Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/f0ZfMdVeao4owuizr0ASA2Z5qek.roa
File: f0ZfMdVeao4owuizr0ASA2Z5qek.roa (raw, json)
Hash identifier: Vu0vptFiDdpzGvBS9Sa9FzNYtks3M2qfeAe2doEPj6k=
Subject key identifier: 7F:46:5F:31:D5:5E:6A:8E:28:C2:E8:B3:AF:40:12:03:66:79:A9:E9
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019B7C120EEE5B5CAF60660BFC7723B67DE0
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/f0ZfMdVeao4owuizr0ASA2Z5qek.roa
Signing time: Fri 02 Jan 2026 00:18:36 +0000
ROA not before: Fri 02 Jan 2026 00:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62334
IP address blocks: 185.155.73.0/24 maxlen: 24
185.185.16.0/22 maxlen: 22
185.185.16.0/23 maxlen: 23
185.185.16.0/24 maxlen: 24
185.185.17.0/24 maxlen: 24
185.185.18.0/23 maxlen: 23
185.185.18.0/24 maxlen: 24
185.185.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:0e:ee:5b:5c:af:60:66:0b:fc:77:23:b6:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Jan 2 00:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f465f31d55e6a8e28c2e8b3af4012036679a9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:e4:2d:9a:1d:e5:b4:c7:aa:ef:09:de:00:
6a:fd:d9:e2:c8:30:c8:33:be:c8:c9:5c:0c:bf:8f:
8b:96:ea:ab:02:23:52:73:07:5d:1b:e6:fb:84:cc:
09:b1:41:0f:62:2d:72:cc:c5:69:b9:d1:82:66:d3:
12:0c:83:30:77:12:d8:92:8a:cc:12:b0:a5:e8:76:
f2:65:7f:8c:89:72:10:cb:9b:88:c4:c4:3a:67:3f:
63:ab:71:ae:12:25:7d:62:42:23:5f:d6:ba:b0:47:
09:73:42:a9:9e:56:3a:2d:28:1c:b3:f9:a2:4e:30:
30:d8:59:2d:2a:a6:5a:87:38:59:ed:f7:fc:8f:65:
c1:ea:73:25:ce:ba:a6:d7:be:4a:44:d1:74:1d:bf:
dd:11:5f:b1:33:2d:dd:9a:15:d5:b3:f0:4c:52:91:
a7:b1:a4:a8:f7:b0:71:a7:77:f3:02:df:b2:cb:a2:
34:33:7e:a5:8a:6b:b6:b2:2e:16:e4:d8:d6:d0:68:
ce:d2:97:cc:c3:2b:d4:39:26:12:36:79:74:a4:94:
4c:74:38:b5:b8:f8:a4:83:9f:1b:4c:45:f9:aa:fe:
24:7b:53:2a:9f:ea:32:79:63:8a:d0:62:0c:32:b8:
4d:6d:b9:ba:7e:57:23:de:96:22:de:e0:54:3a:06:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:46:5F:31:D5:5E:6A:8E:28:C2:E8:B3:AF:40:12:03:66:79:A9:E9
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/f0ZfMdVeao4owuizr0ASA2Z5qek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.73.0/24
185.185.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:8d:6b:08:08:47:18:60:66:ce:90:7d:c0:9d:dd:21:62:49:
1c:ff:62:d9:ad:55:13:29:78:72:2b:b6:45:73:c6:de:fb:c3:
56:9f:ba:34:a7:c6:72:9d:42:24:c2:0f:88:be:bc:37:94:68:
ac:b8:d6:64:8d:c3:32:34:a7:40:6d:94:bc:db:55:1c:cc:95:
b3:c7:7d:b3:e2:77:99:d4:0b:82:de:3a:eb:85:85:cb:88:ac:
05:81:ac:78:ad:ab:8f:d7:1b:08:81:a1:9c:a4:5d:3c:a3:49:
f7:89:57:46:8a:bb:d5:45:19:47:a6:db:75:5f:2f:10:ea:5f:
e2:20:4b:ad:cd:17:60:79:e5:a8:8a:9c:99:6d:fb:19:d9:17:
78:e2:c6:38:eb:fc:81:71:3e:5b:c1:73:2c:b3:b9:c6:f9:fc:
a4:34:1d:71:b6:97:06:68:0b:b1:db:b8:bb:a6:49:f6:62:bb:
aa:3e:85:f2:18:93:64:0d:4d:39:b4:57:8c:f5:4d:36:51:c6:
ce:c7:9e:7f:af:61:c5:bb:7e:4d:67:9e:5e:fd:54:96:a2:86:
79:ba:0e:05:b8:32:e6:1e:5e:4b:a3:4d:9a:81:ec:cc:1a:e2:
2b:88:5e:a8:68:06:c9:68:6c:c7:dd:4c:82:12:b0:39:c3:af:
9e:a1:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:23 2026 by rpki-client