Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/1mu-oF5lEGtu3bKBru8G-eAjPDI.roa
File: 1mu-oF5lEGtu3bKBru8G-eAjPDI.roa (raw, json)
Hash identifier: HG5xIfF52f1qSIktwkhA6u4wMdnhONyi0mxZYpcPZgY=
Subject key identifier: D6:6B:BE:A0:5E:65:10:6B:6E:DD:B2:81:AE:EF:06:F9:E0:23:3C:32
Certificate issuer: /CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
Certificate serial: 019FEB31673C5FF15CA5474544BD4E527CC4
Authority key identifier: ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/1mu-oF5lEGtu3bKBru8G-eAjPDI.roa
Signing time: Mon 10 Aug 2026 10:21:51 +0000
ROA not before: Mon 10 Aug 2026 10:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 94.127.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:31:67:3c:5f:f1:5c:a5:47:45:44:bd:4e:52:7c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5fcbd972214abe7f7d016ed1bc133ad061eaed
Validity
Not Before: Aug 10 10:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d66bbea05e65106b6eddb281aeef06f9e0233c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:52:4b:a1:83:2c:f3:cd:e4:22:bd:73:65:
23:10:2d:ef:f5:60:86:26:08:4a:1d:eb:5d:c7:eb:
42:32:a5:6c:2a:ed:f5:aa:0f:43:62:e1:43:d5:c0:
0d:c0:96:dc:b9:e0:c8:f1:68:49:3a:ac:3c:8b:44:
1b:4b:a8:53:ba:4e:89:9f:11:ce:83:1c:ce:53:44:
7b:2f:4b:cc:5e:e4:6f:de:6d:3e:48:7e:eb:79:77:
63:7e:72:71:6c:9c:7e:fb:34:36:0d:7d:eb:ca:7c:
e1:63:21:75:64:8c:81:71:54:b2:10:ea:0c:25:14:
2b:ad:a2:28:ac:1e:0f:a4:80:48:4b:ee:e0:11:c6:
cf:76:00:9a:9c:c5:77:31:8a:ec:71:32:fd:55:07:
15:bf:ca:dc:02:b2:34:0f:98:92:2a:25:7f:38:c4:
f0:60:0d:65:12:86:9e:43:75:8a:c6:39:6b:47:4c:
dd:5d:f2:8a:30:45:ec:9e:a1:f5:98:12:50:7f:6d:
43:74:d3:d1:af:5c:fc:5e:de:fe:14:44:8e:8d:3d:
21:d4:01:68:83:dd:bf:bc:e8:db:96:b5:c6:eb:61:
46:99:0c:1a:64:51:07:41:c4:77:fa:2b:f4:a2:07:
19:2d:53:74:07:66:49:b6:8e:47:bf:2a:20:8b:51:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6B:BE:A0:5E:65:10:6B:6E:DD:B2:81:AE:EF:06:F9:E0:23:3C:32
X509v3 Authority Key Identifier:
keyid:ED:5F:CB:D9:72:21:4A:BE:7F:7D:01:6E:D1:BC:13:3A:D0:61:EA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V_L2XIhSr5_fQFu0bwTOtBh6u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/1mu-oF5lEGtu3bKBru8G-eAjPDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ffdc37-1a44-47cf-adaf-99933eec5c6b/1/7V_L2XIhSr5_fQFu0bwTOtBh6u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:19:3b:5b:99:10:9a:72:65:89:80:72:1e:ad:c3:85:bb:fa:
3c:4c:1d:54:24:f5:3c:63:16:a5:4a:63:51:4e:3b:12:45:4a:
2d:fe:18:a6:2c:bd:96:ad:3c:28:2e:33:77:4c:4c:59:f5:0b:
01:49:c0:04:9e:5f:24:a9:e4:1b:2f:60:0a:84:5f:8c:ca:9f:
c1:11:13:a4:cc:38:03:64:40:fa:fb:97:ef:06:3d:81:5f:b4:
5c:b9:c4:d0:e5:81:1f:04:d4:47:04:ee:eb:a7:8d:78:10:f3:
75:d2:ea:e0:2c:af:76:a3:5d:4a:1c:a8:12:fa:53:76:45:2d:
e3:56:77:b9:19:d2:76:6f:02:2f:f5:35:72:4b:c1:28:54:dc:
f5:12:ca:0b:81:9f:f6:9e:8f:7b:98:85:11:ab:78:21:bb:07:
e8:7a:f5:c3:94:8a:54:23:9f:8a:bd:99:d3:c7:d2:63:2f:a1:
0d:b6:d1:1a:e5:26:6e:a6:a8:60:d7:f9:53:f1:49:fe:8e:7c:
6a:75:c3:cd:62:8f:80:97:e6:5f:56:1c:ee:7b:a7:f5:48:62:
eb:74:cb:ec:cf:22:d1:7c:06:f5:a4:43:75:50:9c:c2:56:fd:
12:49:3f:0b:a1:09:e9:96:4a:d1:61:b7:4e:ca:3c:e1:f4:e4:
ed:2d:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:18:19 2026 by rpki-client