Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/1-rYrMtp_HJ2HjHiaFaFbfWd5ZfY.roa
File: 1-rYrMtp_HJ2HjHiaFaFbfWd5ZfY.roa (raw, json)
Hash identifier: CwUROlNTjJ+F2NQLHWd67p+eL2JPJl95xKjaaJ1Rdhs=
Subject key identifier: FA:B6:2B:32:DA:7F:1C:9D:87:8C:78:9A:15:A1:5B:7D:67:79:65:F6
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 019FDCA8B27D1C00A473ECE7B9941298DAC2
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/1-rYrMtp_HJ2HjHiaFaFbfWd5ZfY.roa
Signing time: Fri 07 Aug 2026 14:37:51 +0000
ROA not before: Fri 07 Aug 2026 14:37:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 193.148.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:a8:b2:7d:1c:00:a4:73:ec:e7:b9:94:12:98:da:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Aug 7 14:37:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fab62b32da7f1c9d878c789a15a15b7d677965f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:dd:84:07:dd:bd:7f:5c:a4:c0:4b:51:01:
83:f5:10:ef:e6:6c:a5:bb:09:37:94:68:ee:3b:96:
c5:4b:30:d9:58:5e:0e:2c:4f:de:5f:9a:e8:17:53:
a9:e2:aa:50:fa:0e:c6:17:ec:10:d4:d8:0c:b1:02:
46:eb:92:d5:57:ab:39:e1:e9:96:f5:a9:ac:2d:00:
c8:27:de:c7:e4:e8:b7:c0:fb:96:73:99:a3:24:bb:
71:b5:71:bd:89:9a:a7:48:41:b9:00:52:c5:f1:80:
71:34:1a:ad:ee:df:45:f5:d0:0d:43:0a:37:3c:00:
ca:0f:4a:04:fd:ef:a8:2c:98:69:a5:23:f0:1a:90:
29:62:bf:56:23:8c:c3:56:9e:4b:e0:1f:56:a0:95:
58:df:e1:e4:35:a4:89:44:7d:52:21:22:9e:00:19:
19:00:56:33:13:b0:da:7c:e3:87:79:df:d9:24:07:
ec:ec:1e:e1:5b:61:40:89:eb:a7:8a:a9:79:c4:a1:
17:60:8a:97:1a:d2:a9:3f:07:e3:d0:80:03:7d:da:
f3:a1:61:34:c0:4e:ce:38:b6:93:05:e3:1e:7f:3c:
40:d5:b0:1d:33:5a:bd:83:2a:da:2e:80:c7:70:0a:
8d:55:8f:3f:15:ac:7f:81:66:03:02:87:78:93:f9:
17:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:2B:32:DA:7F:1C:9D:87:8C:78:9A:15:A1:5B:7D:67:79:65:F6
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/1-rYrMtp_HJ2HjHiaFaFbfWd5ZfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:af:2c:79:cf:6d:bc:1f:f3:73:ad:54:d3:24:85:65:2b:31:
da:9d:c5:df:06:4a:e2:86:92:95:76:02:79:2d:75:53:87:5e:
75:95:f0:93:28:ec:ae:48:4a:a1:ea:97:d8:20:6e:34:c9:c2:
9c:cd:38:11:3f:31:a8:5f:85:4c:28:16:59:56:ef:db:6d:69:
8b:0a:85:4b:f5:9f:ce:c3:98:fb:ee:f5:b6:e9:b1:06:14:25:
a8:12:c5:dc:0d:c1:e1:52:ac:ee:0d:0d:78:29:6d:79:4e:a0:
c3:31:24:92:d0:c1:23:c0:1e:9b:c3:8f:22:2b:00:f8:a9:36:
2d:0e:14:3b:f8:2b:ef:21:98:3b:eb:f6:9c:03:e2:5a:f8:86:
d8:d2:88:8b:a6:9a:6f:4b:c2:9d:de:f8:27:38:d1:63:5f:89:
dc:f4:00:fb:5d:a8:6e:06:f3:63:8c:2b:b9:6c:eb:f2:d2:5d:
5b:77:2d:17:a8:3c:0f:f8:04:db:bb:01:e4:04:27:c4:51:74:
64:3a:a9:af:18:1e:de:76:6f:f5:3e:3b:dc:c7:5a:cd:35:ad:
5c:00:08:e8:c3:0c:be:01:6b:8b:65:76:c9:70:55:60:c9:09:
1a:71:94:0a:e0:aa:90:65:c4:c2:8e:77:03:ca:28:70:88:79:
5b:84:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:47:40 2026 by rpki-client