Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa
File: pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa (raw, json)
Hash identifier: D/fcF4IEFWMJQvt8UmINawGoN8hFrDrMCVBxLhfIb1o=
Subject key identifier: A4:54:C7:5B:8F:81:B9:CC:7E:96:93:D3:96:BB:65:E5:67:E0:A7:52
Certificate issuer: /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial: 019F2368CC66875D865160C5C37A25C27822
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50629
IP address blocks: 185.117.212.0/23 maxlen: 23
2a06:8780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:66:87:5d:86:51:60:c5:c3:7a:25:c2:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a454c75b8f81b9cc7e9693d396bb65e567e0a752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:aa:6a:77:3a:bb:79:87:27:5e:88:ca:74:
83:f2:64:bb:44:51:d7:c6:3a:c3:fd:fa:de:f9:06:
72:09:50:d6:97:ea:32:46:7c:fc:88:f1:35:ac:32:
da:ea:08:d0:b1:62:6e:61:3c:52:17:0f:59:f9:0a:
09:00:1c:19:1e:ad:8f:a2:6c:fe:da:c5:00:b2:78:
bf:7f:36:86:53:84:b0:2b:46:6d:88:32:cf:e9:5e:
27:de:ef:d4:05:04:83:d0:02:ff:8f:92:30:28:e7:
f6:31:e7:e8:33:9e:b9:1e:a4:e1:2a:12:9f:c3:fd:
51:f7:85:0c:ba:76:8d:b3:91:4b:2b:87:43:4b:46:
31:a7:62:e8:8b:26:55:97:b5:b4:d0:0f:83:fc:67:
9f:a1:5d:76:50:10:dd:84:d0:1d:bf:82:34:01:e6:
b7:2c:eb:e0:5a:52:3d:2d:c9:47:c7:8c:be:96:ca:
63:1f:89:8e:49:04:f5:d9:ed:71:07:34:37:35:57:
53:ec:4e:74:ee:0a:f9:93:dc:4d:9c:f0:72:00:02:
93:a8:98:10:b6:fa:2b:32:02:36:b8:a4:00:91:7c:
7b:e3:a7:a9:21:82:0d:fd:58:be:fa:71:d4:5c:c0:
43:37:09:6f:3e:16:97:02:a5:c4:60:18:fd:1a:23:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:C7:5B:8F:81:B9:CC:7E:96:93:D3:96:BB:65:E5:67:E0:A7:52
X509v3 Authority Key Identifier:
keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/pFTHW4-Bucx-lpPTlrtl5Wfgp1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.212.0/23
IPv6:
2a06:8780::/32
Signature Algorithm: sha256WithRSAEncryption
6c:30:d9:bc:a3:0c:39:64:b5:9c:58:e0:64:13:ba:bb:c5:67:
25:4b:d2:8b:81:7f:53:ad:87:ff:2a:34:b1:f5:4b:65:84:8d:
c2:a0:77:c9:26:f1:70:05:9f:5f:19:fe:72:77:7d:5d:37:4f:
b8:7f:72:4f:34:44:ae:79:2e:dc:9a:f6:c3:2c:82:12:5d:83:
98:65:f9:47:cc:dd:88:38:d2:09:9f:6b:a4:a7:35:17:58:32:
b7:1d:4d:90:f0:d2:bd:96:a5:bc:95:b9:fd:76:92:46:ca:ae:
0f:85:f3:7a:b7:43:97:03:74:e0:0b:34:1c:09:25:31:86:c9:
c4:da:64:d0:37:d4:5a:36:9a:00:25:93:40:17:52:80:50:98:
3a:15:df:25:8e:58:57:91:96:e5:26:dc:2b:bf:dc:e5:28:a2:
a7:f9:a4:21:0e:e8:a8:4a:04:04:0d:77:ba:fd:fb:d6:77:77:
7a:85:42:46:1d:21:5e:ab:10:5b:85:56:b7:a0:0a:59:b5:a2:
e5:93:ee:bd:fe:0e:e0:56:93:74:95:d5:e9:b9:95:30:b7:81:
99:99:ba:39:58:58:67:3d:eb:0d:bf:fd:0d:3b:e6:64:85:93:
3c:d3:9c:b8:51:a6:d1:ce:22:4d:d0:19:25:6f:5d:39:d4:41:
2e:3d:09:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:29 2026 by rpki-client