Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/tdjIiHG6aRg6RaOSgsb_E64QRco.roa
File: tdjIiHG6aRg6RaOSgsb_E64QRco.roa (raw, json)
Hash identifier: rpGb1Qz22L2bS8euMlwSPzOxpxsFd6dx18fW4QaBOow=
Subject key identifier: B5:D8:C8:88:71:BA:69:18:3A:45:A3:92:82:C6:FF:13:AE:10:45:CA
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019F43ADFCABCCAC1D2B11B9F99A588AF333
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/tdjIiHG6aRg6RaOSgsb_E64QRco.roa
Signing time: Wed 08 Jul 2026 21:41:43 +0000
ROA not before: Wed 08 Jul 2026 21:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20640
IP address blocks: 217.173.128.0/20 maxlen: 24
2001:4b88::/32 maxlen: 48
2001:4b88::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:ad:fc:ab:cc:ac:1d:2b:11:b9:f9:9a:58:8a:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jul 8 21:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d8c88871ba69183a45a39282c6ff13ae1045ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:ea:82:eb:84:2b:6a:35:21:e4:30:94:22:
a1:81:cc:da:d4:5d:f9:01:1b:0d:6b:74:4d:07:86:
2b:3a:e7:62:ab:c7:6f:4f:f3:4f:72:31:da:a7:c5:
38:73:30:4d:51:c7:c3:93:01:d6:20:26:18:a5:02:
8d:1c:ef:1d:6a:36:3d:79:4f:df:51:99:28:68:c4:
69:73:3d:35:c5:57:61:13:10:9c:90:81:ac:44:33:
e0:9f:a2:5d:31:47:4e:04:5d:7b:d6:78:3f:70:97:
1a:f9:41:e2:10:bf:b7:c5:08:18:c8:7f:94:2b:7b:
ae:19:c0:57:81:c6:4d:5e:6d:5c:91:a0:b4:5b:30:
48:b0:92:d8:fa:62:8b:c1:fa:ba:7c:e9:9b:01:21:
ef:92:17:70:f4:cf:cf:ae:65:e4:7c:70:92:53:be:
db:5e:d4:d8:88:03:5e:02:dd:05:32:2c:22:30:7b:
32:1b:ca:d5:a4:56:50:2b:17:b3:55:63:95:3e:92:
62:11:54:f2:2b:68:bc:24:7a:a7:c3:4b:4f:97:91:
e4:2c:81:2b:69:87:7d:f1:a9:c7:b7:fd:78:62:a6:
d1:b8:37:a8:fb:69:9c:e5:03:ca:10:93:3d:7c:8b:
9f:92:c6:f7:de:81:b7:80:3a:93:27:1e:58:14:4e:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:C8:88:71:BA:69:18:3A:45:A3:92:82:C6:FF:13:AE:10:45:CA
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/tdjIiHG6aRg6RaOSgsb_E64QRco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.128.0/20
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
57:4a:a6:42:9b:f3:d2:0d:e0:6d:6e:79:61:06:91:12:a4:2f:
02:12:c9:2a:e1:f0:a5:ff:06:01:1d:66:77:57:00:26:f8:cb:
bf:10:5f:a8:d2:eb:90:53:01:5b:69:bc:46:83:52:70:e6:88:
1b:1b:23:01:b6:8a:2e:45:59:e3:94:59:7c:d9:51:f6:45:16:
e1:1b:0c:8d:e1:58:e4:9a:af:5e:58:20:23:10:4f:ea:b0:40:
ad:62:3c:7b:9b:82:8a:c4:ea:1c:ea:ab:17:b8:8c:90:d6:e3:
51:67:f6:5e:64:45:dc:0d:da:1c:77:6a:00:40:b2:dc:7d:4e:
55:52:3a:ed:8c:d7:dd:6a:c1:98:e8:61:73:29:df:c0:e7:cd:
63:cf:de:dd:a8:95:35:ce:98:50:7c:81:29:87:08:26:50:b3:
92:d9:da:83:09:e2:8a:28:96:d4:40:40:fd:9f:0a:13:95:d6:
41:c3:09:8b:a1:f0:6f:8d:54:d0:20:ac:c6:cc:d7:f5:6c:65:
5b:02:de:61:dc:b6:1a:21:60:d0:f4:bb:5c:5a:9d:63:44:5d:
c9:e2:63:80:ae:aa:60:f7:78:16:c0:b2:1a:86:e3:5c:f6:2c:
2e:02:ff:aa:c9:49:5d:6b:c7:ae:1f:b7:ed:e5:1b:fe:5a:80:
66:ec:3a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:39 2026 by rpki-client