Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l21Tm_cv57aJjHg-ey-ZYADnOx0.roa
File: l21Tm_cv57aJjHg-ey-ZYADnOx0.roa (raw, json)
Hash identifier: 62o7Tu69pJ+oUddJ2MG3vY7s4e0iBOF6hj6ca7gtRNs=
Subject key identifier: 97:6D:53:9B:F7:2F:E7:B6:89:8C:78:3E:7B:2F:99:60:00:E7:3B:1D
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F2737506F23246CD50ADB0F8A601BD077
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l21Tm_cv57aJjHg-ey-ZYADnOx0.roa
Signing time: Fri 03 Jul 2026 09:02:44 +0000
ROA not before: Fri 03 Jul 2026 09:02:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57136
IP address blocks: 81.180.6.0/23 maxlen: 23
81.180.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:37:50:6f:23:24:6c:d5:0a:db:0f:8a:60:1b:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 3 09:02:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=976d539bf72fe7b6898c783e7b2f996000e73b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:c1:ee:8b:d9:cf:d2:6e:47:25:94:5e:1c:
56:81:77:fb:f2:cd:e4:6a:54:0d:dd:f5:1b:47:a3:
d9:34:2d:99:cd:c2:c6:16:b6:7a:3a:8a:12:19:42:
71:2b:2a:9b:d8:01:cf:ad:f1:17:91:86:6f:1c:75:
8f:d7:39:64:15:05:b0:23:db:5f:cb:e9:db:d3:c6:
2c:82:45:9e:1b:c9:c9:01:e0:2b:b6:98:98:9e:fb:
82:63:65:90:d3:1f:0f:98:6c:d9:31:71:cf:76:3d:
3e:88:21:f4:07:9b:f1:00:75:bd:0e:5a:17:c2:a8:
34:88:8f:fd:c4:1c:21:aa:59:41:7d:5b:eb:75:15:
22:a1:80:fd:aa:b6:88:32:df:22:a1:d5:cf:14:52:
94:5e:dc:24:2d:e0:cd:c0:9b:2c:0d:9e:24:b7:5a:
6f:6e:24:6e:af:c1:c6:a0:23:39:b5:11:07:83:86:
09:3b:5e:17:39:0f:b0:3f:a9:d0:f5:58:9d:e9:18:
d9:18:0e:30:23:5e:d7:e4:d8:58:14:fc:b0:35:e5:
19:f9:4a:67:9e:26:28:25:43:9c:0e:1f:88:8c:b8:
1f:c5:e0:e1:93:df:f1:e9:05:0b:5f:41:5b:08:7c:
62:51:f8:1d:9e:d0:43:a4:0b:50:d2:d1:5d:8e:18:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:53:9B:F7:2F:E7:B6:89:8C:78:3E:7B:2F:99:60:00:E7:3B:1D
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/l21Tm_cv57aJjHg-ey-ZYADnOx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.6.0/23
81.180.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d6:5e:a0:52:6c:32:ff:42:45:1e:6b:63:de:13:e5:dd:7b:
27:19:a3:6d:63:86:10:a1:77:d9:42:f2:f3:91:09:d6:6c:ff:
58:d9:b1:82:0c:1d:42:0c:d4:45:6c:6a:e7:0e:e1:62:11:29:
f8:0e:8d:25:65:7f:d2:b0:aa:e9:af:6d:64:a3:69:d1:fa:db:
da:89:bf:fd:90:fa:2a:24:55:eb:65:d9:c2:b4:61:c5:5e:3c:
d4:4f:9e:4d:0f:1e:91:d4:26:eb:7f:24:18:a6:84:9c:66:83:
19:f7:47:d2:31:6c:d9:8f:46:84:21:39:d4:f7:65:ba:93:9d:
91:17:63:be:b2:0b:87:8c:1d:23:54:96:4f:df:7a:65:fb:67:
67:d1:27:93:d8:2c:d6:f8:93:7e:51:c5:9b:dd:33:12:4a:06:
49:22:c5:e0:4a:35:99:18:85:5a:94:7a:90:3a:68:92:5c:a2:
d0:e8:ca:2d:76:4f:c6:d6:b0:43:48:88:97:0e:95:d6:ad:d6:
e3:e2:a0:5c:6b:94:00:e9:0e:bf:99:a2:6a:34:a8:d0:c8:e1:
9b:79:92:fc:32:9e:5f:b0:1a:a7:67:10:cd:1e:00:fd:d1:62:
64:2e:3b:1e:85:be:eb:85:8f:f5:1d:60:d8:14:1c:9c:7d:ff:
8a:09:db:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:44 2026 by rpki-client