Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/_TmmkOapg5NWp5skKiNnYl4USlg.roa
File: _TmmkOapg5NWp5skKiNnYl4USlg.roa (raw, json)
Hash identifier: Ulpzhuvm7D4wY1P9Md05o4W8SIvbcVV+X0rM6EDxDjc=
Subject key identifier: FD:39:A6:90:E6:A9:83:93:56:A7:9B:24:2A:23:67:62:5E:14:4A:58
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 019F467D983F8F6BC4F54F0C39DC3CB0968A
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/_TmmkOapg5NWp5skKiNnYl4USlg.roa
Signing time: Thu 09 Jul 2026 10:47:43 +0000
ROA not before: Thu 09 Jul 2026 10:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 178.18.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:7d:98:3f:8f:6b:c4:f5:4f:0c:39:dc:3c:b0:96:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jul 9 10:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd39a690e6a9839356a79b242a2367625e144a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:2c:5f:c8:4b:b6:7d:27:f7:b4:bc:68:dd:
88:cc:a2:c0:b8:dc:39:8f:7d:2e:9d:95:70:03:45:
9b:f6:d2:97:1b:45:47:8d:c3:d1:dd:4e:d4:a6:11:
a8:51:72:7e:1f:f9:45:20:0c:2e:b9:ae:b5:81:6f:
7e:7b:35:65:0a:2f:27:0b:54:a1:f9:a6:8f:18:e6:
0b:06:29:32:4c:ff:f0:3f:c6:cc:d8:0b:d5:9c:5f:
fa:66:94:7f:a7:cf:ed:04:9b:1c:61:96:96:98:3b:
6c:1d:84:af:36:be:f4:4b:9a:29:eb:07:65:23:84:
79:85:25:49:8e:49:5c:0a:7d:9c:78:6a:d4:ca:61:
62:2f:a7:ee:d8:8e:7b:e8:25:09:f6:69:44:9b:47:
db:50:5e:6f:67:8d:11:22:b0:ef:b2:9b:c6:02:c2:
7b:b1:a2:d3:c2:f6:59:bc:7a:61:dc:55:33:3d:39:
c4:ae:bf:21:d9:e4:9e:1f:75:73:a9:6a:98:1e:1b:
35:41:ae:14:11:81:00:a2:38:5a:14:72:8c:64:ef:
0f:a1:d9:a3:06:88:93:a3:08:fc:a0:5f:fc:9a:d3:
51:4e:c0:b1:ce:f2:e5:2f:3f:fe:35:b6:73:f4:78:
51:8e:f0:8f:39:3e:56:c3:42:7f:2d:d1:6e:5d:52:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:39:A6:90:E6:A9:83:93:56:A7:9B:24:2A:23:67:62:5E:14:4A:58
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/_TmmkOapg5NWp5skKiNnYl4USlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.202.0/24
Signature Algorithm: sha256WithRSAEncryption
54:38:af:05:49:20:56:55:a8:2f:79:aa:41:57:fd:96:23:07:
b8:79:0b:d9:86:f2:13:74:58:71:78:65:0a:4b:38:9e:30:bb:
1b:a5:05:0c:0c:95:bd:ab:1a:29:8b:3c:96:ff:33:48:3f:ed:
23:64:6d:7c:c3:aa:eb:40:c7:f1:19:02:ec:33:73:48:8c:08:
f3:b6:a2:bf:ad:62:e4:45:1d:b9:54:48:0f:5d:5b:9e:1e:0c:
f2:d3:b9:f5:49:6b:51:8f:e7:76:6d:c8:ec:14:2f:14:60:1e:
8b:68:6e:bd:08:62:b1:8a:cc:0b:be:b0:61:e3:76:b9:24:01:
c5:4d:f3:ba:98:ef:55:9f:f7:63:55:e9:83:42:aa:7e:19:1b:
be:79:88:14:da:f1:0d:b6:2d:e0:ac:a7:58:8f:21:53:ee:56:
6e:6c:f6:b5:a8:96:70:d4:2d:0d:d3:1b:a6:8d:5a:b4:4e:c4:
b1:8c:79:f7:cb:86:62:1d:a7:2f:3c:c3:68:79:58:47:22:18:
bc:4e:2b:94:65:02:31:33:f8:13:72:b1:22:c6:20:b3:19:c7:
8a:c0:7a:a3:98:ad:0f:ba:b7:42:8f:21:74:1b:00:e6:b5:a5:
ba:2c:4b:34:75:96:6a:d9:56:db:4a:6e:6e:58:16:82:df:43:
2e:c8:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:03:26 2026 by rpki-client