Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa
File: IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa (raw, json)
Hash identifier: Vqmxt3BWqE/GJfg1ZTqUCwGCq0LbFCJvOwfHIeCWm6o=
Subject key identifier: 22:32:ED:46:B5:9A:51:78:06:2B:2E:2A:C2:2E:A4:33:AA:52:9B:DC
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686A29F6EBA38DAA7A7E697A65A683
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28776
IP address blocks: 217.9.4.0/24 maxlen: 24
217.9.5.0/24 maxlen: 24
217.9.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:29:f6:eb:a3:8d:aa:7a:7e:69:7a:65:a6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2232ed46b59a5178062b2e2ac22ea433aa529bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:07:32:b7:53:e2:db:d9:72:78:53:38:55:
ef:f8:2c:87:a2:0e:75:24:ec:50:db:4d:eb:12:99:
21:ea:ed:62:e1:ba:e1:0a:b1:09:36:ee:9a:53:e9:
cd:e8:e2:88:83:d1:d1:39:df:ad:e9:93:f5:81:69:
35:8d:95:d6:d9:9e:cc:b9:32:22:f3:22:04:45:94:
1c:2e:a6:bc:4b:80:29:39:eb:94:4e:37:72:05:10:
33:3d:36:d4:39:06:c1:72:36:ac:b4:f2:a6:1a:1e:
5e:a7:57:09:f2:a4:59:4e:9e:60:1b:a6:a9:30:af:
f2:e5:03:2a:59:fe:5c:98:5a:e9:ae:8f:0d:c1:ef:
7d:62:58:ad:4b:9c:fd:4d:4b:d5:8e:95:87:4a:9b:
0b:52:77:a0:c8:f5:4c:13:20:60:5e:95:b2:85:e3:
ab:63:5b:08:6c:10:89:89:15:47:4a:59:de:ab:6a:
af:97:15:85:7c:ef:a5:24:6f:a9:43:2e:8f:93:f9:
bd:12:9c:54:09:90:f5:36:1e:af:8b:bf:27:bc:e3:
61:6b:f6:ed:a5:ce:42:37:26:69:37:1a:01:09:eb:
17:8e:67:fc:cb:4d:b3:35:ac:e1:93:2c:69:53:14:
9e:bf:db:c1:2c:f2:19:36:e8:a6:63:50:56:da:ec:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:ED:46:B5:9A:51:78:06:2B:2E:2A:C2:2E:A4:33:AA:52:9B:DC
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/IjLtRrWaUXgGKy4qwi6kM6pSm9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.4.0-217.9.6.255
Signature Algorithm: sha256WithRSAEncryption
76:db:85:48:af:17:3e:28:72:49:e5:f1:c6:1d:35:d6:c6:ea:
c3:5c:fa:0a:1f:be:57:0b:62:cf:d0:14:94:7e:56:2e:03:6a:
df:56:9d:39:b1:75:62:82:5f:0a:5f:0e:b2:95:0e:5e:49:09:
27:ad:9c:6a:0b:3b:e8:ee:cc:1c:a9:51:fb:8a:9a:0d:a3:d4:
0f:1b:bf:d4:3e:04:77:2e:fd:82:6c:50:02:54:6f:08:88:ca:
2e:d5:67:fb:0a:83:c7:b8:90:f8:50:d4:86:74:32:31:02:83:
88:22:bb:62:fe:8f:dd:08:0e:bd:e1:f9:b7:c5:b9:49:2e:04:
a3:98:22:31:eb:57:6b:8b:88:c4:bf:e5:b3:22:94:c7:4b:42:
09:78:f9:59:6e:bb:44:b1:00:03:d2:4b:12:3d:54:57:17:5d:
46:ce:3b:ec:c6:cf:66:08:68:0f:ad:e0:a6:22:83:e6:ac:eb:
2b:fa:c7:cd:5b:98:e8:cc:77:c5:a0:0e:61:3c:70:2b:d6:db:
ff:34:cf:5e:81:d3:c9:c5:8d:b1:09:d3:ae:35:f8:df:cb:9b:
75:1b:94:6a:0e:89:86:a4:83:16:31:63:22:d6:d2:84:47:7a:
19:26:d4:bf:92:ca:1e:f0:d9:1f:a4:5f:a9:2d:3d:fb:25:74:
5e:27:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:59 2026 by rpki-client