Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa
File: T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa (raw, json)
Hash identifier: yBrzfuoQ7PjM0FJTl5FcbusQvv4aZ8BnPQEBmHRMImE=
Subject key identifier: 4F:E7:D5:1C:40:CD:66:AE:C5:F7:EB:AD:61:F4:4A:30:07:68:16:14
Certificate issuer: /CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Certificate serial: 019C0EF56C880187507F38B74D35726A4F36
Authority key identifier: 7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa
Signing time: Fri 30 Jan 2026 12:51:30 +0000
ROA not before: Fri 30 Jan 2026 12:51:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 95.143.111.0/24 maxlen: 24
193.164.128.0/24 maxlen: 24
217.11.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:f5:6c:88:01:87:50:7f:38:b7:4d:35:72:6a:4f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2ea3ecad5a402b8fe5a2a6138af66aac257ff9
Validity
Not Before: Jan 30 12:51:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe7d51c40cd66aec5f7ebad61f44a3007681614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:eb:ef:66:5d:bf:42:da:36:c8:60:e0:bb:
c9:d9:79:15:09:4a:9d:29:da:c1:4b:f2:54:87:47:
cc:98:4c:d0:c3:c3:37:de:e7:6c:7d:06:d8:fa:c0:
47:a7:09:5f:d6:68:73:d9:9b:54:60:cc:01:a5:98:
ea:cb:60:7e:8b:a2:41:25:46:43:29:6c:80:aa:af:
4a:14:fa:83:b1:f7:18:a1:ac:32:d6:f9:4d:81:68:
18:55:fa:20:08:d1:6e:0f:1a:89:04:c6:fb:b0:e6:
a9:6b:88:64:71:b2:33:5d:b4:96:c9:b2:ef:c2:c3:
1e:7b:a3:6f:dc:03:ba:23:f0:0e:5f:ac:75:d8:f7:
54:9a:0b:50:70:c3:ce:73:72:25:57:7f:d7:45:e8:
eb:cf:62:ef:b4:9d:40:b6:fd:7b:2e:4e:90:8b:5a:
b0:de:f4:e9:30:ee:46:5f:6d:b1:16:c4:b3:80:2a:
25:a9:fe:8e:6f:a1:e0:38:82:4e:f5:99:21:54:ee:
2c:54:ed:06:28:0e:60:11:22:de:ad:61:88:9c:8f:
12:c7:8e:fa:89:f2:8c:9d:8f:9b:a9:ad:62:31:f5:
f2:49:f5:49:44:a5:8f:6e:7d:58:8b:e3:fd:f4:24:
19:ba:b3:a6:6d:a0:7a:85:fa:07:c3:22:27:fc:0e:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E7:D5:1C:40:CD:66:AE:C5:F7:EB:AD:61:F4:4A:30:07:68:16:14
X509v3 Authority Key Identifier:
keyid:7D:2E:A3:EC:AD:5A:40:2B:8F:E5:A2:A6:13:8A:F6:6A:AC:25:7F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fS6j7K1aQCuP5aKmE4r2aqwlf_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/T-fVHEDNZq7F9-utYfRKMAdoFhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/447677-9972-4df8-b508-b91b92d4d801/1/fS6j7K1aQCuP5aKmE4r2aqwlf_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.143.111.0/24
193.164.128.0/24
217.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bd:d9:c7:09:a5:8e:49:7a:ce:c0:9d:c9:01:f1:67:11:79:
80:ab:82:09:11:1d:f0:1f:bc:ce:ae:8e:f8:ed:72:d6:11:05:
fb:d0:d1:72:f9:97:8b:35:6b:3f:ea:d6:de:13:7c:2d:20:b4:
bf:1a:01:29:14:5c:1a:4a:a5:8e:aa:12:dc:42:d6:12:49:06:
b8:5b:33:a9:5c:0e:83:b3:f2:fa:c3:9d:64:5b:6c:73:25:64:
06:1c:98:82:98:ed:af:60:6e:02:57:46:d1:b8:19:e6:53:e3:
69:9c:e4:56:f9:01:37:60:bb:e8:73:31:d5:8a:7e:e9:b3:7a:
b4:bb:15:83:a4:ad:4d:06:ed:c9:db:95:39:5e:f4:85:6f:d5:
cb:23:f3:eb:fd:4c:93:91:73:05:5c:cf:4f:02:cd:b8:ad:1c:
eb:a2:59:5e:0e:67:6d:ab:f8:be:ee:8e:f3:43:a8:5c:36:93:
e6:00:d3:93:1d:cb:86:fa:73:b5:d6:51:67:2e:55:9d:a1:28:
0d:79:50:0b:74:a8:e1:a6:57:46:2d:a2:d8:de:6f:1c:8f:14:
d8:70:72:38:81:6e:ed:ad:e1:10:44:eb:9e:84:89:09:57:f8:
b1:55:d9:5f:bb:d3:fc:6c:83:19:72:3a:1b:51:b0:d3:c6:79:
3c:89:bb:76
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZwO9WyIAYdQfzi3TTVyak82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmVhM2VjYWQ1YTQwMmI4ZmU1YTJhNjEzOGFmNjZhYWMy
NTdmZjkwHhcNMjYwMTMwMTI1MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmU3ZDUxYzQwY2Q2NmFlYzVmN2ViYWQ2MWY0NGEzMDA3NjgxNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBfr72Zdv0LaNshg4LvJ2XkVCUqd
KdrBS/JUh0fMmEzQw8M33udsfQbY+sBHpwlf1mhz2ZtUYMwBpZjqy2B+i6JBJUZD
KWyAqq9KFPqDsfcYoawy1vlNgWgYVfogCNFuDxqJBMb7sOapa4hkcbIzXbSWybLv
wsMee6Nv3AO6I/AOX6x12PdUmgtQcMPOc3IlV3/XRejrz2LvtJ1Atv17Lk6Qi1qw
3vTpMO5GX22xFsSzgColqf6Ob6HgOIJO9ZkhVO4sVO0GKA5gESLerWGInI8Sx476
ifKMnY+bqa1iMfXySfVJRKWPbn1Yi+P99CQZurOmbaB6hfoHwyIn/A43pwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE/n1RxAzWauxffrrWH0SjAHaBYUMB8GA1UdIwQY
MBaAFH0uo+ytWkArj+WiphOK9mqsJX/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgt
YjkxYjkyZDRkODAxLzEvVC1mVkhFRE5acTdGOS11dFlmUktNQWRvRmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80NDc2NzctOTk3Mi00ZGY4LWI1MDgtYjkxYjkyZDRkODAx
LzEvZlM2ajdLMWFRQ3VQNWFLbUU0cjJhcXdsZl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX49vAwQA
waSAAwQA2QunMA0GCSqGSIb3DQEBCwUAA4IBAQCDvdnHCaWOSXrOwJ3JAfFnEXmA
q4IJER3wH7zOro747XLWEQX70NFy+ZeLNWs/6tbeE3wtILS/GgEpFFwaSqWOqhLc
QtYSSQa4WzOpXA6Ds/L6w51kW2xzJWQGHJiCmO2vYG4CV0bRuBnmU+NpnORW+QE3
YLvoczHVin7ps3q0uxWDpK1NBu3J25U5XvSFb9XLI/Pr/UyTkXMFXM9PAs24rRzr
olleDmdtq/i+7o7zQ6hcNpPmANOTHcuG+nO11lFnLlWdoSgNeVALdKjhpldGLaLY
3m8cjxTYcHI4gW7treEQROuehIkJV/ixVdlfu9P8bIMZcjobUbDTxnk8ibt2
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:16 2026 by rpki-client