Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/Ax21UmMC0-KicwkMfpA7w8nCx0c.roa
File: Ax21UmMC0-KicwkMfpA7w8nCx0c.roa (raw, json)
Hash identifier: ltSg8LfKIU6cZnCzTqsVYJsYqcS6HCk2VCAS4iYtQ1c=
Subject key identifier: 03:1D:B5:52:63:02:D3:E2:A2:73:09:0C:7E:90:3B:C3:C9:C2:C7:47
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F2368691E88E0E53584DE111E4871A072
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/Ax21UmMC0-KicwkMfpA7w8nCx0c.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 217.9.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:1e:88:e0:e5:35:84:de:11:1e:48:71:a0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=031db5526302d3e2a273090c7e903bc3c9c2c747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7c:0d:b1:c3:59:15:1c:27:b6:45:18:f5:32:
f7:7e:e3:97:d3:a9:48:20:ec:6c:d1:f9:69:95:3b:
70:e3:ac:8e:14:91:37:17:85:9b:8e:da:50:c0:79:
88:93:2b:fa:f0:2f:72:25:b6:18:eb:8a:60:7b:71:
17:61:24:e8:b6:0c:8f:39:84:4e:4e:9e:f7:34:87:
d7:3d:9c:5c:94:94:68:1b:04:f6:b3:cc:ab:b7:4d:
32:d8:20:58:ca:d7:de:8b:a7:38:65:e3:e6:c8:db:
88:49:ce:ae:58:f4:71:c6:e0:f8:2a:18:8c:a3:c4:
e6:c4:3b:56:42:cc:eb:d3:53:c2:21:9a:c2:56:4e:
a6:6e:6c:c2:bb:ea:fd:34:df:dd:0b:c6:1b:d8:c5:
c1:58:4f:4a:a0:4e:63:b4:46:25:08:76:e5:21:9f:
ca:64:01:b9:03:1d:63:46:0d:0e:c7:c8:3c:c1:09:
e8:12:22:53:7c:26:68:69:6a:f1:9a:e1:43:e4:50:
85:3e:81:2c:33:bf:67:ae:bf:79:df:7f:29:f1:73:
0d:5e:35:41:95:4d:32:85:0b:16:89:38:65:de:a2:
bf:ae:58:1d:bb:9e:20:b0:f7:40:ba:47:ea:c8:18:
10:f8:e4:e2:3d:ac:c0:82:58:74:26:d9:3b:04:ba:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:B5:52:63:02:D3:E2:A2:73:09:0C:7E:90:3B:C3:C9:C2:C7:47
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/Ax21UmMC0-KicwkMfpA7w8nCx0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.13.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3f:4a:3a:aa:cb:bb:1d:f3:5c:02:28:9e:96:c3:32:c7:4a:
de:ef:49:98:06:c8:88:25:36:50:83:18:7e:2c:e3:a7:66:f8:
bc:77:82:c8:b5:13:9c:d8:91:39:36:75:7e:d6:fe:78:a3:1a:
b3:3a:70:33:d7:b6:96:bd:74:12:1a:e3:9b:d9:8c:2b:cc:aa:
d5:1d:0b:f5:16:fe:57:6a:15:2a:ad:32:aa:bf:3f:e2:28:51:
3f:8e:42:f3:31:51:9a:63:ef:9e:f5:d5:c5:4b:c7:a9:0a:42:
c1:d9:39:5c:0d:18:2d:fb:cf:c1:43:3e:27:d8:50:05:a0:19:
57:bb:34:b9:99:13:b4:36:ff:3b:32:38:4a:ef:fd:c2:8d:21:
73:a0:d4:94:c7:e3:b1:0f:f7:79:6b:83:71:32:41:4c:14:f0:
63:90:69:86:a7:9a:0b:bc:87:91:3b:41:8d:ca:6d:8c:01:c5:
58:6c:45:78:b4:02:d4:15:96:97:5c:fd:0e:b1:2c:e0:0c:dd:
f3:80:98:1e:ee:09:c2:6e:e4:90:52:63:51:5d:73:1f:c1:a1:
d5:61:f8:c2:99:79:a2:20:39:b7:dd:6a:5d:12:a4:be:68:b8:
0b:cf:7e:c3:f6:80:0a:05:6c:10:d5:76:be:0a:67:2d:8d:7d:
dc:6c:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:11 2026 by rpki-client