Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/L9vi7oaF7p0v7m8lMsP1-CSnn40.roa
File: L9vi7oaF7p0v7m8lMsP1-CSnn40.roa (raw, json)
Hash identifier: SjasMchH3XZ1XzHCHPI6noKvIxn92k+R3PPiC6LGtDE=
Subject key identifier: 2F:DB:E2:EE:86:85:EE:9D:2F:EE:6F:25:32:C3:F5:F8:24:A7:9F:8D
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019F9DD9A68A70EC3C4142557FE99D52B4A7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/L9vi7oaF7p0v7m8lMsP1-CSnn40.roa
Signing time: Sun 26 Jul 2026 09:55:14 +0000
ROA not before: Sun 26 Jul 2026 09:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 45.159.148.0/24 maxlen: 24
87.236.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:d9:a6:8a:70:ec:3c:41:42:55:7f:e9:9d:52:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 26 09:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fdbe2ee8685ee9d2fee6f2532c3f5f824a79f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:ab:2c:a7:81:ff:df:48:34:3e:fa:78:e6:
33:fe:91:c0:66:b5:e3:d0:19:c7:88:e9:64:f6:87:
c8:fd:c8:9c:9a:20:b8:11:63:f2:2c:13:b6:0e:a0:
5b:c7:f4:f1:0a:f5:34:47:e8:6e:fc:da:7c:29:52:
96:b4:e4:17:00:dc:99:49:37:7e:17:3c:63:9c:7b:
74:e4:4a:0d:16:93:06:3c:29:69:8f:78:f0:58:5e:
1b:ea:36:a6:b9:53:15:df:c9:37:09:20:de:2a:61:
f5:0a:02:cf:fb:4c:14:f1:3e:57:b9:ca:19:61:39:
64:ca:b0:66:ec:a9:ea:27:67:5b:ec:ad:0c:7f:0c:
95:8b:94:e0:9a:04:af:1a:0d:a3:56:9d:36:7f:8e:
8b:ee:d7:5a:58:8b:36:0d:1e:44:8e:15:cb:3f:9e:
b9:ca:38:6d:c0:da:56:f3:04:17:06:b2:66:00:8e:
bb:37:ba:44:28:25:02:e0:08:13:2c:d4:ae:ce:d2:
53:c4:0b:4f:77:58:8f:f3:0b:4b:d2:ae:e8:24:47:
db:1f:ba:4d:6a:4e:a6:a7:56:4e:8f:93:8f:99:78:
12:77:a1:0b:10:a8:08:5a:f6:7d:39:63:52:ae:a6:
98:07:e3:09:07:25:47:39:ce:af:b8:81:17:cd:28:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:E2:EE:86:85:EE:9D:2F:EE:6F:25:32:C3:F5:F8:24:A7:9F:8D
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/L9vi7oaF7p0v7m8lMsP1-CSnn40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.148.0/24
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c4:49:af:91:14:e1:6c:5f:10:51:dd:66:3b:a7:ff:5e:53:
0b:00:09:1c:06:bb:68:cc:23:ab:7d:59:de:8c:0e:d5:18:e6:
54:2e:f0:68:23:da:1b:c0:16:5b:63:b3:23:68:7b:80:24:57:
06:7d:8d:d2:52:f0:81:1c:61:9f:88:d2:b9:c6:69:c8:0c:eb:
b0:61:eb:66:62:46:e5:56:73:a0:8d:ee:7b:84:9f:ad:ab:8b:
ef:2b:1d:83:c7:e0:1e:73:a6:08:9b:7d:dc:35:17:6d:d0:00:
33:0e:6d:5a:0e:ce:01:0b:30:67:ba:c4:35:ff:91:1d:5b:d9:
94:89:e3:c8:cc:b4:f8:1e:8f:33:0f:d6:a5:65:2b:76:76:45:
08:fb:4e:64:46:08:af:8d:f1:fc:35:46:00:fa:18:e4:6c:36:
0b:fa:28:cf:a0:12:be:a6:58:18:ee:12:62:56:c9:19:e0:87:
15:01:43:aa:d4:af:22:a0:61:df:27:6d:fc:82:b6:44:e5:81:
79:27:75:11:5e:20:85:01:c3:0b:61:c5:1d:b0:33:94:5a:a9:
99:15:84:b7:04:24:ca:f3:18:a9:00:b3:9d:77:89:1f:ee:55:
28:c0:b6:0c:14:c6:80:21:46:f4:18:2b:54:18:5c:b4:68:d0:
89:b1:f0:0d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+d2aaKcOw8QUJVf+mdUrSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwNzI2MDk1NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmRiZTJlZTg2ODVlZTlkMmZlZTZmMjUzMmMzZjVmODI0YTc5ZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIWrLKeB/99IND76eOYz/pHAZrXj
0BnHiOlk9ofI/cicmiC4EWPyLBO2DqBbx/TxCvU0R+hu/Np8KVKWtOQXANyZSTd+
FzxjnHt05EoNFpMGPClpj3jwWF4b6jamuVMV38k3CSDeKmH1CgLP+0wU8T5XucoZ
YTlkyrBm7KnqJ2db7K0MfwyVi5TgmgSvGg2jVp02f46L7tdaWIs2DR5EjhXLP565
yjhtwNpW8wQXBrJmAI67N7pEKCUC4AgTLNSuztJTxAtPd1iP8wtL0q7oJEfbH7pN
ak6mp1ZOj5OPmXgSd6ELEKgIWvZ9OWNSrqaYB+MJByVHOc6vuIEXzSgmJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC/b4u6Ghe6dL+5vJTLD9fgkp5+NMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvTDl2aTdvYUY3cDB2N204bE1zUDEtQ1NubjQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ+UAwQA
V+wmMA0GCSqGSIb3DQEBCwUAA4IBAQAjxEmvkRThbF8QUd1mO6f/XlMLAAkcBrto
zCOrfVnejA7VGOZULvBoI9obwBZbY7MjaHuAJFcGfY3SUvCBHGGfiNK5xmnIDOuw
YetmYkblVnOgje57hJ+tq4vvKx2Dx+Aec6YIm33cNRdt0AAzDm1aDs4BCzBnusQ1
/5EdW9mUiePIzLT4Ho8zD9alZSt2dkUI+05kRgivjfH8NUYA+hjkbDYL+ijPoBK+
plgY7hJiVskZ4IcVAUOq1K8ioGHfJ238grZE5YF5J3URXiCFAcMLYcUdsDOUWqmZ
FYS3BCTK8xipALOdd4kf7lUowLYMFMaAIUb0GCtUGFy0aNCJsfAN
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:46 2026 by rpki-client