Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8YAQawMQn8M3b_d-3mLQToPQkc.roa
File: f8YAQawMQn8M3b_d-3mLQToPQkc.roa (raw, json)
Hash identifier: UIStlucxD5DjhuVJF8TWWgjznWsP6zRJMJ0dt62CUZs=
Subject key identifier: 7F:C6:00:41:AC:0C:42:7F:0C:DD:BF:DD:FB:79:8B:41:3A:0F:42:47
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019FA43576B4AD94826517A001EF43A35BC3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8YAQawMQn8M3b_d-3mLQToPQkc.roa
Signing time: Mon 27 Jul 2026 15:33:15 +0000
ROA not before: Mon 27 Jul 2026 15:33:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272378
IP address blocks: 94.125.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:35:76:b4:ad:94:82:65:17:a0:01:ef:43:a3:5b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 27 15:33:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fc60041ac0c427f0cddbfddfb798b413a0f4247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b7:a8:4e:a9:c8:f2:03:07:5d:95:c0:7a:7c:
c4:79:e6:98:f4:24:81:9e:ba:5d:49:9d:cf:31:1c:
f2:e5:e4:d3:c8:a5:83:3e:9c:32:be:77:99:76:26:
1e:91:74:10:3e:ee:1f:f1:14:06:f0:6d:9b:fa:60:
86:0d:c0:7f:e5:1e:de:6a:07:16:48:7b:bc:bd:6d:
bf:b1:68:c0:7e:4d:12:1e:6f:ec:ae:85:b0:2a:d5:
6e:7f:f9:fc:5c:4a:f0:f4:2b:57:a2:ff:f2:38:ca:
8d:79:27:52:f5:3d:a1:50:e1:65:11:50:aa:95:12:
04:d3:f9:d6:0d:34:5b:a5:b6:d3:15:ec:5f:8f:5a:
fb:83:d2:32:e7:cf:9d:37:5b:18:9c:3f:d7:c4:b2:
4c:48:16:4e:59:81:89:45:8f:1a:20:5f:60:6c:8a:
5b:4a:3a:bb:d0:e4:f4:56:a5:d6:90:e4:51:a6:5f:
4b:5e:8f:c3:e3:76:1c:93:f0:9e:b8:25:85:66:37:
4b:59:85:c2:b6:65:5e:44:c9:78:69:1b:0f:45:bc:
41:12:a6:70:73:4f:48:18:83:cc:59:7b:af:07:3a:
3e:34:38:52:c3:b9:90:27:76:95:0b:1c:37:2b:e9:
22:89:0b:51:d3:fe:5a:bf:94:b0:db:9a:89:90:e4:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:00:41:AC:0C:42:7F:0C:DD:BF:DD:FB:79:8B:41:3A:0F:42:47
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/f8YAQawMQn8M3b_d-3mLQToPQkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.136.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e0:d8:d4:40:2a:01:e0:8e:88:cc:07:fb:8a:7b:8a:70:b5:
2e:b8:1d:25:ac:87:95:f8:7b:dc:dd:6e:1c:ca:75:41:f5:e3:
47:7c:aa:9a:c3:3c:80:fc:7d:d7:7a:90:13:27:2b:68:5a:b3:
21:b8:99:f9:f4:0c:bd:ac:34:6b:fd:45:6c:62:3d:10:37:3b:
4a:40:48:1b:c8:0a:59:14:ee:dc:e5:57:59:67:cd:37:01:8c:
c3:94:ba:ac:c9:42:e1:e4:b1:6b:35:82:ff:db:8c:aa:bd:40:
a7:7f:8d:d0:08:15:e5:b1:03:dc:7a:a5:4b:99:ff:30:54:7d:
01:04:11:2b:44:92:13:d5:1a:b3:27:85:48:2d:58:76:e8:4b:
3b:a4:15:e8:25:ba:de:13:4b:4e:65:a2:d4:a4:f3:65:ef:a0:
ae:59:57:ad:92:f7:7f:cd:d7:16:71:ce:0c:6d:97:5e:c6:71:
2a:59:d5:81:37:7d:ed:21:c2:51:c4:c8:98:92:18:b4:26:8d:
1e:3a:df:87:e5:bf:d9:b5:ca:1e:b9:08:90:c9:e3:43:52:07:
33:c8:8a:dc:0c:8e:31:35:25:a5:88:d1:01:e4:43:87:19:3b:
32:bc:db:14:e5:d9:fd:dc:a3:4d:53:06:7b:ee:8e:37:2f:e7:
a6:4b:9e:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+kNXa0rZSCZRegAe9Do1vDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwNzI3MTUzMzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmM2MDA0MWFjMGM0MjdmMGNkZGJmZGRmYjc5OGI0MTNhMGY0MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLeoTqnI8gMHXZXAenzEeeaY9CSB
nrpdSZ3PMRzy5eTTyKWDPpwyvneZdiYekXQQPu4f8RQG8G2b+mCGDcB/5R7eagcW
SHu8vW2/sWjAfk0SHm/sroWwKtVuf/n8XErw9CtXov/yOMqNeSdS9T2hUOFlEVCq
lRIE0/nWDTRbpbbTFexfj1r7g9Iy58+dN1sYnD/XxLJMSBZOWYGJRY8aIF9gbIpb
Sjq70OT0VqXWkORRpl9LXo/D43Yck/CeuCWFZjdLWYXCtmVeRMl4aRsPRbxBEqZw
c09IGIPMWXuvBzo+NDhSw7mQJ3aVCxw3K+kiiQtR0/5av5Sw25qJkOSesQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/GAEGsDEJ/DN2/3ft5i0E6D0JHMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvZjhZQVFhd01RbjhNM2JfZC0zbUxRVG9QUWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXn2IMA0G
CSqGSIb3DQEBCwUAA4IBAQCF4NjUQCoB4I6IzAf7inuKcLUuuB0lrIeV+Hvc3W4c
ynVB9eNHfKqawzyA/H3XepATJytoWrMhuJn59Ay9rDRr/UVsYj0QNztKQEgbyApZ
FO7c5VdZZ803AYzDlLqsyULh5LFrNYL/24yqvUCnf43QCBXlsQPceqVLmf8wVH0B
BBErRJIT1RqzJ4VILVh26Es7pBXoJbreE0tOZaLUpPNl76CuWVetkvd/zdcWcc4M
bZdexnEqWdWBN33tIcJRxMiYkhi0Jo0eOt+H5b/ZtcoeuQiQyeNDUgczyIrcDI4x
NSWliNEB5EOHGTsyvNsU5dn93KNNUwZ77o43L+emS57X
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:59 2026 by rpki-client