Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa
File: f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa (raw, json)
Hash identifier: ZOBtlDa4skX18xmRlY6uCZ9cujDrQ2YISweWZDnuRwY=
Subject key identifier: 7F:52:07:05:98:71:67:86:5D:0D:54:52:FC:D4:68:74:B4:3D:AE:BB
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686B1C5E9D6BB94C1E1DDAFE51C8DC
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42105
IP address blocks: 217.9.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6b:1c:5e:9d:6b:b9:4c:1e:1d:da:fe:51:c8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f520705987167865d0d5452fcd46874b43daebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:f7:4c:ef:be:62:b0:0c:c0:76:aa:94:49:
ae:88:f0:c8:aa:82:b0:fc:a5:eb:e9:2e:be:d3:06:
ee:6b:fa:01:5a:35:1c:fd:5c:3a:1b:94:8e:98:73:
5b:64:de:86:a5:0f:47:8a:51:60:19:33:8f:28:81:
50:22:32:b2:ad:6a:11:c5:12:46:ca:91:65:7c:ea:
37:78:d1:7f:77:15:8a:b6:60:bc:b0:dc:a3:0e:12:
0c:42:13:3c:21:aa:57:18:76:08:24:74:88:60:d3:
f6:3e:bf:67:4f:74:2f:62:66:95:99:f7:6e:5b:ec:
73:da:6f:0d:e2:39:df:77:71:cf:d2:01:d4:23:1a:
7e:b6:0a:7c:3c:f2:24:82:0a:fd:cd:60:4a:14:09:
ae:5e:e2:ef:67:dc:24:76:23:b7:c1:9e:92:c6:d5:
79:2b:cd:ba:a2:63:10:f3:97:21:68:4f:0d:31:61:
65:96:cd:0c:70:d7:3f:7a:18:88:33:d9:1d:07:25:
81:d2:91:8e:0f:c5:9d:2e:72:92:3c:43:db:82:8f:
45:68:74:0b:1e:02:a6:51:31:c2:51:87:b1:fe:8a:
fe:00:86:f1:bc:56:43:86:70:7b:47:38:28:bc:c5:
32:8f:38:ae:a2:48:cd:92:a1:14:5c:e9:c3:06:a9:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:07:05:98:71:67:86:5D:0D:54:52:FC:D4:68:74:B4:3D:AE:BB
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/f1IHBZhxZ4ZdDVRS_NRodLQ9rrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.8.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9d:36:35:e1:fc:32:7d:88:50:8b:97:3a:8c:b2:e2:1f:73:
82:d6:74:31:81:f6:82:f2:2d:2e:48:1e:3b:d6:dd:79:3d:7d:
72:83:56:a6:b1:8d:85:c5:84:12:32:65:73:b7:c3:84:68:ec:
42:02:9d:fd:80:1c:ad:2c:de:a0:15:86:4e:31:40:0e:9d:cb:
0f:75:52:97:c2:89:1d:53:36:d2:7e:4f:50:fe:3a:13:3d:ba:
2a:dc:a6:c8:8c:ee:bd:a3:71:ac:d4:6f:4d:89:df:ed:78:de:
55:8f:74:91:48:af:12:ba:cc:f9:2a:2b:6e:28:34:fe:de:23:
2a:0e:0e:99:6f:e5:89:9c:8a:9f:fb:3e:82:63:a2:94:89:70:
5b:1f:db:85:c2:d3:dc:e4:f7:81:b8:4d:44:b9:75:3e:c6:bf:
49:c9:59:bc:7e:bc:82:82:9d:4c:63:3f:9e:32:5b:e1:e5:02:
9b:74:89:ca:cb:95:24:73:12:8c:f1:bc:2e:f2:0f:44:b8:76:
66:5d:c0:c4:7c:2b:aa:a3:19:12:0f:45:31:57:22:38:c0:ba:
ff:b0:47:e8:81:97:f8:52:83:5a:ec:21:91:b8:2f:75:ff:73:
d0:da:06:29:6e:bd:7f:84:7a:96:d1:4b:5f:19:fe:c7:1c:f0:
ad:84:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:36 2026 by rpki-client