Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa
File: 1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa (raw, json)
Hash identifier: mM9qtiyOIDoLHT2ky1NvYHeN+2+g0FGedZNgPDVPiQY=
Subject key identifier: D6:3E:54:00:FE:47:E6:8B:58:9B:AA:52:E2:0D:27:D5:5C:F1:C5:84
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019FC8BA89911FBEE6E954707439199759FE
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa
Signing time: Mon 03 Aug 2026 17:44:55 +0000
ROA not before: Mon 03 Aug 2026 17:44:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 195.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:ba:89:91:1f:be:e6:e9:54:70:74:39:19:97:59:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 3 17:44:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d63e5400fe47e68b589baa52e20d27d55cf1c584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:b8:65:c0:60:f6:c0:b0:9b:52:dd:9e:dc:
fa:90:5f:50:f0:0a:76:60:13:df:2a:2b:be:f8:95:
cd:f6:8b:56:bb:67:6e:23:58:57:78:56:42:08:1f:
b2:cd:a4:0e:ea:b5:bd:ee:41:cd:7c:7e:5f:ea:a0:
81:fb:68:be:12:0e:e1:b0:ac:da:fc:6c:58:f5:d6:
60:50:61:25:db:c7:ae:10:d7:f4:d4:6a:a2:12:73:
c1:cb:a7:c7:4a:da:0d:8f:30:74:a9:2c:21:1b:94:
24:65:2a:50:7a:b2:2a:d4:d6:b6:8e:74:1f:dd:fe:
cf:96:33:a3:cb:0f:09:cc:fa:d3:7d:7d:5d:de:fc:
c1:41:2c:22:53:2a:ef:ee:71:c7:bb:99:18:47:2e:
74:e1:b6:15:bb:bd:b3:4a:cd:40:ea:23:9e:ba:e4:
68:33:9c:b2:a5:c9:b6:72:b7:e8:db:9d:37:e3:2f:
23:13:d0:d8:a8:06:cf:13:37:c7:46:79:23:20:0e:
a5:58:2c:db:62:2b:ed:2c:d9:c5:15:ec:5a:1a:66:
08:0b:32:4a:55:38:5f:df:65:58:31:4f:39:f6:5b:
c2:5f:42:8a:24:8c:fc:d2:7d:45:43:1e:72:8e:e9:
ef:c8:f2:e9:02:e6:54:04:07:28:05:e0:38:28:e0:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3E:54:00:FE:47:E6:8B:58:9B:AA:52:E2:0D:27:D5:5C:F1:C5:84
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:5f:d7:0b:62:23:6c:28:11:d4:9f:5b:2a:e4:cd:0d:b3:91:
38:8f:0e:b2:f2:cc:dd:37:28:77:f3:61:80:58:f0:ab:80:62:
aa:1a:29:79:5b:18:60:9e:03:88:9c:d5:d8:d1:a7:58:07:e4:
77:46:9c:3e:f3:7c:0d:c5:d2:f8:63:69:aa:3a:b1:18:b9:f9:
51:3e:7c:14:b0:0a:f7:1f:00:0b:23:88:1d:bf:ed:d7:28:02:
34:6b:d8:c4:dc:f6:a6:be:39:4e:a6:dc:1f:43:bc:3b:d5:68:
dd:a8:dd:f6:b5:e8:d5:5a:3d:ef:61:6c:a0:67:34:e2:11:66:
74:6d:23:47:d1:b2:b6:c0:74:59:95:c9:6a:d4:db:40:03:c4:
e9:f8:f6:d2:1e:c5:9e:a2:07:1d:23:86:52:b9:47:93:df:45:
f9:f7:6d:0a:00:55:0e:f3:32:9c:ae:3e:f6:0a:c6:22:a4:af:
6c:a9:f9:83:d0:7a:b3:db:9a:d1:d8:fc:da:0f:f2:1c:69:6c:
00:c2:ca:1f:0c:f6:00:86:57:53:d0:5f:d8:7d:b2:c9:23:a7:
c7:82:3d:00:ad:60:7f:8f:31:44:1d:50:bb:75:c7:b9:6a:65:
e0:34:73:11:64:41:94:a5:f0:97:47:94:30:0e:65:d9:bb:5c:
60:82:73:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 11:30:25 2026 by rpki-client