Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/v1eEtmAqh7DLq6r5odUm3kae1oc.roa
File: v1eEtmAqh7DLq6r5odUm3kae1oc.roa (raw, json)
Hash identifier: Mr2A+DP00TZTbOJcOBNPWcOqmgh2Ko+qAajSURN8csY=
Subject key identifier: BF:57:84:B6:60:2A:87:B0:CB:AB:AA:F9:A1:D5:26:DE:46:9E:D6:87
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236867A37AE479C86C8329B0C5DBB9F6
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/v1eEtmAqh7DLq6r5odUm3kae1oc.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204048
IP address blocks: 189.74.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:67:a3:7a:e4:79:c8:6c:83:29:b0:c5:db:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf5784b6602a87b0cbabaaf9a1d526de469ed687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:15:1c:ed:92:2a:18:d1:4f:1e:c9:a3:a6:
08:9c:e9:41:db:9a:5c:30:af:0c:47:be:ee:9b:58:
89:0e:c5:91:cd:20:09:9c:52:00:4d:e9:1a:de:77:
f4:e6:a0:01:46:ed:3d:1f:0c:d2:de:f2:ab:9a:46:
d6:3e:e8:4b:08:87:d6:1f:c8:ce:2f:3c:2f:ad:e8:
c9:0b:8c:6d:e6:59:4d:3e:aa:71:7f:89:ff:36:2d:
58:60:02:85:d4:f0:15:88:54:8c:cf:87:05:79:0e:
e2:ca:ad:37:93:38:7d:67:92:33:44:95:63:63:86:
7a:96:f0:0f:95:04:63:06:a4:8c:34:26:3d:a6:23:
15:b9:a0:7c:5b:0d:51:be:8f:fc:da:3f:b4:1c:e7:
89:7c:fb:2c:d0:e7:46:85:8e:b4:c0:6e:ce:bf:c0:
ca:9a:61:5c:68:4b:6b:c8:37:3c:21:5a:f9:07:2f:
b7:e7:23:c3:e8:b3:f6:9a:b8:e7:65:23:1b:d3:ef:
8d:89:41:a9:8f:bb:67:7d:62:d5:54:a4:96:33:18:
c8:b9:75:3b:bd:aa:38:86:16:ff:9b:ee:b4:1b:a4:
cc:e0:40:ca:5b:0c:8f:97:88:4c:f6:93:39:92:55:
d0:da:ee:94:58:bd:91:94:a1:a0:94:89:fe:1f:d4:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:57:84:B6:60:2A:87:B0:CB:AB:AA:F9:A1:D5:26:DE:46:9E:D6:87
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/v1eEtmAqh7DLq6r5odUm3kae1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.126.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c4:ff:bb:bc:fd:a5:92:50:80:83:e9:1e:37:ef:b2:87:d1:
05:38:d9:d5:f0:a4:6d:61:e4:e1:ea:e5:01:10:23:cd:7f:8e:
c8:87:4f:e3:9b:6c:0f:76:db:ed:1f:f2:2b:55:c4:79:f8:a1:
6c:4c:b7:8b:64:0f:45:c3:a9:47:45:98:b2:6d:e6:34:6d:0d:
60:08:8e:0b:1e:03:cc:55:88:8a:0d:f6:10:b2:8e:87:8b:74:
62:8d:e7:e0:b2:92:a4:65:cc:9e:73:9b:41:c5:f9:a9:ad:9f:
a7:8b:12:84:df:e5:49:f6:ea:c0:fe:a8:70:44:c6:12:e0:dc:
5d:5c:cd:31:19:37:da:42:52:50:fc:41:aa:b8:74:5c:89:87:
ff:e0:71:a2:fa:47:b7:6d:82:b6:15:22:58:f9:a3:59:e3:a4:
c7:2e:29:88:4f:79:6d:00:db:f8:9f:c7:05:ba:98:c9:f7:61:
be:f3:75:23:c5:44:e7:9b:87:86:c3:26:8c:b5:cc:10:b2:dd:
f8:47:be:9a:f9:b9:0f:8a:e2:77:cb:55:00:0b:20:21:1d:98:
b0:55:32:73:1c:e3:a2:d5:85:77:09:b2:8e:ce:54:f3:8e:af:
24:79:11:71:17:e2:21:71:1a:07:c3:c4:b6:4d:a8:92:bf:0e:
c4:78:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:45 2026 by rpki-client