Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/rgf2lL7Jgw6RK7qaXmbChVwSTf0.roa
File: rgf2lL7Jgw6RK7qaXmbChVwSTf0.roa (raw, json)
Hash identifier: fKOP4EOCaTf8IRTys1S3nRNruXyXKFbHVkVvbzbYHaY=
Subject key identifier: AE:07:F6:94:BE:C9:83:0E:91:2B:BA:9A:5E:66:C2:85:5C:12:4D:FD
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019F9DA3A10086D077A87A0E72740235E441
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/rgf2lL7Jgw6RK7qaXmbChVwSTf0.roa
Signing time: Sun 26 Jul 2026 08:56:14 +0000
ROA not before: Sun 26 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 213.187.150.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a3:a1:00:86:d0:77:a8:7a:0e:72:74:02:35:e4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 26 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae07f694bec9830e912bba9a5e66c2855c124dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:77:50:bb:f9:08:13:4f:0a:c4:5b:b9:d8:f5:
60:10:c0:a7:ed:2e:a2:31:49:ce:fb:de:9f:5b:67:
df:8d:a2:56:2b:88:16:b8:6d:8f:44:51:77:6e:91:
66:bf:79:b1:65:53:26:51:7c:1a:9c:1b:5d:f3:f1:
87:b7:f3:b2:20:58:da:57:b0:98:af:15:52:ae:e4:
5c:86:b8:0c:0b:2a:22:b1:04:e3:e5:c5:47:46:3a:
8e:94:9a:99:20:26:98:f0:f2:e0:d0:bb:cf:d7:d0:
80:ae:7e:44:55:83:92:ba:3c:49:69:da:e3:68:10:
7f:33:51:87:00:05:28:c7:13:e4:22:2d:76:49:88:
ee:c4:71:47:e2:4a:1b:c0:77:97:4b:3f:21:0a:b3:
1f:1e:1c:a0:b5:48:be:76:a4:23:75:31:c3:3a:22:
26:88:90:cb:a5:da:1f:06:64:fa:c8:0b:a1:37:82:
52:6d:94:f9:53:b6:f5:a4:88:ec:dc:9b:1d:5a:09:
9b:4b:7c:44:71:29:49:84:57:67:7e:70:28:f3:62:
64:78:12:59:07:85:81:0c:ae:2c:87:37:53:2a:53:
36:9b:14:a6:48:ee:01:cf:be:d5:ef:07:e0:1d:0b:
5f:eb:f3:3f:61:cf:cb:00:f7:b9:25:45:85:d0:6e:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:F6:94:BE:C9:83:0E:91:2B:BA:9A:5E:66:C2:85:5C:12:4D:FD
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/rgf2lL7Jgw6RK7qaXmbChVwSTf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.150.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c6:24:3a:ec:55:3a:d9:8c:dc:83:b3:51:83:c3:33:97:55:
bf:08:96:27:a6:64:81:9a:c7:27:4f:a4:eb:f1:b1:c9:73:d2:
ef:a1:d1:d6:23:e5:34:57:54:73:5d:3a:2a:66:c3:c4:a7:db:
5e:25:32:1d:a9:83:26:00:cb:0b:4b:18:36:99:13:42:87:e3:
a9:22:77:93:0a:87:95:b4:83:ba:76:e8:f9:fd:fd:03:da:b2:
c3:03:8f:a2:ac:ec:26:8f:2c:b2:7c:90:45:f3:ac:39:33:cf:
d2:81:1b:12:26:c2:11:a9:71:b5:93:6f:8b:e6:2d:9d:97:0f:
c0:96:f0:bd:57:19:35:cb:93:16:02:c1:39:23:1c:7e:54:47:
9d:de:01:bd:b7:3d:aa:ad:ef:96:6a:4a:ea:56:23:3f:eb:31:
3d:74:38:73:23:f1:b7:e9:00:55:9c:61:f8:eb:1b:b9:66:3a:
80:a6:ed:cd:c3:1d:5b:17:9c:53:94:d9:d3:21:c6:3d:3b:5e:
f0:ee:8f:94:5f:cc:45:44:a9:b7:ee:8b:08:28:3c:ba:db:65:
db:79:4b:a2:28:9b:0a:35:df:77:48:59:6a:54:a6:72:21:00:
d3:81:fb:60:2a:c2:88:6c:02:38:bb:90:55:b2:98:2d:8a:c4:
04:e9:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:41 2026 by rpki-client