Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa
File: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (raw, json)
Hash identifier: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=
Subject key identifier: F8:25:84:29:EE:90:49:86:17:06:6E:53:EB:13:01:3C:2C:D7:E5:AA
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019FA7E93DB5F50B9324A3A320DA3D72F57B
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa
Signing time: Tue 28 Jul 2026 08:48:28 +0000
ROA not before: Tue 28 Jul 2026 08:48:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.191.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e9:3d:b5:f5:0b:93:24:a3:a3:20:da:3d:72:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jul 28 08:48:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8258429ee90498617066e53eb13013c2cd7e5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4d:95:7c:05:c4:3b:38:33:d8:bc:a1:06:b6:
f9:86:f9:12:bc:97:ba:37:5b:56:d2:9b:fa:05:ba:
ac:14:19:17:f0:b1:7b:a5:5f:d3:cb:a4:cf:05:a3:
8f:e5:b4:61:24:a1:fa:db:92:f2:a1:40:68:1b:ad:
f2:fc:89:3e:9a:51:b7:b9:87:74:c5:44:47:9b:fd:
64:33:84:0a:c5:0b:fd:c5:86:bf:9c:df:11:ec:ed:
e3:21:32:be:18:7e:22:44:f4:ef:17:1d:6f:15:8d:
11:3a:1f:ed:34:9b:5d:c7:54:3c:6f:01:b2:b3:10:
93:8f:85:e0:85:ed:fa:97:b5:6d:70:ce:cd:0a:73:
36:bb:c9:20:2c:7c:bb:e5:cd:08:86:50:5f:57:d3:
54:dd:8e:d8:e3:cf:19:8c:93:b4:9d:97:96:26:e1:
62:46:d5:22:05:f9:e6:59:fc:24:9e:fe:be:94:9b:
9b:b8:a0:1c:24:de:e7:4b:ee:b2:ae:f0:17:0d:1a:
9e:cf:b2:6e:7e:8a:5b:8c:5a:01:71:a3:2c:15:22:
14:a5:dc:23:d2:d0:2a:e1:33:f1:0d:42:26:08:ed:
9d:e2:bf:b0:7b:0c:08:de:54:46:1c:1e:a8:21:c7:
2d:cc:37:53:59:4b:8c:c6:44:8c:d3:ad:e0:e6:c1:
24:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:84:29:EE:90:49:86:17:06:6E:53:EB:13:01:3C:2C:D7:E5:AA
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1a:be:41:16:4d:46:e9:ba:35:7a:4c:7b:18:1e:6c:03:42:
96:f3:e2:81:22:90:fb:12:ae:f8:72:2c:17:61:1c:57:07:c5:
4f:a3:1b:f0:01:2e:63:96:ff:6b:77:d1:d9:5d:07:3a:24:80:
9f:ba:1a:c9:f4:80:36:81:94:35:77:70:a9:92:48:cd:ec:68:
e5:1b:aa:9a:83:6e:2e:b2:4e:9b:da:98:4d:5a:05:ce:c8:f5:
0d:44:14:28:fd:b5:19:06:59:bf:15:d9:4e:ff:84:d1:d6:d6:
31:10:78:7d:36:18:9e:03:65:83:47:5b:9d:41:e2:44:2b:93:
d4:bf:6a:01:80:83:90:74:8c:8b:d9:00:c9:06:e8:1c:ca:7a:
26:02:f6:d4:09:60:78:21:44:22:01:3b:7d:5e:b5:d2:00:63:
bf:31:df:97:7d:10:2d:4a:f8:be:6d:fa:61:cc:8b:0a:f2:5d:
89:88:b6:e7:99:21:89:ad:b9:44:be:b3:fa:af:ba:ce:a7:53:
d0:05:8e:77:c4:30:64:bf:d3:80:89:bd:b9:a3:e9:e2:68:35:
60:96:d2:55:bb:43:e7:ff:cc:a6:ae:11:97:f6:26:8a:01:11:
3a:19:25:ee:1f:18:aa:f7:bf:aa:ed:65:63:ea:be:ea:31:fd:
c2:1a:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:03:11 2026 by rpki-client