Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/fLjNhiNlQuagxlgMITaTa_EIR0Q.roa
File: fLjNhiNlQuagxlgMITaTa_EIR0Q.roa (raw, json)
Hash identifier: EUP2h6tV6o5nO3vIulpBuvhTz/1BW/BFf+T1c3APWJ0=
Subject key identifier: 7C:B8:CD:86:23:65:42:E6:A0:C6:58:0C:21:36:93:6B:F1:08:47:44
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 019FEB0AF2D398B4258BDAC0B3DCF416EC56
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/fLjNhiNlQuagxlgMITaTa_EIR0Q.roa
Signing time: Mon 10 Aug 2026 09:39:51 +0000
ROA not before: Mon 10 Aug 2026 09:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.178.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:0a:f2:d3:98:b4:25:8b:da:c0:b3:dc:f4:16:ec:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Aug 10 09:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cb8cd86236542e6a0c6580c2136936bf1084744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:73:03:f3:ef:a0:0a:06:0b:dd:86:42:36:
3d:1d:13:00:1a:2d:73:05:be:a2:a9:dc:9d:e8:da:
88:26:87:40:ed:56:84:e5:6e:c1:b1:34:36:0b:f8:
ae:7d:d4:1d:f9:c2:9b:20:64:b7:f0:22:5e:28:c5:
e0:97:90:42:34:1e:19:c2:03:6e:b7:e1:ce:d6:3e:
00:8f:c7:59:6f:41:87:4c:c9:ba:4a:2f:98:2a:7d:
0d:79:ca:89:c0:5a:de:e7:ae:79:f4:0e:8e:53:87:
f9:07:ca:01:6f:6d:f0:6e:f9:54:a5:07:50:89:77:
df:be:e9:2d:53:ad:2b:4d:54:eb:6b:64:8f:16:35:
33:be:40:6f:71:80:1c:d0:f1:6d:bf:49:85:5a:ec:
6f:de:fe:a1:b0:e5:36:d3:e0:a2:f6:a4:f0:1f:d9:
d5:9a:43:95:d8:8f:89:f4:f9:f0:ce:40:45:60:58:
d9:03:aa:18:06:1f:ac:a7:98:55:3b:82:3d:fd:06:
7a:8f:84:58:cd:f9:a1:cc:de:43:15:68:03:b9:74:
b6:db:4a:66:6e:c8:92:81:cd:14:50:2b:e3:25:7f:
f1:24:29:c0:cd:3d:47:08:cd:db:c6:64:05:dd:89:
51:ad:77:53:e8:9e:dd:c7:27:22:9e:ef:6b:2c:27:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B8:CD:86:23:65:42:E6:A0:C6:58:0C:21:36:93:6B:F1:08:47:44
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/fLjNhiNlQuagxlgMITaTa_EIR0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.31.0/24
Signature Algorithm: sha256WithRSAEncryption
17:46:55:c6:78:a8:b7:dd:dc:a6:87:a5:c5:13:3c:86:5f:c4:
29:2b:4c:11:5b:41:0b:fe:5d:16:d6:c9:f7:5b:92:c6:8f:1a:
ab:fc:73:aa:db:db:20:f1:33:be:a3:e5:9c:ea:0c:62:66:a1:
e5:0a:75:11:6d:b1:cc:54:f6:10:11:d0:25:43:f7:75:a8:eb:
c6:bc:5a:f0:90:0d:17:f6:c4:45:87:f9:15:64:0b:b4:4e:75:
96:c6:e3:63:7f:b8:dc:fb:45:d4:f4:dd:a3:e3:2e:c5:c4:ce:
02:17:e6:b6:2b:5c:dd:04:e6:d8:88:c9:02:ca:2e:a6:31:bd:
c4:a3:61:f9:b0:8d:93:3a:34:74:6c:a0:4c:44:54:ac:bc:40:
c6:77:79:d8:d7:fe:45:a8:7e:b4:c1:56:cf:3b:7f:c0:d1:3b:
eb:a3:2c:b1:d5:e1:c6:31:24:16:38:31:64:57:cd:a9:9a:92:
3e:15:40:24:7e:4e:45:a3:dc:16:89:22:5b:bc:e9:1b:20:ad:
4b:91:b0:e6:44:56:92:98:4a:ca:0c:47:7c:a4:11:93:cd:8b:
8d:68:ad:9c:b7:0a:c2:39:21:6b:a5:5a:7e:44:1b:66:93:34:
04:fc:9d:41:2d:75:e8:e9:98:cc:1b:10:78:a1:f7:0e:9b:d9:
6b:e1:c5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:55 2026 by rpki-client