Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D00w7w4Eryyl9BwJiSEdB4Uzf3w.roa
File: D00w7w4Eryyl9BwJiSEdB4Uzf3w.roa (raw, json)
Hash identifier: HtXxlI95cBu1N7+G92sLiRPvolaflAY+Ib9w+JT5aQI=
Subject key identifier: 0F:4D:30:EF:0E:04:AF:2C:A5:F4:1C:09:89:21:1D:07:85:33:7F:7C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F405F24CB12C9D4983F9046312509250B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D00w7w4Eryyl9BwJiSEdB4Uzf3w.roa
Signing time: Wed 08 Jul 2026 06:16:44 +0000
ROA not before: Wed 08 Jul 2026 06:16:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 79.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:5f:24:cb:12:c9:d4:98:3f:90:46:31:25:09:25:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 8 06:16:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f4d30ef0e04af2ca5f41c0989211d0785337f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:52:86:67:b4:44:86:06:24:2b:e3:78:59:
25:ff:45:d6:bb:7d:4d:6e:d4:aa:67:0b:83:2b:35:
25:e2:8d:53:5b:bc:69:ec:06:7f:d0:d8:66:d7:af:
07:70:86:be:c0:92:dd:18:19:1c:cc:69:59:e6:fa:
2c:ed:ef:23:7d:d4:fe:f5:74:4d:3d:f9:f9:fc:6c:
d1:2b:04:ac:e0:1d:75:27:7c:75:42:05:68:ff:21:
60:0f:f9:dd:e1:5b:df:d3:6d:19:af:28:f0:0c:3e:
39:02:cf:15:6c:81:41:75:ce:eb:21:5f:a5:65:f8:
dc:d2:d5:5b:52:08:21:f3:b8:58:41:03:19:f5:7a:
03:61:b7:b8:53:fc:0f:5a:75:80:30:77:09:a8:e2:
61:66:20:ba:1a:16:0d:44:05:97:a5:09:f1:73:04:
c3:59:0e:d5:61:c5:85:f9:c9:4d:ce:df:a0:6d:c7:
29:6e:a3:08:06:cf:ce:07:49:70:21:86:d5:26:12:
b2:c2:30:1e:b2:f5:bf:28:03:da:e7:75:54:cf:f7:
9e:00:ee:83:53:79:ca:a2:c1:7e:04:ca:f4:0c:af:
84:c4:fb:08:a4:f3:0d:ce:40:60:9d:92:3c:69:c9:
8f:9f:7a:c9:0e:d5:eb:f1:7a:9b:ad:6b:db:e7:f2:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4D:30:EF:0E:04:AF:2C:A5:F4:1C:09:89:21:1D:07:85:33:7F:7C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D00w7w4Eryyl9BwJiSEdB4Uzf3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4d:d0:48:8c:0b:8a:83:b9:c0:03:b8:d5:62:fc:7d:f9:50:
11:2d:74:ea:dd:1d:b0:75:85:ce:d6:51:9d:0d:d2:59:31:a1:
0f:44:11:b9:d4:65:e2:af:f3:36:db:83:1c:93:c1:bf:27:d8:
e6:77:49:6c:12:f1:51:03:96:3f:43:b8:82:29:54:67:0b:d5:
94:03:a3:b1:cf:07:95:3c:96:b6:c1:70:22:ba:06:38:50:0d:
11:35:8d:8a:40:9b:bc:b7:47:37:9f:21:ae:03:d4:d6:0f:28:
0c:46:c7:6a:f0:5a:7e:cc:84:71:53:0a:77:0b:a4:52:e2:93:
98:75:48:45:dc:5a:c8:16:d0:75:96:88:94:04:d8:7f:b4:a1:
ba:87:2f:13:62:56:ab:99:8e:be:8a:28:ff:2e:43:ba:58:f0:
e2:8c:01:cc:8e:f8:56:cb:b0:90:d6:bf:60:b8:f0:3e:b1:99:
db:c9:64:56:e9:36:03:db:bd:60:53:6e:8a:7d:34:a9:7b:94:
d6:33:62:72:a1:1c:d7:09:1a:9e:1e:c7:6f:04:89:e1:06:cf:
b7:73:b7:0b:a5:0e:86:da:00:0f:d1:32:82:c4:07:4f:a5:9f:
60:d9:d4:38:5d:0b:9f:9b:20:19:4f:6f:87:62:97:bd:4a:52:
2f:9d:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:13:40 2026 by rpki-client