Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/fOOP_exg4KET6deawpN7oz_WdzM.roa
File: fOOP_exg4KET6deawpN7oz_WdzM.roa (raw, json)
Hash identifier: z2o86ioauTHfgn4E3LgCB4xZMv1SBlDr/6hS0phGqqc=
Subject key identifier: 7C:E3:8F:FD:EC:60:E0:A1:13:E9:D7:9A:C2:93:7B:A3:3F:D6:77:33
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686E700F4705BE2A58AC067226009C
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/fOOP_exg4KET6deawpN7oz_WdzM.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 217.9.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6e:70:0f:47:05:be:2a:58:ac:06:72:26:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce38ffdec60e0a113e9d79ac2937ba33fd67733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:bb:0c:ac:42:d4:4a:c5:11:03:25:53:bd:
ec:e0:bd:42:01:45:2e:9a:b6:04:98:23:c7:2a:f5:
2d:98:b4:5c:e6:29:92:b9:08:27:1a:b0:b9:c9:e4:
eb:b1:01:d7:1e:3b:0a:28:3d:cf:8a:ff:38:47:c7:
f7:a4:61:56:a7:7c:05:ad:73:89:f3:de:8f:5c:96:
bb:e2:af:fe:97:5b:08:9b:0a:cc:ac:09:76:e8:e3:
65:a4:e5:75:b1:8a:2c:22:2b:3f:e6:ff:de:8d:39:
f2:29:e9:20:56:ec:13:7c:c2:32:65:f5:fa:ac:f3:
bd:5c:15:fb:bd:06:c0:b5:75:26:d8:f6:46:47:20:
1f:23:70:ee:66:4c:8f:20:19:82:0d:e3:fa:cb:89:
3b:0a:fb:92:be:50:9e:9e:38:53:12:90:90:6e:19:
e0:89:da:b8:b4:a9:3a:ef:9b:5a:42:94:be:b8:62:
e0:cd:f2:ea:50:1e:30:f7:bc:fe:71:e6:2c:cf:12:
33:a9:06:b1:05:f4:3d:97:10:19:dc:74:86:67:e5:
25:a4:93:25:22:11:2c:8e:64:84:81:4b:ad:f1:61:
8c:9d:9f:cb:42:7a:bb:00:3e:ca:3c:27:47:96:a8:
80:21:6b:f3:23:68:28:6a:cf:e2:1f:f9:7f:9e:9f:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:8F:FD:EC:60:E0:A1:13:E9:D7:9A:C2:93:7B:A3:3F:D6:77:33
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/fOOP_exg4KET6deawpN7oz_WdzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:07:e6:52:64:80:04:d2:36:82:19:29:dd:fa:89:a6:f3:24:
4d:6f:d6:d9:09:5c:0f:57:14:1f:ff:02:8f:e7:e8:cc:a2:f9:
7e:7d:66:a2:0c:d0:46:ed:8e:f7:2c:96:ca:bd:1a:23:29:92:
82:c3:a7:bf:37:2d:6b:21:38:7d:73:a5:2a:82:7f:59:64:a0:
7c:6f:b0:81:d9:77:2b:e1:27:cb:b0:06:b2:c0:f3:e6:17:26:
cf:b7:7c:48:b2:f0:ad:78:83:f5:d9:65:57:d8:61:8e:84:35:
bb:80:a9:58:7f:5c:c3:58:3c:33:4b:29:69:2e:1b:2f:75:6e:
35:af:69:18:63:79:c8:3b:84:e7:2a:6b:fa:5a:b7:91:b6:c4:
38:b1:a7:4e:3a:aa:13:22:56:3a:1b:e4:97:66:8d:62:25:64:
f3:fb:69:c7:95:4c:22:13:88:06:da:86:ca:b0:6b:22:77:6e:
11:e9:b2:9a:87:91:0f:30:09:ed:84:50:d2:38:3c:17:59:b4:
98:35:be:35:db:f5:46:58:d0:cf:94:ba:78:ae:9a:c5:ed:2f:
28:03:00:17:55:04:90:8e:3d:94:7c:bc:7c:b2:ab:ac:0b:99:
71:fc:6f:74:2f:30:8c:c9:7f:1b:27:b3:8a:8a:42:2b:bf:fe:
a2:b6:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:57 2026 by rpki-client