Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/racBihfO7es-OWXWGsA9MHFFf-8.roa
File: racBihfO7es-OWXWGsA9MHFFf-8.roa (raw, json)
Hash identifier: zGIlX22SCWZyeOZJDWbTCwLJOAmlIqk6YHz5nckPEA8=
Subject key identifier: AD:A7:01:8A:17:CE:ED:EB:3E:39:65:D6:1A:C0:3D:30:71:45:7F:EF
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019F6F229CA03235080705D87FD6D138805A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/racBihfO7es-OWXWGsA9MHFFf-8.roa
Signing time: Fri 17 Jul 2026 08:12:47 +0000
ROA not before: Fri 17 Jul 2026 08:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205828
IP address blocks: 2a0d:b844::/32 maxlen: 32
2a11:9042::/32 maxlen: 32
2a11:b4c6::/32 maxlen: 32
2a12:647::/32 maxlen: 32
2a12:6487::/32 maxlen: 32
2a12:bc83::/32 maxlen: 32
2a12:cf86::/32 maxlen: 32
2a12:d804::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:22:9c:a0:32:35:08:07:05:d8:7f:d6:d1:38:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jul 17 08:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ada7018a17ceedeb3e3965d61ac03d3071457fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:1c:d2:67:ac:09:6a:ab:92:62:0f:62:66:
f9:71:d5:35:54:d6:06:57:68:ad:77:b9:74:fe:48:
49:7e:29:5b:8e:4a:a4:7e:37:ba:92:2e:c8:df:53:
87:35:c3:c3:2f:83:95:ac:7d:a7:12:bc:4e:f2:b9:
cc:8b:56:b9:30:6c:8d:f6:3f:be:42:88:04:d9:75:
06:6e:10:7d:e3:fd:14:c7:5c:51:8c:1e:8e:65:e1:
d8:38:3d:08:ec:02:95:2b:38:ba:c1:f8:bd:ec:09:
44:ca:b5:90:77:be:1d:47:b7:90:f7:ea:f2:16:89:
bb:49:c5:6c:4c:30:52:ab:1e:05:c1:d9:d3:8f:7d:
1c:c0:d0:34:2d:ff:54:44:9e:e6:be:d9:c9:cd:59:
75:cc:c9:bf:f3:a3:f9:51:7f:42:d0:74:31:d2:65:
cf:b3:e5:8e:38:c1:33:7a:31:16:8b:1e:87:a6:3c:
62:94:8e:00:28:4c:80:a1:e0:20:80:3e:a4:f3:d9:
32:9e:92:6f:4e:53:1b:be:7b:9c:ba:7f:04:96:28:
4f:1c:63:bc:19:b0:50:0a:6f:81:2b:b2:74:78:d8:
ce:38:55:49:67:0e:0e:dc:de:33:69:cf:e9:cd:8d:
39:cc:98:bf:3e:32:fc:78:0d:93:46:64:42:4a:1d:
b9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A7:01:8A:17:CE:ED:EB:3E:39:65:D6:1A:C0:3D:30:71:45:7F:EF
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/racBihfO7es-OWXWGsA9MHFFf-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b844::/32
2a11:9042::/32
2a11:b4c6::/32
2a12:647::/32
2a12:6487::/32
2a12:bc83::/32
2a12:cf86::/32
2a12:d804::/32
Signature Algorithm: sha256WithRSAEncryption
23:d2:dd:f2:04:32:c7:cc:bd:4a:2a:4f:ed:86:11:c1:95:bf:
77:02:72:56:27:4c:83:af:d8:93:64:20:9d:8b:91:20:0e:a0:
33:07:54:3f:a4:f6:4c:f3:c1:7e:9a:64:ce:13:20:71:70:97:
d2:5c:52:0a:b8:62:6a:b6:ce:a9:d3:05:86:ec:81:f3:06:e6:
71:7d:73:25:2b:1a:ca:d0:2f:1d:8b:1f:da:39:b0:d4:aa:dc:
58:73:57:ca:0e:65:3a:f5:66:1b:dd:de:64:3e:5b:fb:ea:ae:
a9:7f:89:69:55:0a:2c:63:82:87:23:5a:95:ec:09:2e:8c:15:
0c:e8:d4:c3:72:6c:d2:0a:d1:93:1b:20:37:90:92:e5:6d:2a:
a6:17:65:88:c6:38:0d:04:fe:f6:01:64:60:5f:06:66:d3:b3:
11:af:c8:e4:30:e5:a8:0a:ac:46:65:6c:82:86:c0:37:79:ae:
dc:a2:52:1e:31:71:a1:0f:29:f2:fb:5c:b3:b1:4f:79:66:4a:
2b:93:3c:c3:0e:c4:04:3b:cf:ae:5d:74:5e:2f:9b:49:4d:1c:
9c:97:0f:35:7c:6e:87:3d:a3:1b:35:b7:fb:8f:c5:75:5b:8e:
8f:9b:5e:6f:3d:d1:a8:10:49:e8:8d:33:13:16:46:99:69:32:
1a:a3:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:26 2026 by rpki-client