Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/tH1Bo7evq-tTidCvwen9559FhFc.roa
File: tH1Bo7evq-tTidCvwen9559FhFc.roa (raw, json)
Hash identifier: 57Hw84SssQf/NBx/FR+pqq4YLkW702V9wsHdAb14cwc=
Subject key identifier: B4:7D:41:A3:B7:AF:AB:EB:53:89:D0:AF:C1:E9:FD:E7:9F:45:84:57
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 019F9861CDCFAFC219F05FF845A5479ED3D0
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/tH1Bo7evq-tTidCvwen9559FhFc.roa
Signing time: Sat 25 Jul 2026 08:26:14 +0000
ROA not before: Sat 25 Jul 2026 08:26:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28684
IP address blocks: 193.34.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:98:61:cd:cf:af:c2:19:f0:5f:f8:45:a5:47:9e:d3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Jul 25 08:26:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b47d41a3b7afabeb5389d0afc1e9fde79f458457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:54:7d:c7:30:d4:8e:3d:a6:84:5a:c5:fe:
e3:91:d4:de:2e:db:fe:7b:20:15:59:05:c6:64:c8:
d2:e6:8e:0a:f0:59:f9:d9:6b:59:dd:bb:c0:bf:18:
0e:f0:c7:1b:15:2d:73:dd:aa:e2:64:71:c0:04:f5:
52:7c:cc:29:50:42:72:0f:12:e2:92:38:a7:6d:6a:
65:64:ef:be:19:0c:57:fa:b1:e6:da:41:1c:c8:43:
cd:ae:43:8a:f8:9d:10:48:06:9d:70:63:4f:8a:b8:
91:48:a3:46:b0:1a:42:9f:a6:1d:73:a4:ee:53:7a:
11:36:39:d5:a8:49:8f:bf:d6:06:6e:62:84:fc:70:
0c:3b:8e:55:da:8a:fa:62:60:6e:58:96:c8:18:9f:
a9:aa:a9:c8:bb:c8:3f:de:e8:a4:95:53:f2:6f:c6:
1a:e6:cd:21:56:00:90:13:6d:4f:08:3d:e0:8b:ce:
ee:6c:56:db:cf:84:f6:d6:69:b1:5d:66:8d:9a:5b:
33:dd:cb:cc:4f:a8:b3:e0:b5:2d:90:77:77:22:3b:
27:db:b0:c9:33:be:e6:31:1c:f4:7a:9c:66:87:a9:
28:26:b6:8c:82:52:a3:ba:ec:56:c5:f0:2c:48:23:
60:e2:a4:6e:77:f1:cf:38:e5:8c:21:00:0f:ab:6f:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:41:A3:B7:AF:AB:EB:53:89:D0:AF:C1:E9:FD:E7:9F:45:84:57
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/tH1Bo7evq-tTidCvwen9559FhFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.174.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ed:27:d6:bb:86:6d:ef:09:a0:ab:64:c2:5a:5a:ce:4a:e9:
64:91:2c:23:9c:40:fb:65:d6:82:ae:c9:3a:be:4e:5b:0b:b5:
74:ae:6f:2d:2f:cf:1a:13:42:4e:c7:a5:58:e2:5f:6d:59:9e:
f5:63:d4:7a:31:30:3e:3e:31:2c:a1:da:39:e3:95:39:20:52:
1f:86:9f:af:d2:69:28:21:3b:06:ac:ea:58:38:85:82:4e:63:
6d:48:9f:ca:77:54:f2:c1:75:a3:bd:05:9e:25:b6:a7:5c:51:
fa:8a:06:58:6a:c3:e4:f5:72:21:36:af:23:37:12:c2:3b:9f:
8b:4a:7e:40:08:91:a6:81:24:3c:e6:ad:6a:ea:21:63:12:22:
97:14:4d:04:69:2a:25:e5:b4:f1:44:ab:0c:b4:d3:2a:5c:58:
cf:15:d7:03:68:06:e6:a2:65:7f:4f:b2:d8:2a:e8:76:0d:7b:
fa:e6:64:2f:e9:20:b8:30:9e:93:cf:48:b6:9f:34:77:11:b6:
d0:8a:04:f3:69:b4:31:89:03:37:96:50:4a:ed:6a:4e:20:c9:
54:f9:ce:15:af:57:98:06:4a:42:9d:d7:b5:3e:ff:07:bd:82:
86:7a:5d:eb:8a:46:be:d6:54:b0:c8:a6:b0:6f:16:8e:db:57:
09:96:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:58:59 2026 by rpki-client