Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa
File: 96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa (raw, json)
Hash identifier: poB30dm+SrH8X1Re/HLNOKlVM2DpDlomGaXJPMbImyI=
Subject key identifier: F7:A6:7D:62:69:30:84:39:46:A3:9A:40:32:EC:3F:13:71:E9:EC:B9
Certificate issuer: /CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Certificate serial: 019ED5D23A10A5E0A4711BB2113FFE888770
Authority key identifier: 39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa
Signing time: Wed 17 Jun 2026 13:43:04 +0000
ROA not before: Wed 17 Jun 2026 13:43:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34191
IP address blocks: 185.224.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:d2:3a:10:a5:e0:a4:71:1b:b2:11:3f:fe:88:87:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b08ca2c64ba735f4b145216dd14d99f0829f0f
Validity
Not Before: Jun 17 13:43:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7a67d626930843946a39a4032ec3f1371e9ecb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:a1:30:4c:db:33:d9:83:89:bd:76:26:4d:
16:2d:27:37:98:8d:af:56:58:6a:91:7e:30:f5:b2:
7b:2d:29:ef:3f:04:26:fa:74:6b:6c:38:da:37:0b:
a4:02:4d:c5:f9:e5:a9:74:0a:e3:27:d5:a7:0a:b5:
c0:0f:50:b2:52:e0:55:44:1d:0d:14:44:c8:5c:86:
c1:dd:50:a0:1e:52:77:d0:95:cf:55:96:2f:ec:8f:
6c:46:38:f8:c8:a5:f3:6d:c8:3f:57:0b:9c:ca:75:
fc:e3:74:26:e5:10:06:7f:90:78:31:f7:98:20:aa:
2a:c9:fd:4c:10:7e:80:63:5b:02:fb:4c:fc:cb:55:
4f:37:98:c6:0c:29:1c:ea:7d:46:79:d2:0c:9a:da:
42:cb:b9:db:0b:7c:a5:46:3c:15:d7:ed:16:96:d6:
bd:16:d5:09:47:83:9c:b9:21:1e:55:86:97:b2:9f:
7a:78:71:b5:8f:3b:1b:02:77:bf:b9:11:dd:ec:f4:
18:d6:e3:ad:39:a2:db:9e:a8:8a:ab:bb:63:95:68:
77:0a:bd:f2:54:76:0d:9c:57:f2:ff:18:9f:1e:3b:
9b:8a:01:10:cc:2e:b8:a8:55:56:a4:65:80:f4:47:
2e:e6:94:f6:e7:f5:b7:09:60:d8:b0:6c:ce:1a:1d:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A6:7D:62:69:30:84:39:46:A3:9A:40:32:EC:3F:13:71:E9:EC:B9
X509v3 Authority Key Identifier:
keyid:39:B0:8C:A2:C6:4B:A7:35:F4:B1:45:21:6D:D1:4D:99:F0:82:9F:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ObCMosZLpzX0sUUhbdFNmfCCnw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/96Z9YmkwhDlGo5pAMuw_E3Hp7Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ac00b7-da42-4464-bbc5-3416044e358e/1/ObCMosZLpzX0sUUhbdFNmfCCnw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.240.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:3a:6c:65:2e:ce:98:6a:e6:2b:20:c4:3d:1e:0a:95:71:a3:
e9:4c:de:37:b5:56:e7:53:6e:aa:0d:f8:f8:d5:f2:94:90:73:
28:60:e4:80:77:b3:45:34:9f:e3:fd:55:a6:58:3c:d3:bb:9c:
25:90:b5:91:3d:9a:1e:fc:8b:ef:e6:e3:83:0c:dc:c9:60:42:
3d:04:d9:3e:a5:82:10:b9:d3:3e:c9:bf:38:77:f0:46:19:35:
ac:00:ce:24:56:26:44:e5:97:86:a2:a6:70:b3:ca:94:96:5f:
8e:67:76:a5:35:e4:45:91:36:f1:e4:c4:0c:49:5f:9f:11:df:
e4:66:f3:56:c9:1e:c1:25:92:86:9f:36:2d:d3:85:6d:22:83:
ae:3b:fd:68:29:f6:6f:e6:14:49:ed:23:d8:51:bd:22:3a:16:
7d:32:9a:59:c1:57:a2:f2:47:da:2c:f0:5f:d1:df:94:f2:5c:
e3:d3:26:25:b0:3f:c7:d4:5f:ca:dd:53:61:9b:1d:05:e3:ab:
ee:af:3b:d9:4c:ef:c3:26:09:5e:f7:30:f1:96:dd:10:33:50:
e7:81:3e:d6:4a:97:53:f6:20:af:33:d2:95:6c:64:81:cb:36:
f4:45:9a:d6:6a:94:62:46:62:45:7f:07:f9:32:6c:fd:21:66:
b3:fd:66:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:00:18 2026 by rpki-client