Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/F49MVomUQDAcFyLOVescdI4Tze0.roa
File: F49MVomUQDAcFyLOVescdI4Tze0.roa (raw, json)
Hash identifier: dqAwBBxk+58g49gZsp0PrNtZP8W+EFz5UiJMzmelxQM=
Subject key identifier: 17:8F:4C:56:89:94:40:30:1C:17:22:CE:55:EB:1C:74:8E:13:CD:ED
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019F04476841E595B697D23E99FA553F592D
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/F49MVomUQDAcFyLOVescdI4Tze0.roa
Signing time: Fri 26 Jun 2026 14:13:36 +0000
ROA not before: Fri 26 Jun 2026 14:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216300
IP address blocks: 194.31.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:47:68:41:e5:95:b6:97:d2:3e:99:fa:55:3f:59:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 26 14:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=178f4c56899440301c1722ce55eb1c748e13cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:68:4f:30:cf:bf:dd:17:d4:a7:00:54:36:
75:9f:cd:c9:4d:81:15:12:21:cb:41:74:e8:dc:b7:
6f:7a:ed:53:35:06:6a:3e:a9:2e:c7:c2:d9:7a:f4:
0f:0e:ff:54:f2:01:33:f9:2d:e2:a7:61:20:64:4b:
a9:49:0f:5f:d6:fd:fb:54:83:86:26:bb:ce:eb:15:
3a:43:6a:92:15:ce:e4:49:b7:9c:47:91:bc:be:1b:
ad:e5:02:5a:db:f8:d5:28:9a:ae:af:35:19:72:85:
e6:43:2f:51:ca:14:d2:9c:2c:87:31:35:d4:fc:c2:
f6:23:1b:4e:b1:b3:8e:cf:02:66:5e:8e:4a:bd:35:
6e:ad:4d:da:f7:b5:c5:3f:8d:4e:65:81:b8:b1:c0:
ed:06:60:39:5a:73:79:66:cb:e4:70:79:73:96:bc:
e1:80:e7:c5:0d:3e:1d:8b:66:a7:ec:d4:8a:d0:51:
01:e0:cc:90:63:6e:2c:c0:f9:a6:8a:3a:c4:99:ab:
75:cb:64:d8:2e:72:37:4e:55:bb:1c:ea:6b:32:00:
73:10:80:ff:72:62:c9:ce:40:33:8d:47:03:10:5b:
6c:4e:f9:3b:4c:21:7c:29:58:9a:1e:76:0f:63:99:
e5:71:a0:b0:ca:19:8e:d5:95:16:9e:50:51:ea:53:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8F:4C:56:89:94:40:30:1C:17:22:CE:55:EB:1C:74:8E:13:CD:ED
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/F49MVomUQDAcFyLOVescdI4Tze0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7e:ea:6e:b3:d3:f3:5b:71:c6:a4:9b:68:fe:be:31:18:e9:
27:34:71:d2:80:66:28:46:ca:1e:8e:8c:72:0d:3c:83:17:34:
0b:9c:4f:a3:ea:bd:46:51:71:c9:8c:e6:39:27:46:33:38:e0:
c0:a2:a8:c6:53:ab:7d:eb:95:e2:50:ce:b9:8e:17:0d:bf:5c:
50:2e:e2:c9:71:32:e4:a4:a3:d8:66:14:13:b3:74:61:76:83:
88:3b:53:84:88:eb:47:e1:86:d6:ff:bb:f3:73:31:dc:a3:bd:
36:3f:aa:66:c5:4c:96:5c:7e:fb:a4:e5:29:ad:6b:1a:3f:b9:
d5:ec:fd:09:15:e7:d8:bc:60:d7:08:23:ca:d6:15:7b:94:a2:
17:91:e9:6c:b4:eb:5d:fa:2d:ba:36:ce:a9:dd:8c:94:59:52:
0f:d8:53:7e:dd:cd:bf:1b:06:b8:bb:3d:5f:5d:5f:80:9e:31:
a1:aa:e3:46:83:46:b0:16:b8:b3:6a:e0:85:92:b2:ef:f8:87:
8f:fe:f0:ce:89:1a:8b:19:16:b5:4d:f3:da:70:10:11:86:fe:
88:48:e8:8e:f4:50:0c:2e:73:b0:3e:4a:ab:81:ed:7f:18:1f:
45:db:e0:9e:23:ce:8c:19:48:38:2a:3c:02:a8:5e:2a:b4:3c:
4d:61:12:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ER2hB5ZW2l9I+mfpVP1ktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwNjI2MTQxMzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhmNGM1Njg5OTQ0MDMwMWMxNzIyY2U1NWViMWM3NDhlMTNjZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcRoTzDPv90X1KcAVDZ1n83JTYEV
EiHLQXTo3Ldveu1TNQZqPqkux8LZevQPDv9U8gEz+S3ip2EgZEupSQ9f1v37VIOG
JrvO6xU6Q2qSFc7kSbecR5G8vhut5QJa2/jVKJqurzUZcoXmQy9RyhTSnCyHMTXU
/ML2IxtOsbOOzwJmXo5KvTVurU3a97XFP41OZYG4scDtBmA5WnN5ZsvkcHlzlrzh
gOfFDT4di2an7NSK0FEB4MyQY24swPmmijrEmat1y2TYLnI3TlW7HOprMgBzEID/
cmLJzkAzjUcDEFtsTvk7TCF8KViaHnYPY5nlcaCwyhmO1ZUWnlBR6lMviwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBePTFaJlEAwHBcizlXrHHSOE83tMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvRjQ5TVZvbVVRREFjRnlMT1Zlc2NkSTRUemUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9JMA0G
CSqGSIb3DQEBCwUAA4IBAQCNfupus9PzW3HGpJto/r4xGOknNHHSgGYoRsoejoxy
DTyDFzQLnE+j6r1GUXHJjOY5J0YzOODAoqjGU6t965XiUM65jhcNv1xQLuLJcTLk
pKPYZhQTs3RhdoOIO1OEiOtH4YbW/7vzczHco702P6pmxUyWXH77pOUprWsaP7nV
7P0JFefYvGDXCCPK1hV7lKIXkelstOtd+i26Ns6p3YyUWVIP2FN+3c2/Gwa4uz1f
XV+AnjGhquNGg0awFrizauCFkrLv+IeP/vDOiRqLGRa1TfPacBARhv6ISOiO9FAM
LnOwPkqrge1/GB9F2+CeI86MGUg4KjwCqF4qtDxNYRKN
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:38 2026 by rpki-client