Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/82wAbhd74c0z6ICEOBs-0Y_oQfY.roa
File: 82wAbhd74c0z6ICEOBs-0Y_oQfY.roa (raw, json)
Hash identifier: kBFT5s4QmJIedyfi/sxxBI04254S641NgjUTrd53nw8=
Subject key identifier: F3:6C:00:6E:17:7B:E1:CD:33:E8:80:84:38:1B:3E:D1:8F:E8:41:F6
Certificate issuer: /CN=f98e9f76ce936fe1975f354263b4563cad1c414a
Certificate serial: 019F23687003BEB86265CDD01E285BEECEED
Authority key identifier: F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/82wAbhd74c0z6ICEOBs-0Y_oQfY.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47377
IP address blocks: 194.62.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:70:03:be:b8:62:65:cd:d0:1e:28:5b:ee:ce:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98e9f76ce936fe1975f354263b4563cad1c414a
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f36c006e177be1cd33e88084381b3ed18fe841f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:7d:df:12:76:bc:b8:c4:a7:a7:ea:99:0c:
6d:2a:e8:7d:3c:13:66:af:99:d8:65:78:b8:53:38:
b4:16:d5:d3:d7:53:9c:9d:d3:96:28:18:da:94:7e:
de:90:9d:e6:13:89:a0:5a:6e:ee:2a:b1:20:d3:8d:
16:2c:82:e1:d8:f4:1a:ed:64:40:2e:21:21:ab:b3:
0d:23:0b:52:87:52:f3:91:b0:25:90:56:22:1e:9f:
df:ed:b3:67:db:62:c2:3a:32:8a:e7:6d:17:56:de:
82:6a:d0:2e:7b:6e:e5:81:98:4f:97:e6:bd:3a:2a:
c1:dd:97:8e:01:e8:25:72:29:e3:15:eb:e8:69:58:
96:2c:30:33:f3:08:07:60:de:1a:b4:b6:1c:0e:28:
77:f7:b1:2f:99:8f:84:22:db:d9:56:b3:5f:ad:a0:
09:99:74:47:45:77:d5:cc:9a:62:bb:d7:72:2d:3f:
37:d0:e8:e5:6f:c0:8a:68:49:be:90:06:4d:d1:fa:
02:21:e0:7c:59:16:ba:4a:9d:07:15:6c:81:ba:e9:
8f:e3:89:9b:7f:28:e1:be:ce:fa:d6:c3:d8:f5:a3:
65:ff:f5:e0:a0:59:83:43:d2:05:ab:a5:18:76:32:
4f:34:67:31:f5:db:ec:96:18:d6:0d:f3:38:e0:e6:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6C:00:6E:17:7B:E1:CD:33:E8:80:84:38:1B:3E:D1:8F:E8:41:F6
X509v3 Authority Key Identifier:
keyid:F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/82wAbhd74c0z6ICEOBs-0Y_oQfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d1:b2:70:71:4e:2c:ff:8b:95:1c:a3:7e:2b:7f:00:2c:bd:
f7:65:5e:c6:ac:ec:7a:02:04:0c:21:c6:ac:c8:c0:18:d7:42:
f7:ce:63:a5:8e:f3:21:4e:d0:0d:5e:b5:58:8f:94:10:c5:12:
3c:22:eb:fd:4d:df:fc:04:5e:99:d2:e5:a9:7b:19:db:27:f8:
9f:aa:0b:5c:27:fd:38:bb:3b:bb:f8:62:04:e2:79:77:5b:8e:
ac:3d:85:89:2d:70:ab:c6:42:5c:88:52:d7:06:e3:c7:84:48:
10:75:ab:5e:b1:be:28:25:67:84:dd:97:fd:7a:97:85:04:c8:
f0:02:ff:84:81:d3:ce:f0:bd:7f:b5:c5:73:f1:04:8b:66:ab:
25:9d:9a:9c:36:20:bc:c5:a2:10:9e:2d:ee:4a:54:a0:c5:39:
f7:32:3d:13:5f:16:81:bd:1a:09:5c:bc:37:73:28:98:ae:f1:
f0:0d:79:d2:33:71:76:df:68:50:c8:60:56:03:f8:a8:80:b9:
ed:89:5f:a9:52:52:07:a6:fe:09:96:62:13:76:42:d7:99:00:
22:55:61:63:cb:57:98:58:c1:7d:e6:63:4c:35:63:3d:36:3a:
32:4c:41:96:fc:09:74:46:1d:4c:c7:84:34:6c:62:45:81:2f:
02:df:3d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:47 2026 by rpki-client