Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/t4LnG_ab3Ws6ye2E_obqMYYyoqc.roa
File: t4LnG_ab3Ws6ye2E_obqMYYyoqc.roa (raw, json)
Hash identifier: 3I6uXL6hx0GX6aGCX6DJ6AmZRBiBCFTF0zsJoDk/bP0=
Subject key identifier: B7:82:E7:1B:F6:9B:DD:6B:3A:C9:ED:84:FE:86:EA:31:86:32:A2:A7
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019EFDDDD71D7B87BDE396B9922D9DB7B487
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/t4LnG_ab3Ws6ye2E_obqMYYyoqc.roa
Signing time: Thu 25 Jun 2026 08:20:34 +0000
ROA not before: Thu 25 Jun 2026 08:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52053
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:dd:d7:1d:7b:87:bd:e3:96:b9:92:2d:9d:b7:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jun 25 08:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b782e71bf69bdd6b3ac9ed84fe86ea318632a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:46:51:ce:40:de:56:7e:f1:7b:9f:8b:42:
9c:b6:a8:40:35:aa:69:f6:70:65:5d:6e:e4:f1:5a:
c9:e5:ff:2d:2d:61:e6:ce:42:bd:38:56:a2:38:ff:
39:42:3c:94:f9:81:1f:40:1b:ec:3c:92:e2:dd:ab:
c7:71:e6:c7:e7:52:42:28:35:79:2d:96:c4:c1:4a:
61:82:34:24:bf:11:1c:4b:46:1f:a3:56:84:df:6c:
53:80:0a:f2:a0:ac:e8:35:02:47:31:a3:63:50:ea:
22:68:b8:a8:5e:70:f0:8b:77:39:8c:f3:9d:11:85:
2a:94:f1:cb:8d:5a:97:5d:6d:3a:13:f5:bd:f2:76:
01:b9:f0:5c:ca:f9:3f:2b:31:47:d6:df:26:e0:e2:
ed:d9:ea:cb:60:cb:b8:79:1a:3e:4d:37:7c:67:e6:
a8:48:83:b8:ca:28:6e:c9:53:b9:4c:15:88:0c:3e:
ab:77:4c:5c:b9:54:1c:d7:15:65:53:d1:0e:a4:63:
f0:aa:42:87:f9:2d:ea:c2:54:6f:f6:31:d5:93:c6:
17:ff:4d:80:38:e7:e1:34:26:de:e4:63:13:a0:67:
e9:4d:76:18:d9:49:3c:04:0d:17:ca:82:ce:9d:0d:
14:42:39:fa:ca:11:2e:dd:a3:39:40:8f:82:f5:56:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:82:E7:1B:F6:9B:DD:6B:3A:C9:ED:84:FE:86:EA:31:86:32:A2:A7
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/t4LnG_ab3Ws6ye2E_obqMYYyoqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:22:1c:b7:5a:96:47:fa:e2:1b:0f:0d:39:b5:17:29:6d:a7:
89:5b:58:27:93:80:13:45:a1:2a:0e:73:92:2b:1a:aa:a5:c2:
eb:9c:03:2a:24:ec:ab:f7:3a:2b:48:1d:77:00:be:5f:96:f6:
06:54:1b:42:3d:14:ae:4e:ed:e7:da:80:5f:a8:a6:6e:3e:09:
86:60:e7:a9:14:94:08:69:14:8a:da:89:6c:75:6e:9a:16:25:
b4:36:e7:5b:9c:da:87:af:bb:7e:4f:3d:b6:5b:02:1b:db:22:
6b:c4:38:a4:7f:6c:3c:8e:e8:14:3f:58:e4:79:cc:f8:c1:0e:
68:09:ac:53:3e:1c:36:8b:da:da:d7:12:06:31:6a:3f:b5:ab:
82:aa:5c:f9:42:06:6d:05:26:e8:47:01:93:f7:c8:9f:a1:89:
92:25:df:ed:7e:70:37:2f:28:fa:a4:24:fa:22:9e:49:fc:c2:
e5:6b:56:eb:11:be:e2:d7:d2:af:2b:0a:f7:8d:e4:d8:e7:80:
38:65:53:00:73:c7:97:85:a4:6b:a4:81:67:ea:0a:aa:19:cb:
16:29:97:3f:ac:17:26:f8:f5:a1:01:c7:31:35:b6:0f:c2:69:
13:7f:ba:95:0a:fe:6f:8a:0d:03:04:cf:6b:d3:81:47:af:e9:
85:a6:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:40 2026 by rpki-client