Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa
File: 1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa (raw, json)
Hash identifier: gsx85QJ2WG90A2G8uFzj2SzVBAenv+NakL2t0df+a+8=
Subject key identifier: D7:0E:E3:C6:1D:9A:13:23:5A:21:85:97:0B:F5:47:3D:B1:E8:D6:87
Certificate issuer: /CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Certificate serial: 019EE8576E32AE50026689C21721371313E2
Authority key identifier: 25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa
Signing time: Sun 21 Jun 2026 04:01:44 +0000
ROA not before: Sun 21 Jun 2026 04:01:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 176.98.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:57:6e:32:ae:50:02:66:89:c2:17:21:37:13:13:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256fa673db3be1e2ebabfb996d07cf49225ebc08
Validity
Not Before: Jun 21 04:01:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d70ee3c61d9a13235a2185970bf5473db1e8d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:1f:7c:26:50:45:b5:1f:02:33:98:ed:89:
01:f3:93:ea:66:50:72:de:3e:b4:77:f6:fe:0f:08:
64:bd:ab:c4:ef:3c:ac:dd:5d:23:6e:74:12:ce:79:
8d:9f:18:8f:6f:a2:26:bf:35:ad:a6:8f:f6:2c:20:
eb:16:6f:7a:75:37:21:cb:c7:c6:13:fb:9d:08:5c:
84:3a:71:6b:3d:cf:50:b5:0a:3b:8e:e6:ea:22:61:
62:a6:76:79:fa:e3:28:b5:f6:a6:3a:5c:dc:f5:b4:
dd:84:61:09:a6:2a:81:ec:f0:e5:c3:3d:b1:3a:b1:
45:b1:da:df:2a:ef:bc:88:5b:18:37:c7:31:06:2b:
c0:42:bb:e7:da:7e:27:52:7c:3c:6d:00:61:f8:05:
be:98:62:ef:3a:9e:75:30:3c:96:10:4c:47:c5:e0:
4e:ad:98:f9:76:71:f8:44:95:45:c9:98:7f:c9:0b:
d6:ca:53:fb:27:cb:bf:19:e7:24:0e:2e:0e:c1:39:
7a:80:62:ac:0d:d6:7f:05:7b:cf:75:73:f3:39:64:
5e:37:9b:df:c4:ed:89:f5:b4:01:7f:2c:0e:f3:fc:
62:bc:91:06:dd:fe:5e:fd:8a:6f:7f:c0:39:dc:81:
89:2e:54:5f:fc:17:70:85:cb:76:88:62:e9:44:60:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:E3:C6:1D:9A:13:23:5A:21:85:97:0B:F5:47:3D:B1:E8:D6:87
X509v3 Authority Key Identifier:
keyid:25:6F:A6:73:DB:3B:E1:E2:EB:AB:FB:99:6D:07:CF:49:22:5E:BC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JW-mc9s74eLrq_uZbQfPSSJevAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/1w7jxh2aEyNaIYWXC_VHPbHo1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/96e5a2-61af-431a-b547-f1758a2c112f/1/JW-mc9s74eLrq_uZbQfPSSJevAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.39.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cf:ec:e6:a1:00:2b:45:d8:fa:d9:bf:86:6d:0c:92:9b:f0:
ab:d0:00:4a:52:8e:66:68:1d:18:75:86:bc:ab:eb:92:cc:39:
56:45:06:6a:f0:eb:93:23:55:fa:35:47:86:20:b0:f2:b2:5c:
65:f7:af:5f:d5:fc:59:1f:b3:98:80:39:54:ae:5e:4d:cd:99:
3b:1d:8e:ee:1a:5a:7e:90:16:30:ac:7f:21:55:f1:42:c2:c5:
c7:8d:a9:51:61:55:ae:92:34:df:f3:db:37:50:ca:e5:1d:89:
b0:02:9d:7e:55:5f:5a:46:eb:c6:aa:20:ec:3a:ef:f8:9c:c0:
fe:2a:bd:4b:26:00:1a:99:e3:42:0f:ae:50:d8:8d:da:15:36:
75:1c:d7:9f:f8:74:dc:4f:00:58:f1:1f:df:a0:53:d3:3d:28:
bc:2f:6e:38:6b:ec:b7:4e:09:fb:01:da:2d:29:74:5c:79:51:
45:6f:a8:c8:2a:31:f7:87:02:d1:92:b3:44:af:8e:6b:ba:ca:
32:57:6d:fc:62:11:bb:81:9a:43:ef:39:df:49:fc:e1:10:5d:
05:3a:65:6d:06:23:c2:71:c1:6c:c6:40:b6:ed:9a:90:79:eb:
fe:5a:b0:62:f8:da:07:40:61:a0:5b:0d:03:71:16:99:92:8e:
5f:3b:3b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:12 2026 by rpki-client