Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/68-hQx0BL9yNTLiWpywtZGc6Its.roa
File: 68-hQx0BL9yNTLiWpywtZGc6Its.roa (raw, json)
Hash identifier: Z3Os0JQgEmxoIymcS5RKGBl8AXLtnnHEO4L87kfXgsE=
Subject key identifier: EB:CF:A1:43:1D:01:2F:DC:8D:4C:B8:96:A7:2C:2D:64:67:3A:22:DB
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 019F03AE8293F74EFE7D7957F6CEE9B76DE7
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/68-hQx0BL9yNTLiWpywtZGc6Its.roa
Signing time: Fri 26 Jun 2026 11:26:36 +0000
ROA not before: Fri 26 Jun 2026 11:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 77.111.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:ae:82:93:f7:4e:fe:7d:79:57:f6:ce:e9:b7:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Jun 26 11:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebcfa1431d012fdc8d4cb896a72c2d64673a22db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:6c:b4:bd:70:5f:3a:ea:da:a8:c1:12:44:
8b:e9:62:95:65:6a:c4:d1:48:20:06:58:d5:b9:d2:
59:0e:e0:40:f1:81:74:b6:ac:54:e0:39:b6:0f:2d:
2b:45:f2:09:61:9d:ee:c1:2a:4b:15:e7:5e:c7:a3:
7a:f0:dd:81:ea:2f:73:00:a5:6f:48:b2:ca:9f:ca:
89:07:1b:27:19:79:8d:98:e7:40:69:f0:77:12:12:
ea:92:26:ec:3b:7a:a1:49:0e:09:4f:95:4b:32:4b:
c8:33:6a:d8:e5:92:51:a3:97:c7:98:07:60:48:0c:
ac:e1:84:40:e4:1b:ca:5d:53:5b:e3:67:c0:09:aa:
92:81:19:17:85:46:cb:cd:7e:e1:c0:ba:70:a2:42:
4f:df:90:43:e9:49:ea:4b:2a:b9:08:2d:ca:8b:5c:
55:fd:c8:01:da:fa:52:b9:9f:42:33:03:09:7e:f2:
ab:46:6b:60:3b:1f:d0:b8:5d:1f:5f:e1:e9:c5:fc:
9a:c4:e0:4f:49:24:0e:32:4d:a1:86:be:a3:7a:4b:
ff:c9:db:6c:ec:5a:7a:61:c0:bc:0d:d4:76:24:f8:
8a:e1:a6:bd:e7:a7:e7:ee:21:a7:2a:2a:0d:4c:db:
31:20:f3:a2:1b:f3:b9:bf:90:d0:59:82:a1:cd:51:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CF:A1:43:1D:01:2F:DC:8D:4C:B8:96:A7:2C:2D:64:67:3A:22:DB
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/68-hQx0BL9yNTLiWpywtZGc6Its.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.84.0/22
Signature Algorithm: sha256WithRSAEncryption
08:34:4d:89:a0:1a:eb:02:26:8e:31:1d:1f:20:d0:f4:97:b5:
0b:e3:88:79:2e:3c:52:74:4c:71:e5:80:a1:df:8d:0a:1a:5b:
34:4d:9c:f4:80:dd:41:ab:6f:c6:83:20:69:a0:5c:47:7a:c2:
5e:c4:ec:f6:81:07:b5:a6:aa:5e:31:e5:10:c6:4e:b5:e5:20:
89:1e:d2:aa:31:18:47:4f:69:67:ac:b0:43:d2:f4:60:e6:dc:
6c:0d:72:99:26:4f:51:ec:e5:9b:29:81:bb:b9:c5:04:00:3c:
8d:9a:01:aa:52:9e:61:cf:29:36:8f:6c:44:33:d2:fb:a0:7b:
23:19:51:67:b9:94:90:de:22:cc:0a:ad:d1:2d:1f:ec:96:6c:
d2:0f:2b:c1:70:2c:a3:76:94:ed:81:e6:48:ab:03:2a:0b:20:
b7:fb:57:41:8d:8a:df:9e:5c:c6:f2:c9:fd:d8:1a:9d:62:0f:
44:27:2a:29:a1:8b:c5:0d:5d:16:7b:d5:e3:89:9e:99:15:3d:
d3:44:40:ac:ba:57:f0:1e:0d:af:81:a7:b9:9f:70:e8:41:78:
7d:35:a1:7f:51:c8:41:1a:f3:a6:08:dd:9a:db:3f:40:b2:97:
dd:60:b8:ba:7f:09:a1:dd:5f:5a:b5:4a:21:80:d2:f3:5c:5a:
60:f2:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:31 2026 by rpki-client