Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pHn1sinWEvnZvvy34vNCeSz2JB0.roa
File: pHn1sinWEvnZvvy34vNCeSz2JB0.roa (raw, json)
Hash identifier: GwYvxZTqNbpVS9dXCi0CnLJq7h1dRcTvGD/Kwy+7IUE=
Subject key identifier: A4:79:F5:B2:29:D6:12:F9:D9:BE:FC:B7:E2:F3:42:79:2C:F6:24:1D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019FC7289DE143B684DA7B61A711230F45CD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pHn1sinWEvnZvvy34vNCeSz2JB0.roa
Signing time: Mon 03 Aug 2026 10:25:55 +0000
ROA not before: Mon 03 Aug 2026 10:25:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146871
IP address blocks: 213.145.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:28:9d:e1:43:b6:84:da:7b:61:a7:11:23:0f:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Aug 3 10:25:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a479f5b229d612f9d9befcb7e2f342792cf6241d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:36:a8:2a:df:3b:80:66:26:49:6d:87:16:
fe:59:b3:b8:ff:26:59:01:1f:a5:59:6a:c6:bc:80:
b2:0e:a4:87:62:0e:71:6b:d0:cd:c7:99:6e:c7:22:
f1:d8:c4:23:1f:d1:75:65:4f:13:7b:a3:bd:d6:70:
ae:92:fa:2e:13:57:2d:9b:56:48:b6:1e:b1:3d:80:
8d:49:17:bf:cb:a3:62:cf:19:49:00:eb:e0:78:94:
22:c2:c7:a1:14:fb:a7:a1:4d:0f:01:5a:5d:73:5e:
8f:f3:d4:d6:32:76:e0:7c:92:b1:78:21:4b:ad:c0:
7b:28:a4:50:10:fa:e0:fa:84:56:2e:45:bf:f2:63:
ad:d0:42:50:54:32:df:cb:c7:ea:16:0c:c6:27:e4:
d5:3e:28:f3:36:42:fe:36:00:1c:82:c6:96:7a:4d:
2b:a0:6d:f9:61:bc:10:f7:94:17:ce:14:41:b2:d0:
ee:97:1a:64:d1:53:1c:0c:47:29:aa:58:1c:35:e9:
f4:19:9d:4d:88:e8:37:2b:e9:8a:04:bb:72:f9:bb:
7e:f1:9a:e0:a2:0d:79:a4:f8:b8:53:dd:c0:65:6a:
b4:8a:09:06:1d:a4:f4:0f:5d:c3:27:50:40:ca:89:
56:76:a9:67:1a:ef:93:c0:3d:8c:99:e2:6d:e9:7a:
8c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:79:F5:B2:29:D6:12:F9:D9:BE:FC:B7:E2:F3:42:79:2C:F6:24:1D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/pHn1sinWEvnZvvy34vNCeSz2JB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.70.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ca:85:dd:30:66:50:23:8d:26:fe:39:24:a1:79:61:3f:0c:
84:c1:00:d8:8a:fb:8d:2a:73:10:5d:78:e9:7f:ab:39:a8:30:
37:89:5b:68:48:2e:2c:64:be:50:3a:20:d1:d6:a2:45:7d:f6:
85:05:28:b7:26:c4:8c:2f:35:25:d6:22:b3:fc:11:9b:e3:9e:
bc:d3:ee:6f:f3:52:9d:cb:05:03:e6:51:30:e9:6c:6e:f1:b0:
f8:96:82:dc:c2:ef:7f:b8:d6:46:5d:62:08:58:5d:92:2e:ea:
e4:d9:e3:df:8f:34:9c:da:9f:6f:f9:ac:53:28:4a:9a:6d:54:
a0:f4:30:5f:95:b6:5e:17:4b:64:c8:e8:00:0d:1f:19:0e:c4:
ce:8d:cd:33:c6:09:b8:a4:19:2f:e4:49:1d:a8:4e:c6:c1:f8:
c8:1a:1b:db:f8:13:92:3e:d1:16:42:31:0f:d1:3c:49:11:79:
80:1b:b6:85:3d:d7:fd:9a:12:fe:3c:f6:64:f4:cb:e5:17:6f:
fd:8e:fb:79:3c:a1:a5:26:c6:40:8b:c6:e7:ff:74:f2:aa:ad:
a9:4a:2a:73:3e:af:28:d9:1f:b0:0a:26:75:40:88:2f:7c:41:
f2:1b:28:4e:48:43:fa:63:c5:ed:5e:8c:0e:d9:ee:bb:82:c7:
79:5b:e8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:26 2026 by rpki-client