Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/K3HHt021rxfspiJXL_jbb9NfheQ.roa
File: K3HHt021rxfspiJXL_jbb9NfheQ.roa (raw, json)
Hash identifier: J0SaNkkovQ/E9TIPjipdYFj6AWH79jJ7DyPTP9X1t68=
Subject key identifier: 2B:71:C7:B7:4D:B5:AF:17:EC:A6:22:57:2F:F8:DB:6F:D3:5F:85:E4
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686AB41C550D4CD16BC69A57463305
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/K3HHt021rxfspiJXL_jbb9NfheQ.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41568
IP address blocks: 217.9.9.0/24 maxlen: 24
217.9.11.0/24 maxlen: 24
2a06:64c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6a:b4:1c:55:0d:4c:d1:6b:c6:9a:57:46:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b71c7b74db5af17eca622572ff8db6fd35f85e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:f6:0a:7e:04:de:3b:87:a3:d0:e9:50:7a:
d6:e0:64:8a:62:9f:32:0f:20:a9:b2:c5:5a:44:ff:
51:0d:2c:16:50:99:5a:3d:a2:4e:4a:98:8c:a9:33:
c5:c9:54:53:d1:f0:6e:df:d2:8e:06:aa:8d:9c:57:
12:25:69:38:05:5f:ed:85:88:ea:2d:6a:b9:83:c6:
f9:95:6a:09:8e:fc:6c:83:3a:fd:de:fc:38:e9:7d:
ed:5c:9f:2c:9f:1c:4a:cc:42:93:d3:76:12:b0:98:
d0:e7:cf:85:46:7b:ff:90:36:14:62:34:ad:b1:82:
05:a5:1b:4d:62:1b:42:0a:b2:49:b7:38:4a:70:8e:
46:ed:5b:7c:d3:f0:cb:12:d8:4e:8f:58:55:74:3e:
01:95:82:de:8e:56:88:d3:bc:c1:a9:04:f8:fc:67:
8b:eb:e1:30:79:ed:cc:95:c9:bd:05:7f:68:4a:87:
a2:9e:21:79:10:83:c1:12:b0:00:bf:29:51:fd:1a:
92:10:98:07:3e:1b:35:92:2a:e8:a4:e7:d8:d0:5a:
13:f3:0a:68:1c:6e:1e:b9:dd:3a:00:3d:f3:9e:47:
38:90:f1:63:6b:71:73:eb:81:3d:89:5c:76:89:27:
2a:72:2d:56:76:03:a8:92:83:25:1e:4b:0d:bc:77:
22:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:C7:B7:4D:B5:AF:17:EC:A6:22:57:2F:F8:DB:6F:D3:5F:85:E4
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/K3HHt021rxfspiJXL_jbb9NfheQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.9.0/24
217.9.11.0/24
IPv6:
2a06:64c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
10:42:d7:53:ce:bd:74:15:7d:0c:f9:95:28:da:b2:8c:08:61:
d3:98:cb:4b:f6:cf:66:20:a6:5d:84:e1:b1:ff:a0:a2:d2:63:
e9:c6:13:e5:b7:88:23:fd:27:96:3e:d7:67:8f:92:08:9b:2d:
d3:fb:3a:d2:bf:27:80:42:20:56:9a:b8:5d:b4:cb:19:db:66:
42:d3:ef:f2:03:12:6b:7a:d4:a2:be:c5:d7:21:03:09:5d:ad:
fc:69:8d:d0:a9:ae:cf:82:93:1c:ff:99:ca:df:8e:93:bc:06:
2f:c0:74:16:ef:d7:dd:38:58:e2:6a:8e:10:d4:5d:cd:1b:78:
d2:a3:4a:94:25:82:4e:a7:a8:35:50:8a:4b:ce:0f:4b:44:1c:
af:04:e8:fe:28:37:84:88:a8:89:9a:85:62:3b:af:f5:3f:1a:
2f:94:c7:9e:97:af:08:29:c8:16:f8:3f:2c:a4:05:f1:05:9d:
40:4d:3f:19:59:a1:66:3b:89:06:7e:5f:d3:38:cd:3a:2a:42:
eb:fe:94:76:ce:44:2e:20:89:b2:44:85:31:5e:2a:5e:ce:e9:
b8:7e:17:bb:cc:75:29:c5:37:66:d2:1b:e7:e1:9d:cf:d2:17:
76:0c:dc:32:b4:40:a1:b6:3a:f7:95:de:8e:72:8b:93:74:a7:
ab:ae:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:24 2026 by rpki-client