Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa
File: pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa (raw, json)
Hash identifier: 6B92+t7EjqClqc9AMNDLM32J3Uyl6JKD1nH0ZOx3K2s=
Subject key identifier: A5:9E:C1:DC:08:1C:B7:38:1F:4A:CE:D3:FB:0E:80:AC:B2:41:E9:6D
Certificate issuer: /CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Certificate serial: 019F23686B95420AC2525818FE1DD9285F06
Authority key identifier: 94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196975
IP address blocks: 217.9.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6b:95:42:0a:c2:52:58:18:fe:1d:d9:28:5f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a74ddb75c69a845d7cc569aeda2667f141b46
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59ec1dc081cb7381f4aced3fb0e80acb241e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:71:89:45:c4:fa:7c:38:62:cd:ac:f7:a0:
ed:32:fa:08:6c:87:de:4a:9e:ce:e4:03:8e:74:eb:
cb:0d:b8:4a:72:ef:43:35:55:9a:ac:90:05:8b:67:
73:70:59:1e:3b:2d:b9:4d:dd:d5:01:f3:5a:1e:6b:
69:8a:20:61:da:2d:64:61:a2:9b:aa:20:a7:1c:40:
3b:e8:10:ae:65:a6:dd:91:5f:81:e9:9e:15:04:00:
4f:de:83:1d:e7:ca:29:80:13:eb:b6:77:d7:2c:a2:
a3:99:7a:6b:04:86:0a:4e:09:da:53:0b:b4:d7:3a:
30:51:f1:f5:32:62:4e:5e:31:63:45:7e:6f:4e:dc:
7c:c7:26:af:34:3e:f0:d0:9a:54:f5:52:34:cc:81:
8e:9a:9c:82:5e:58:b9:55:78:93:ae:5a:b4:14:40:
66:2b:3e:f9:2d:ef:65:e4:50:81:09:da:37:2f:0b:
31:d4:af:34:c2:09:08:10:d5:58:bc:f5:7e:4e:2f:
31:dd:5d:d0:7c:14:26:35:48:0d:19:7f:07:f3:4e:
a8:53:ce:cf:ac:2a:22:4e:6a:cf:1c:37:05:15:15:
11:e2:1b:60:1c:f8:38:f9:b8:e4:65:c3:c2:12:e9:
0e:f9:c6:5d:9f:a7:ac:c4:a4:1b:c8:be:91:33:f5:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:C1:DC:08:1C:B7:38:1F:4A:CE:D3:FB:0E:80:AC:B2:41:E9:6D
X509v3 Authority Key Identifier:
keyid:94:0A:74:DD:B7:5C:69:A8:45:D7:CC:56:9A:ED:A2:66:7F:14:1B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAp03bdcaahF18xWmu2iZn8UG0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/pZ7B3AgctzgfSs7T-w6ArLJB6W0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/lAp03bdcaahF18xWmu2iZn8UG0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f1:ba:1b:cd:ac:e6:a3:91:67:58:e7:74:3a:87:3e:01:f9:
7a:bf:b1:a4:11:58:09:98:a6:6e:78:f1:2d:b1:0e:16:bf:9c:
0e:08:a6:37:18:f5:22:4f:8e:b7:c0:f5:94:b1:73:bf:48:3a:
3c:46:e9:c0:05:0d:36:2f:15:6e:f2:b2:0d:56:e0:e4:74:9b:
38:d0:61:7f:72:6a:a5:9f:ba:8c:c7:0b:f8:70:86:28:03:e9:
53:ea:f0:2e:49:b5:28:46:0c:39:ac:de:3e:09:30:e2:e5:8e:
f4:00:8d:9d:6b:b2:ca:4c:ec:23:11:7e:40:c9:2c:3b:83:7b:
38:e8:ea:d6:59:e6:9d:84:e3:c6:ab:4f:3f:3f:b2:7a:ae:4d:
b2:44:83:f0:cd:d8:93:3b:a1:37:7f:d2:b8:d6:5e:f2:7f:82:
4b:29:54:01:f7:d1:6d:a0:90:3a:0b:70:21:f6:3e:da:e3:7d:
c5:39:d3:c4:bd:0a:ff:7e:d7:5b:0a:5f:66:5b:c1:bd:ef:75:
6e:d3:55:ad:cd:8d:c3:1f:7c:7f:47:5d:03:59:35:6e:d1:ed:
e0:5a:07:2d:2d:d0:ba:e0:0b:6d:c5:ec:16:9c:57:6f:f1:d1:
05:87:0b:10:3c:d6:13:d9:37:82:90:9c:df:3a:be:09:3b:5f:
b9:5e:46:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:11 2026 by rpki-client