Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/x5U79bf9H_cFm1ppARxD7Mf3JuE.roa
File: x5U79bf9H_cFm1ppARxD7Mf3JuE.roa (raw, json)
Hash identifier: zGPzSeK/UhWVy2LlhbL3CZfNHfeT+oVljjzmaI1/Vmk=
Subject key identifier: C7:95:3B:F5:B7:FD:1F:F7:05:9B:5A:69:01:1C:43:EC:C7:F7:26:E1
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019B7C1198637F2EEE2F1DDD3AEA3371EDDC
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/x5U79bf9H_cFm1ppARxD7Mf3JuE.roa
Signing time: Fri 02 Jan 2026 00:18:06 +0000
ROA not before: Fri 02 Jan 2026 00:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59562
IP address blocks: 185.240.204.0/22 maxlen: 22
2a0c:8980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:98:63:7f:2e:ee:2f:1d:dd:3a:ea:33:71:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Jan 2 00:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7953bf5b7fd1ff7059b5a69011c43ecc7f726e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:52:3f:70:cb:13:a5:10:9e:12:82:26:20:
fc:d1:61:49:81:79:af:ae:1d:ef:a1:0c:6a:0f:a9:
a4:50:c9:d0:19:23:75:74:58:02:64:56:ba:59:4f:
b2:f0:ba:6d:2a:5a:5c:2c:7d:73:73:e9:5b:ec:e8:
ae:54:fe:ce:20:7e:eb:28:7f:e0:b9:d2:25:13:3f:
e8:47:f5:8d:40:31:2d:c5:23:c8:81:2b:ec:f3:dd:
35:62:f1:28:dd:f9:9b:82:99:50:7f:05:ac:5d:e9:
d8:2c:20:dc:27:46:3d:29:12:0f:02:37:8d:e4:28:
4a:aa:5f:36:2b:34:21:46:5e:92:7f:27:8a:c5:b0:
d1:47:0c:77:89:9c:f3:d8:b2:cf:3a:ad:84:bf:fd:
e3:3c:dd:b0:3f:92:25:67:29:96:ab:45:9e:14:8a:
ce:64:e2:9f:0b:8d:d6:d1:25:76:48:30:de:0d:84:
9f:30:af:91:fa:95:50:56:bc:e8:ee:6d:24:e4:65:
15:cf:7d:1a:e1:99:a1:00:97:c3:49:6c:e4:09:c1:
8f:c2:7a:8f:a9:10:e6:7f:cd:19:13:18:36:fa:3c:
08:83:1c:7d:63:cf:5c:b3:16:27:44:14:13:2c:ec:
66:29:f1:02:60:a2:ef:40:5c:40:12:c3:7f:29:3f:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:95:3B:F5:B7:FD:1F:F7:05:9B:5A:69:01:1C:43:EC:C7:F7:26:E1
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/x5U79bf9H_cFm1ppARxD7Mf3JuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.204.0/22
IPv6:
2a0c:8980::/29
Signature Algorithm: sha256WithRSAEncryption
b4:c2:31:99:86:71:17:2d:ea:41:6d:c5:94:6c:b1:b0:0b:80:
53:2b:99:f5:f0:10:ab:2a:ad:1b:a2:1b:1f:2b:b1:85:36:03:
03:3c:a0:ea:7c:07:6b:39:b2:52:72:b2:4b:b6:6f:a0:6e:8a:
3e:bc:b6:2a:79:20:13:df:f3:2f:78:22:a0:89:77:14:2c:74:
0d:46:77:53:5b:a0:c0:ff:1d:36:3c:5a:e3:14:43:7f:1f:f1:
b1:9b:12:de:bc:fe:58:48:00:30:e5:c5:96:52:d5:bf:86:8b:
10:5c:89:e1:1b:17:ad:3d:92:19:73:53:28:a8:44:ce:b1:15:
ea:23:73:80:2c:f8:a6:18:91:84:8a:7f:5e:34:ef:df:11:1d:
26:92:47:9b:45:d3:89:9c:55:1d:b9:bd:fc:f4:a7:71:bd:f6:
73:0a:14:30:9e:3b:c1:0b:cf:50:f0:92:d5:a5:45:e6:d4:7c:
38:94:ab:70:46:cf:d6:44:3d:bb:3c:97:0f:27:eb:2c:34:1c:
34:e3:b9:5e:9f:af:95:dc:4c:94:06:07:f4:b8:20:d8:2d:41:
d6:8d:e1:eb:58:b2:34:df:a4:c2:4a:63:76:71:e0:56:b2:5d:
e2:6e:1d:b8:63:50:73:a8:7e:cb:f7:52:4a:a5:4f:b7:d9:fd:
13:cf:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:41 2026 by rpki-client