Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa
File: RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa (raw, json)
Hash identifier: jo0fvpPNSx2y4hIOQ1O6FYntic5wvU7TSTfcrJMmjLk=
Subject key identifier: 44:07:4D:06:0E:A3:EC:85:B7:58:E7:C4:B6:09:20:01:52:60:32:31
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 019F369E7B1B189021427C9A28C3896A35C2
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa
Signing time: Mon 06 Jul 2026 08:49:43 +0000
ROA not before: Mon 06 Jul 2026 08:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9092
IP address blocks: 213.156.224.0/20 maxlen: 20
213.156.240.0/24 maxlen: 24
213.156.241.0/24 maxlen: 24
213.156.246.0/24 maxlen: 24
213.156.247.0/24 maxlen: 24
2a00:db0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:9e:7b:1b:18:90:21:42:7c:9a:28:c3:89:6a:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Jul 6 08:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44074d060ea3ec85b758e7c4b609200152603231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:8b:b0:bf:ea:54:48:f2:c0:c2:e2:3d:eb:
47:4e:ed:9f:76:95:5a:17:31:6d:06:5a:5f:c4:09:
16:31:aa:85:46:1f:f1:fe:cd:28:50:86:8d:f2:84:
2b:b9:11:00:5f:ac:c4:b2:9a:6e:9c:43:14:ef:6c:
72:d2:d4:9c:42:37:82:4b:4a:3d:0b:a2:6c:ff:40:
c0:20:6b:b2:24:21:2b:05:9f:6c:40:03:76:76:1a:
55:33:b2:6a:ee:88:de:ba:62:24:8b:83:22:63:e5:
ce:70:e3:f8:cb:e9:ff:82:39:e7:e7:49:d9:e3:a1:
a3:a3:ab:2d:24:79:7b:c3:07:66:47:7c:88:0a:ff:
e3:d0:69:8d:02:0c:d1:9c:97:3a:fa:30:99:75:73:
58:6d:ce:fb:95:42:f0:88:56:55:a0:06:75:ed:da:
62:b9:70:d5:aa:c9:51:11:fa:4b:7b:28:cb:f4:25:
96:ec:f5:ab:93:b2:a9:51:69:dd:e2:3d:d1:8f:8b:
c0:ef:aa:7a:f6:7e:e9:f7:ea:48:a1:a4:1e:34:de:
20:6e:39:f0:93:0c:4f:c2:9f:29:39:32:1d:94:99:
bc:72:c3:c3:32:85:29:2a:c9:61:8d:0c:5f:03:2d:
7d:68:f0:46:b2:25:c9:ec:5a:11:47:8f:65:4b:50:
7d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:07:4D:06:0E:A3:EC:85:B7:58:E7:C4:B6:09:20:01:52:60:32:31
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/RAdNBg6j7IW3WOfEtgkgAVJgMjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.224.0-213.156.241.255
213.156.246.0/23
IPv6:
2a00:db0::/32
Signature Algorithm: sha256WithRSAEncryption
54:24:d4:3d:8c:7c:19:35:dd:15:42:b6:8f:8f:e0:7f:6e:91:
90:68:84:10:f1:71:13:3a:78:02:d7:da:d1:90:f3:1c:da:5f:
3b:c7:79:cb:15:1c:2e:c2:c6:6d:72:73:4d:9c:87:f0:ad:48:
b1:5e:40:2f:43:f1:99:e5:37:64:02:28:3f:bb:9e:6f:5a:52:
0b:b2:e2:ca:f8:31:d7:dd:47:5b:46:96:25:d5:11:77:5d:ae:
22:f9:37:dd:2d:79:1b:27:40:89:c5:f6:7a:9a:61:4a:c9:4a:
5c:5e:0e:15:ae:96:3e:bc:08:b5:88:6c:5f:b6:3a:48:85:0d:
a6:1c:10:7d:50:d1:d6:44:cb:6c:7c:f1:27:0f:da:17:60:86:
c6:69:2a:0e:18:ef:55:0f:48:53:ca:67:88:82:41:f4:4e:32:
c6:21:14:fc:c2:9d:dc:a1:24:f9:17:ea:c5:13:2e:4a:4c:cf:
9b:e6:b2:7e:43:2f:f0:30:eb:e6:6d:96:5c:37:66:a5:6a:23:
85:2d:cf:70:13:b4:e1:be:17:81:b7:04:43:cd:20:e3:77:ec:
3e:da:fe:4b:ca:c4:28:8c:ec:01:70:fc:3a:b6:e3:f6:e8:46:
6a:a4:fc:1a:f8:61:33:a5:c7:27:fa:b0:4b:8c:b5:f7:bc:58:
23:4a:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 22:38:46 2026 by rpki-client