Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/_bajoAs7IshxDLQiTYyJzv1Bm5E.roa
File: _bajoAs7IshxDLQiTYyJzv1Bm5E.roa (raw, json)
Hash identifier: uQSAmD4VKNGF+UiWybQdbv/JC0YWn0wCO4Ez1EgY17w=
Subject key identifier: FD:B6:A3:A0:0B:3B:22:C8:71:0C:B4:22:4D:8C:89:CE:FD:41:9B:91
Certificate issuer: /CN=a804ff75b90312fd516b80d84454dd78f4a38923
Certificate serial: 019F2368B6D6905C4843435A3A2528E1BD09
Authority key identifier: A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/_bajoAs7IshxDLQiTYyJzv1Bm5E.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198371
IP address blocks: 217.79.148.0/24 maxlen: 24
217.79.149.0/24 maxlen: 24
217.79.150.0/24 maxlen: 24
217.79.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:d6:90:5c:48:43:43:5a:3a:25:28:e1:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a804ff75b90312fd516b80d84454dd78f4a38923
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdb6a3a00b3b22c8710cb4224d8c89cefd419b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:74:21:8f:c3:80:ce:fa:dd:51:ea:7e:cc:
c4:4c:ef:64:f1:79:2a:5f:53:0e:d5:db:67:26:14:
9b:7a:d3:c7:2f:6b:72:98:aa:15:d3:f5:2b:cf:47:
e4:72:1c:a3:81:58:a7:b6:d5:96:72:04:62:4d:d8:
3b:a7:d2:bf:6e:fc:44:57:62:ec:a6:06:d4:b0:25:
f6:04:08:09:9a:d3:09:94:35:60:0a:7e:c2:cc:c2:
77:e3:16:66:80:df:f0:4d:37:8b:ff:64:84:74:d9:
03:1d:03:e0:a5:df:01:e5:60:53:88:be:86:4a:4b:
7d:e7:c4:bd:49:fb:8f:8c:24:ae:43:66:2f:a6:d0:
29:e6:0c:9d:e6:7c:78:76:89:91:e0:1f:14:01:5d:
7a:e2:95:c3:e1:85:fa:31:d0:e0:6e:d4:2a:dc:ff:
f0:94:9e:ed:93:93:0c:33:fd:3f:3e:eb:f7:a0:2f:
5d:0e:59:a4:29:9f:df:0b:93:94:3e:06:ae:57:d1:
b5:2a:a9:33:78:02:a3:03:7b:cd:65:b4:21:9a:80:
99:64:d4:50:39:fc:0a:de:ef:ca:dc:a8:0a:88:fd:
ae:b1:b4:6e:1e:14:3b:d4:44:86:cf:65:1f:28:84:
fc:50:6d:43:1e:42:58:cc:f3:c5:8f:74:bb:18:2a:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B6:A3:A0:0B:3B:22:C8:71:0C:B4:22:4D:8C:89:CE:FD:41:9B:91
X509v3 Authority Key Identifier:
keyid:A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/_bajoAs7IshxDLQiTYyJzv1Bm5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.148.0/22
Signature Algorithm: sha256WithRSAEncryption
88:c1:00:d3:1b:1c:e9:66:a0:c1:a8:79:e4:c1:d6:6c:f0:f3:
85:09:5d:97:ed:b6:9e:7c:09:5a:d5:20:8c:a5:b0:18:c9:0c:
19:fe:1c:1e:68:92:1f:9f:3c:6b:d6:49:39:b4:b7:92:9b:20:
4d:e4:54:b7:5f:92:a5:22:05:6a:d2:67:93:f1:59:17:31:be:
f6:8b:6d:c3:34:d7:93:bf:1a:34:84:d5:32:4a:e5:77:98:4f:
b1:bc:f2:e2:4b:96:ef:b2:0f:81:8e:5f:c6:67:4b:0f:cd:a8:
1f:41:04:b4:73:50:9a:c6:72:ec:e9:a7:23:4b:01:51:32:f1:
60:ed:41:ad:0a:fc:28:4a:cb:b4:8c:02:4b:fb:52:ee:22:4c:
2f:9c:52:b3:38:15:f0:54:58:aa:7c:7a:a8:a8:e3:b3:cf:10:
3e:46:09:4a:61:25:36:f7:57:dd:13:87:ca:e8:7a:a2:86:f4:
ca:8e:1f:f8:e0:e8:c5:bc:75:e3:d9:48:38:fb:47:be:fa:59:
18:9f:4f:cf:ec:2a:4c:d1:a0:2b:83:9e:25:6d:44:45:0c:45:
9e:00:d2:a3:ba:91:03:51:1e:e6:5e:c0:0d:4c:b7:37:21:0b:
29:86:23:8e:6a:43:8c:91:21:53:7f:ba:f4:be:07:71:c8:2c:
42:ee:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:07 2026 by rpki-client