Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-v-sVae2UHM2q2HnLRv1E_V2EJ8.roa
File: 1-v-sVae2UHM2q2HnLRv1E_V2EJ8.roa (raw, json)
Hash identifier: 3I0IrC7bHdB5UUAKGMYLDKl9xCDoC13rfeLSC9cL3K4=
Subject key identifier: FA:FF:AC:55:A7:B6:50:73:36:AB:61:E7:2D:1B:F5:13:F5:76:10:9F
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019F4DC01DFB796B8A6C5E0CEEE80C4602EA
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-v-sVae2UHM2q2HnLRv1E_V2EJ8.roa
Signing time: Fri 10 Jul 2026 20:37:43 +0000
ROA not before: Fri 10 Jul 2026 20:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 194.41.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:c0:1d:fb:79:6b:8a:6c:5e:0c:ee:e8:0c:46:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 10 20:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faffac55a7b6507336ab61e72d1bf513f576109f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:e1:c2:c4:d0:0f:76:ff:9d:d4:72:e2:b0:
07:15:9c:84:c0:e5:88:c9:00:cf:c4:7e:11:9a:57:
14:44:55:83:2d:3a:6c:76:eb:cf:1d:08:14:cc:1d:
b3:aa:0c:67:1f:af:2c:2c:a2:94:74:ad:f0:55:a7:
1f:d5:c3:34:ed:4d:bf:25:cc:bc:0f:78:d2:ed:bf:
e2:23:54:34:c6:5b:a8:f2:33:73:e0:91:6a:4f:58:
9e:1a:49:e2:03:2d:18:30:f7:1d:ff:e1:d4:2d:78:
ee:55:f4:50:f7:84:35:8c:d0:4f:34:f6:25:83:65:
5f:aa:67:af:20:b7:c2:99:40:ab:74:5b:a4:66:d3:
74:bc:03:b9:13:79:3f:f8:c6:cb:f1:25:85:61:72:
11:16:6e:ee:65:1c:7b:16:5a:5b:38:e6:e8:bb:ce:
11:25:79:c4:b8:91:d4:6f:59:5d:2a:78:bd:d7:96:
d2:e9:2d:4b:65:be:c3:50:21:96:9c:47:31:25:eb:
38:b2:aa:e7:25:0a:39:90:34:0e:53:7a:83:28:8e:
4f:47:99:1b:f3:7d:52:ee:74:36:20:1d:6a:04:ca:
a5:b0:1d:ff:93:3d:9c:cc:1e:b2:98:6c:e6:88:a1:
61:25:06:07:5d:59:72:31:b2:fd:7e:78:df:a9:d1:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:AC:55:A7:B6:50:73:36:AB:61:E7:2D:1B:F5:13:F5:76:10:9F
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/1-v-sVae2UHM2q2HnLRv1E_V2EJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.47.0/24
Signature Algorithm: sha256WithRSAEncryption
88:ad:28:e5:16:ac:d8:d3:bb:59:a5:17:09:b9:a6:19:8f:9e:
91:00:5f:11:4e:68:cb:d6:c6:a4:52:3f:89:f1:81:d8:a4:ad:
5b:9b:f6:cd:e1:99:21:74:af:74:96:1d:a6:88:5e:5b:1f:4c:
d5:2e:4d:99:3d:53:4c:48:f0:1b:fe:89:44:00:76:bd:36:d7:
03:82:63:f7:21:ba:05:d5:ea:0c:45:34:ea:b7:82:6f:33:c6:
f7:13:b9:e7:9e:9d:15:42:16:23:a7:07:a4:cf:37:0c:19:5c:
da:34:74:30:f9:9f:16:dd:c4:3b:ac:b0:a0:3e:ef:40:46:99:
0f:33:d7:dc:b2:89:46:7a:20:4e:f0:c5:43:a3:e0:19:2c:12:
5e:19:66:94:6f:21:45:0f:03:49:e4:cf:b7:cc:60:d0:ae:ac:
59:d8:c0:be:8d:2c:f1:13:e3:d3:37:ae:f0:69:08:73:a4:6e:
6c:ff:d5:c0:b4:bd:4e:d0:b0:f4:6d:49:4e:cc:25:0e:55:44:
e4:e4:a8:88:5d:12:af:9c:cd:6c:f1:87:06:80:46:ac:a9:1f:
42:1f:58:0e:82:4c:57:84:50:46:ba:d1:3f:03:89:79:8e:41:
57:4f:80:e3:0c:4d:c5:d5:9a:64:ce:c0:ba:e3:53:76:a8:49:
ef:5d:62:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:49 2026 by rpki-client