fe827379d18df4b535a95d8ac52e643f32b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:46:4d:f1:09:8c:5b:5c:aa:27:da:1c:28:
22:2d:83:ad:e4:e0:2b:e1:73:bc:c0:e1:c3:56:eb:
ac:c7:df:67:ee:ab:3e:11:15:d7:eb:98:85:63:64:
2b:11:7f:25:ef:1d:bd:2d:f2:89:38:20:67:dd:55:
cd:9b:09:8a:7e:06:82:f7:d0:a5:3f:fe:9c:ec:05:
e4:7f:1e:c1:10:7a:c9:77:45:05:ba:eb:98:f4:1e:
bc:90:12:81:33:a2:e2:cd:1a:f1:88:f3:d4:f9:14:
81:21:1d:9e:5b:4c:43:70:87:7a:2c:b9:bc:a5:11:
95:62:7f:7a:2c:73:ae:ad:e4:da:62:ae:1e:e6:2e:
1b:76:e4:8f:3e:e3:f5:65:8e:49:2d:66:ae:39:d7:
ba:5f:f4:1c:24:f3:cf:87:bb:8d:6f:4e:58:03:37:
f3:31:85:aa:b3:d4:b1:ac:27:d2:6b:af:e3:15:91:
3c:23:23:1e:37:3b:63:8e:48:13:5b:c8:97:43:f4:
ad:97:7f:3c:9b:03:d9:d6:40:2e:9f:da:d2:06:7f:
7c:de:b8:d6:4f:dd:ff:ae:64:a0:55:fb:83:7a:4b:
21:87:52:19:d5:d1:32:a6:22:87:ad:92:7d:5a:78:
d9:2e:fa:af:97:62:f8:a7:17:c2:7d:26:ee:50:63:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:E8:27:37:9D:18:DF:4B:53:5A:95:D8:AC:52:E6:43:F3:2B:3B
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/RF_oJzedGN9LU1qV2KxS5kPzKzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.125.0/24
191.44.37.0-191.44.38.255
201.50.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:94:97:c3:d1:e0:e9:32:ed:fc:aa:3c:73:23:a3:5e:01:25:
c8:59:3c:fc:1e:6f:84:13:a6:62:0a:c7:86:cc:9a:94:75:02:
9c:28:ae:ab:70:1b:89:f6:a5:48:13:87:3e:f7:bd:b6:f7:20:
81:1d:d9:fc:a1:5a:85:22:a8:5c:aa:dd:3b:e4:3b:62:b6:d3:
95:be:38:2c:d9:d4:32:5d:d1:cd:f6:e9:30:99:aa:e0:3e:23:
a1:81:52:ad:45:0a:fb:2f:36:79:37:a3:3a:b5:6a:bf:89:d4:
e3:da:b6:32:4b:00:cb:d6:78:4a:e5:03:84:4e:a6:c1:4d:51:
84:0b:39:f3:30:dc:1e:7e:6c:56:8d:6b:c4:48:92:bd:54:02:
ba:49:35:b5:9f:8f:7a:30:c0:7e:b0:ee:c2:83:5d:27:a8:5e:
62:9a:51:be:84:02:34:0e:ef:01:e2:56:2a:a2:6f:78:b0:62:
7a:3d:df:aa:b9:f0:a4:1e:12:0c:cc:31:08:ba:48:82:7d:aa:
e6:1a:00:35:56:10:e5:e4:59:f5:26:0b:62:46:bb:e0:c5:6f:
0d:1a:1e:3e:4f:e8:57:fc:39:e9:19:71:c9:50:ef:d1:69:89:
08:f2:8e:a5:21:8f:70:2a:9b:bd:4e:d6:d4:34:ac:7e:6a:a0:
b0:ec:ac:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:47 2026 by rpki-client