Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa
File: 1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa (raw, json)
Hash identifier: xx9XlKrKpQ671NpkBL4SSdqZlPtj4brGXb4dxduLCWs=
Subject key identifier: D5:62:C5:8B:6B:FB:B0:6F:C9:6B:85:49:37:30:23:73:65:D0:A1:DF
Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Certificate serial: 019EB09F02EC11A56F9F0A0019EC7F7D3096
Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa
Signing time: Wed 10 Jun 2026 08:21:11 +0000
ROA not before: Wed 10 Jun 2026 08:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208316
IP address blocks: 193.168.212.0/22 maxlen: 22
193.168.212.0/24 maxlen: 24
193.168.213.0/24 maxlen: 24
193.168.214.0/24 maxlen: 24
193.168.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:9f:02:ec:11:a5:6f:9f:0a:00:19:ec:7f:7d:30:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Validity
Not Before: Jun 10 08:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d562c58b6bfbb06fc96b85493730237365d0a1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:2a:7f:f2:84:0d:18:19:52:f7:91:f6:f5:
41:6d:74:4b:1b:8f:10:16:15:89:10:bc:66:28:01:
05:06:0a:2e:f4:56:37:c6:c3:0f:29:36:4c:05:92:
34:4a:e0:29:9c:3c:d6:ab:af:ab:38:9e:6b:36:2e:
cf:a9:c9:84:ef:cb:07:b1:f2:60:2e:58:8c:6c:8e:
c7:2f:a4:c7:da:f3:dc:c9:85:06:d6:c3:1a:44:2b:
76:a5:d3:f5:86:5b:a7:09:5b:be:5a:39:58:55:20:
53:33:c3:d8:f3:f6:d4:e5:b0:76:53:fe:ac:83:be:
fc:c5:a0:6d:60:bb:77:10:c9:65:f7:f1:17:7f:f7:
99:72:fe:a5:f2:01:61:7e:2c:7e:4f:99:30:40:72:
15:3b:c4:2d:99:7e:02:d5:ab:b2:bc:59:4e:e0:6d:
db:8d:61:f1:22:20:5f:db:e0:93:09:4a:90:dd:e5:
ae:1a:a1:03:2b:56:ff:1c:14:e0:38:4a:e4:cb:94:
ff:9f:6d:44:36:e8:ea:9e:4a:ab:a9:75:4e:ed:67:
0c:c2:03:d8:83:4d:4e:00:79:1b:8f:e6:19:ac:58:
48:a1:32:3c:f0:0a:95:b7:f5:4a:d6:7d:d1:68:b5:
a5:9c:12:15:a0:e9:33:8a:b3:be:28:1e:f4:b9:b7:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:C5:8B:6B:FB:B0:6F:C9:6B:85:49:37:30:23:73:65:D0:A1:DF
X509v3 Authority Key Identifier:
keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/1WLFi2v7sG_Ja4VJNzAjc2XQod8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.212.0/22
Signature Algorithm: sha256WithRSAEncryption
40:06:e2:de:10:f9:ed:f7:08:4f:57:37:b9:59:05:3c:8a:27:
fc:35:2d:9a:60:80:3b:f6:71:ce:62:a0:4c:ed:96:89:43:17:
b4:fb:b3:dc:e7:13:1a:b7:38:5f:3e:03:a9:36:ea:04:0b:2b:
40:23:f8:9e:54:0c:97:af:31:4c:c6:31:e3:6b:7f:07:85:cd:
88:0c:8e:c6:64:e8:bc:54:e4:e0:0c:a3:ac:a9:16:9f:22:51:
13:94:12:45:65:72:23:9f:f8:10:3f:90:10:10:8a:1b:1b:10:
eb:08:37:94:7c:d4:82:63:7d:55:19:bf:4e:61:ec:4c:4b:96:
82:80:57:91:f6:ad:a5:1c:a8:24:59:ad:bb:38:ef:76:c0:c1:
8b:39:b0:3e:84:ab:fa:75:24:e5:53:b6:bd:79:6c:f4:5a:23:
fc:22:93:1b:bf:f2:0e:c8:2e:24:35:12:be:29:77:8c:09:84:
d2:6c:0a:8e:fc:71:fe:22:39:ef:9e:73:f0:56:c4:1f:16:49:
c1:74:fc:fa:16:42:91:61:37:14:77:bd:70:68:89:ba:04:17:
60:71:de:ff:f1:49:9e:49:78:48:88:1d:c1:84:b5:02:ab:39:
da:c2:17:3f:36:f4:6c:84:9e:1b:43:ff:d7:e5:54:48:6d:a1:
5d:b6:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:40:26 2026 by rpki-client