Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/CRweVTgebnTaIIJuvD2Vpm_hEI8.roa
File: CRweVTgebnTaIIJuvD2Vpm_hEI8.roa (raw, json)
Hash identifier: 0TfSHKCcdRm11P/Z+pghiutPw8OkEPy0pXyOhDApvC4=
Subject key identifier: 09:1C:1E:55:38:1E:6E:74:DA:20:82:6E:BC:3D:95:A6:6F:E1:10:8F
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F236869DF34B93BE4ACAC2484192B5B1B
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/CRweVTgebnTaIIJuvD2Vpm_hEI8.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15577
IP address blocks: 217.9.0.0/24 maxlen: 24
2a06:64c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:69:df:34:b9:3b:e4:ac:ac:24:84:19:2b:5b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=091c1e55381e6e74da20826ebc3d95a66fe1108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:14:18:57:0d:3d:8c:b4:d4:00:7a:e2:89:
3d:03:d8:19:d8:01:9c:4a:6a:31:1f:89:ea:e8:d1:
22:96:dd:fd:ee:53:e1:9e:6d:e1:67:82:72:a0:77:
6f:50:d8:4f:64:26:9b:52:a2:7c:5a:4e:b2:75:08:
35:e3:24:14:9d:da:17:1e:8a:3f:62:b1:5a:27:cb:
43:ac:d0:75:fb:04:22:77:df:61:20:41:69:d3:4a:
5d:d1:6a:78:b2:64:08:27:31:f8:c7:14:6b:27:c1:
22:57:27:0e:60:ce:81:0f:e9:1b:13:24:f5:c5:41:
31:c4:9a:bd:ae:c0:ab:85:67:9b:02:8b:f8:fa:97:
7f:16:0e:53:ea:3c:dd:d8:35:13:f3:3e:a0:2f:79:
cf:77:e9:15:26:69:8a:60:20:90:41:bf:cd:e3:29:
b3:9d:93:a4:f9:48:c6:b4:89:3d:7b:d0:dc:b1:a7:
f0:b4:71:17:81:14:83:ab:da:f8:57:55:14:d6:f4:
0b:54:d1:40:bb:f7:31:d9:f4:17:01:f5:ef:0e:e4:
0b:29:24:61:14:24:b8:fd:a3:f4:a3:ab:df:6b:f3:
cf:f0:eb:d9:41:dc:23:4f:75:ca:a4:ae:73:f3:d2:
83:67:dd:e2:bc:f0:81:66:34:21:dc:48:72:68:7f:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1C:1E:55:38:1E:6E:74:DA:20:82:6E:BC:3D:95:A6:6F:E1:10:8F
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/CRweVTgebnTaIIJuvD2Vpm_hEI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.0.0/24
IPv6:
2a06:64c0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:1c:41:eb:fc:c8:a8:ea:fb:d5:ad:7e:c9:2a:4d:05:32:76:
5b:7a:21:25:01:7f:03:97:7a:16:96:d8:13:f6:36:3e:da:af:
ee:9d:5b:15:8a:a4:e0:d1:63:5a:9c:b1:36:79:ab:ac:d4:51:
6e:f1:7e:a7:79:2a:36:7f:d4:2a:19:bc:1d:ea:5f:76:a1:95:
33:f5:af:df:4c:25:df:ff:46:f6:30:52:b6:db:6e:d1:4d:3f:
71:e5:af:28:12:63:7d:7a:66:d4:b4:9e:bc:35:3c:ef:2b:39:
a6:ed:ba:45:8e:d9:b1:e9:35:ea:5e:c8:0a:de:d7:73:30:77:
aa:a6:69:d0:15:06:08:2f:6e:33:c0:12:45:6f:7f:86:5e:36:
31:83:12:43:bf:d7:dc:5e:a9:fb:00:6f:f5:1f:e9:f6:bf:95:
54:ec:3a:9f:72:e0:a6:21:18:b2:71:6f:ce:ef:6f:9e:4d:c3:
7a:1d:2e:c0:fa:a6:af:1c:d3:cc:c7:29:bb:64:b3:b5:66:7d:
d1:53:e0:25:74:3b:77:9d:d5:f3:f0:f9:c6:bc:61:45:3d:2f:
af:b9:a5:22:63:a3:e9:68:8c:2a:03:36:47:95:bf:a0:34:9d:
50:78:d6:18:8b:89:9c:a0:96:6f:39:cd:9b:62:9a:a2:0f:4d:
70:10:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:01 2026 by rpki-client