Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa
File: 1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa (raw, json)
Hash identifier: nP67zUvgCEBny+IrA1V7eCj0Omps26STL5vjKxKHFGM=
Subject key identifier: D6:F1:49:EE:69:0B:1E:DF:1E:F8:59:DB:3D:0D:AC:1A:A3:CC:90:E0
Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Certificate serial: 019C9E1A4267D620CE3120110D6F4B8044A9
Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa
Signing time: Fri 27 Feb 2026 07:57:26 +0000
ROA not before: Fri 27 Feb 2026 07:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214588
IP address blocks: 194.99.72.0/24 maxlen: 24
212.47.37.0/24 maxlen: 24
2a14:7340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:1a:42:67:d6:20:ce:31:20:11:0d:6f:4b:80:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973
Validity
Not Before: Feb 27 07:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6f149ee690b1edf1ef859db3d0dac1aa3cc90e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:1d:11:69:1d:7b:f7:d2:b9:d5:78:db:3d:
5b:89:50:8e:66:2e:42:8a:e3:43:00:bb:13:e7:c1:
1a:6e:80:77:17:c3:dc:e4:71:f9:18:f0:c5:c3:7d:
6d:0a:17:71:6a:1c:67:73:1d:2a:51:0f:e7:d8:df:
2e:04:cf:0b:b8:2f:2c:cc:58:52:94:2f:61:ec:b8:
cd:1f:d0:8f:0e:13:3d:57:7a:b2:bb:c5:e5:4a:d1:
70:40:0a:ad:f2:fe:25:4e:16:23:30:46:9f:f8:e5:
cd:4e:39:fe:2f:e7:30:42:30:f2:fe:31:69:aa:9d:
54:78:25:8c:78:80:d8:53:78:06:05:67:9d:62:a9:
4b:23:12:94:6b:c1:bf:c9:91:f7:cb:cc:05:90:47:
09:da:de:b5:b6:cd:1c:60:12:a9:aa:1b:aa:8d:b9:
c9:03:72:11:c3:5f:e4:d1:4f:40:0d:99:a8:53:bb:
d2:69:9c:b8:6f:b5:71:32:e7:eb:c9:12:62:83:3c:
d5:40:df:f9:a7:9c:05:2b:17:f0:00:ea:f1:d5:29:
ff:7a:57:82:2c:18:58:6f:d6:42:7e:38:7f:0b:a6:
c1:17:cf:7e:f1:74:38:57:c9:f0:b3:2b:a2:84:8c:
08:fd:27:58:fe:48:8d:2a:0c:f8:96:c5:bc:c4:58:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F1:49:EE:69:0B:1E:DF:1E:F8:59:DB:3D:0D:AC:1A:A3:CC:90:E0
X509v3 Authority Key Identifier:
keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/1vFJ7mkLHt8e-FnbPQ2sGqPMkOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.72.0/24
212.47.37.0/24
IPv6:
2a14:7340::/29
Signature Algorithm: sha256WithRSAEncryption
47:08:c1:0e:73:fc:fd:43:35:74:5f:2d:d3:ef:d4:c9:89:d3:
e6:3c:da:1e:ad:dd:59:09:d4:fa:e3:85:ca:b4:4e:79:73:d1:
06:43:f9:37:da:af:9a:d7:d0:bc:fa:fb:f8:fe:ce:5e:e7:7e:
6f:13:b4:ba:cc:99:01:ab:ca:36:96:fa:e9:5a:f7:cf:cc:ec:
06:9f:e4:d9:c8:ca:00:b3:51:6d:da:d5:b2:c1:0b:7f:d5:9d:
c0:47:a3:d9:93:38:97:2d:92:7d:f7:c7:45:58:d1:30:06:d8:
0b:62:74:83:2c:f9:75:84:d2:19:a7:94:cd:af:88:97:6f:a8:
76:0c:e9:4b:58:f6:52:40:06:d6:5d:ce:29:c3:60:b8:00:bd:
1c:5e:93:0f:f5:1a:0c:bb:97:26:1d:8f:ff:d9:c6:f5:4b:ec:
1b:aa:d9:99:b2:40:52:f9:ad:31:10:1b:17:13:e9:8b:aa:3f:
14:81:71:c4:6a:3d:fd:93:7d:d3:9b:f1:d8:45:a0:8a:ae:e2:
1f:28:7a:0e:4b:66:b5:b0:fd:91:8c:6b:43:ef:a6:6b:2a:c0:
3c:13:5e:a4:b4:d7:09:ae:59:76:72:af:c0:ba:9b:a0:29:7e:
0b:8f:1e:db:34:f0:a2:1a:11:ff:ae:78:a1:cb:8a:3c:2c:25:
ef:12:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:20 2026 by rpki-client