Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/PREiP0WtH9ua_lz3N4aim-V6AL8.roa
File: PREiP0WtH9ua_lz3N4aim-V6AL8.roa (raw, json)
Hash identifier: 1d1XtFoMmk8IeE22KgiEf8/gZMUj3LiFZydzZU53viM=
Subject key identifier: 3D:11:22:3F:45:AD:1F:DB:9A:FE:5C:F7:37:86:A2:9B:E5:7A:00:BF
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 01A038D7E3A07C9B6085D2D07143314E1F53
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/PREiP0WtH9ua_lz3N4aim-V6AL8.roa
Signing time: Tue 25 Aug 2026 12:14:27 +0000
ROA not before: Tue 25 Aug 2026 12:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 217.173.88.0/23 maxlen: 23
217.173.88.0/24 maxlen: 24
217.173.89.0/24 maxlen: 24
217.173.92.0/23 maxlen: 23
217.173.92.0/24 maxlen: 24
217.173.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:d7:e3:a0:7c:9b:60:85:d2:d0:71:43:31:4e:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Aug 25 12:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d11223f45ad1fdb9afe5cf73786a29be57a00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:41:66:6a:48:9f:0a:e2:33:16:11:3f:4a:4e:
81:e3:db:11:82:ce:85:34:1b:5c:08:be:06:e6:1a:
7a:71:d4:6c:86:18:eb:6a:7a:fc:54:dd:b7:5d:e2:
84:55:4f:c2:0a:ad:1f:2e:fe:01:7d:63:eb:20:d6:
36:62:f5:89:1a:1c:f9:b8:49:c0:fa:51:3b:ac:9f:
8b:33:0a:7d:c8:be:49:72:54:93:9f:de:fb:ee:e6:
f3:dd:2b:6a:94:8e:f0:b8:3c:31:26:d2:d6:67:ae:
a5:e1:24:90:f6:bc:f4:30:dd:7a:f2:3f:a7:c5:46:
dc:7e:cd:f6:a0:73:3e:94:a4:21:69:2f:0f:14:21:
39:2c:5d:31:a8:b5:0c:b3:f0:ae:7b:51:ec:bd:b9:
b7:be:d8:f0:d5:bb:6f:33:a6:15:27:85:cb:72:7b:
88:e0:40:08:e7:7e:bf:59:df:9e:f2:67:81:99:27:
07:54:e9:c8:39:63:7f:05:18:8b:a9:00:59:5d:d9:
bd:da:77:87:1b:ba:07:a6:fc:6d:c0:50:38:56:0e:
66:ce:c4:01:37:9a:34:67:7b:87:ae:7d:69:5e:22:
90:57:e6:39:04:84:b7:29:64:12:6e:07:d7:29:26:
b9:02:83:ff:95:a4:29:6d:ac:e2:41:37:4c:b9:a7:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:11:22:3F:45:AD:1F:DB:9A:FE:5C:F7:37:86:A2:9B:E5:7A:00:BF
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/PREiP0WtH9ua_lz3N4aim-V6AL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.88.0/23
217.173.92.0/23
Signature Algorithm: sha256WithRSAEncryption
47:db:89:c5:5e:49:a2:45:75:41:c0:06:a8:62:9d:be:46:2c:
3f:39:00:e4:5b:75:42:45:c0:d1:42:57:a8:30:ee:ab:e7:8d:
7f:dd:2b:7b:b9:5a:c9:66:1f:af:37:bb:e9:da:d8:b1:f4:8d:
62:25:e7:07:89:9d:59:db:d5:f9:48:0b:cc:9a:ed:b5:43:ac:
d6:5a:9e:04:57:9f:6e:b9:b6:8b:46:7d:e2:0f:a1:98:7f:62:
65:88:6f:61:04:b7:dc:a7:c8:2b:e3:86:d7:2e:8e:54:a5:a2:
8e:c5:95:1d:bf:7c:2a:b6:8d:6d:68:6d:86:16:28:5d:3e:e8:
b2:a8:0c:ec:74:5c:87:fb:4f:28:89:37:05:56:f2:ec:45:d5:
3b:3a:9e:26:de:04:66:1a:9e:c9:43:25:96:3d:81:09:7e:51:
df:52:a5:88:20:40:05:2a:fb:31:f5:d8:f4:52:19:b2:64:39:
83:13:26:30:af:8f:a2:d2:ef:df:d3:f3:53:68:3e:be:09:a8:
ae:aa:f1:8a:fa:05:c2:74:ec:71:f0:a8:87:68:7f:5e:1c:e8:
bf:96:ee:3b:62:25:0b:26:20:c7:37:dd:72:85:5b:60:5f:76:
cd:a3:b1:9a:63:96:06:12:a7:0d:be:63:b0:00:09:00:31:79:
25:a6:d9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:44:48 2026 by rpki-client