Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa
File: E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa (raw, json)
Hash identifier: Y97cV5mLD6OdoMRNkkIiqZ3KZIjQpuOlelMU9OFPxmA=
Subject key identifier: 13:C2:03:7D:B3:C9:F8:04:94:A8:E3:BB:63:F3:DE:6C:29:DF:70:6F
Certificate issuer: /CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Certificate serial: 019F2368CC90FDBBD6594D23266829CF635C
Authority key identifier: C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201925
IP address blocks: 109.207.104.0/24 maxlen: 24
109.207.106.0/24 maxlen: 24
109.207.107.0/24 maxlen: 24
109.207.108.0/24 maxlen: 24
185.165.151.0/24 maxlen: 24
194.126.165.0/24 maxlen: 24
194.126.166.0/24 maxlen: 24
194.126.167.0/24 maxlen: 24
217.117.132.0/22 maxlen: 22
2001:67c:2fd0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cc:90:fd:bb:d6:59:4d:23:26:68:29:cf:63:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42ccc09b18aae25dc6a6c5793f9b920c8f6a190
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13c2037db3c9f80494a8e3bb63f3de6c29df706f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:a0:c2:46:ca:b5:51:34:93:5e:59:4a:33:
b0:74:56:18:79:be:47:40:ac:ce:b9:e7:1b:39:08:
c2:d6:e2:84:78:48:83:c9:45:ce:7c:fc:4b:25:4e:
9e:f9:b7:0a:e8:78:bb:5c:a5:d5:f1:a9:84:b6:83:
94:cc:70:2c:10:ff:ef:24:9f:c0:20:4f:46:2e:01:
23:89:5e:9a:9b:e8:3c:e5:ab:d4:ae:b0:8c:1e:d2:
54:fe:6e:f2:89:e4:95:eb:6e:9d:b4:71:3e:6f:a3:
fd:ea:1c:5a:ac:5e:02:dd:c2:b3:8d:78:89:7c:e5:
2e:89:c1:09:3d:54:5d:fb:f7:97:f3:b9:a6:45:c4:
8e:5b:3e:46:75:d2:40:af:12:68:a2:fb:8e:c2:3d:
0d:71:a1:7c:08:65:3e:58:7e:37:69:be:85:97:95:
f3:25:7d:12:fd:ef:5c:11:b5:af:9a:4e:eb:52:eb:
ab:ab:ab:2a:8f:c5:73:ea:ea:2f:08:87:d1:9e:b8:
b6:51:b3:54:9c:97:33:89:4c:2d:a7:99:78:44:36:
05:2e:85:aa:f3:bf:39:30:dd:ed:0f:49:38:32:84:
6f:92:66:4c:66:4a:7b:ea:4a:58:4a:ee:33:07:30:
6b:14:52:01:30:0c:ab:6d:b6:4d:b4:04:67:cc:95:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:03:7D:B3:C9:F8:04:94:A8:E3:BB:63:F3:DE:6C:29:DF:70:6F
X509v3 Authority Key Identifier:
keyid:C4:2C:CC:09:B1:8A:AE:25:DC:6A:6C:57:93:F9:B9:20:C8:F6:A1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCzMCbGKriXcamxXk_m5IMj2oZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/E8IDfbPJ-ASUqOO7Y_PebCnfcG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/xCzMCbGKriXcamxXk_m5IMj2oZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.104.0/24
109.207.106.0-109.207.108.255
185.165.151.0/24
194.126.165.0-194.126.167.255
217.117.132.0/22
IPv6:
2001:67c:2fd0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:4f:04:bf:ac:73:5a:de:d2:85:06:bc:12:89:70:5a:ca:c9:
02:ab:82:12:9c:b7:b4:6d:8e:7a:b6:3d:f1:1c:23:56:8e:3d:
2f:17:c5:68:d8:21:9b:9d:5a:8c:45:10:7f:8f:af:72:86:88:
09:67:a6:c4:4c:92:df:75:7f:60:83:b4:5a:4d:fd:d4:53:51:
12:54:8f:7e:e6:fe:e8:48:5c:c3:11:5f:3e:9c:1a:e7:3a:2e:
9e:51:f3:e3:bc:f0:56:3b:80:3d:cf:97:f9:75:18:8e:91:56:
50:0e:50:b5:b4:d3:cb:4b:e7:5e:80:fb:e0:ec:49:59:9c:b9:
fe:3b:9b:47:86:b2:74:a6:f6:80:25:43:03:c3:0d:de:fa:d2:
ae:5f:fe:81:94:a4:60:fa:ff:62:89:b1:fb:ba:18:ad:5d:43:
8a:a4:28:4e:ba:3a:32:35:12:eb:75:3c:c2:34:02:33:09:05:
02:9c:bd:22:8d:0a:71:09:0e:6b:7e:f4:d1:2b:5f:88:37:82:
83:6f:8a:e9:0c:4e:da:77:33:40:0b:08:ee:03:e2:f0:6c:7a:
2f:6e:bd:33:85:7e:e7:96:5f:5f:0a:98:74:2b:09:95:aa:2d:
2e:df:5a:2b:c5:b7:4f:9f:a0:32:96:67:43:e1:d1:3c:f3:d8:
31:45:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:03 2026 by rpki-client