Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa
File: d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa (raw, json)
Hash identifier: j4UwBax/dxRdEVE/m/yu7Cwiok31VxQpLQtQWVklMoM=
Subject key identifier: 77:DC:1B:D5:E1:7A:2A:0A:F9:7A:06:61:D0:69:98:CC:CD:E6:5B:25
Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53
Certificate serial: 019FD18EF83CCB8CEC503C17A4E4839F9218
Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa
Signing time: Wed 05 Aug 2026 10:53:55 +0000
ROA not before: Wed 05 Aug 2026 10:53:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219090
IP address blocks: 45.12.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:8e:f8:3c:cb:8c:ec:50:3c:17:a4:e4:83:9f:92:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53
Validity
Not Before: Aug 5 10:53:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77dc1bd5e17a2a0af97a0661d06998cccde65b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:c4:b2:cb:8d:86:b3:79:80:89:3a:06:99:
a4:f4:5d:4c:3a:1f:b9:b1:a0:c2:d2:8d:03:56:ea:
e9:20:a8:3b:1d:58:c9:18:96:89:79:6f:8e:ee:7d:
38:b6:99:2d:83:b1:89:54:5a:1e:4e:33:bd:25:fe:
92:60:61:05:dc:45:fe:c0:04:19:3f:1a:20:d3:dc:
82:53:ce:9a:1e:ad:47:21:4b:37:1e:be:0b:5e:0b:
65:bf:2c:e0:d8:b0:35:94:9f:a6:2a:da:27:14:ff:
c6:68:4d:15:16:8e:67:93:d1:d0:63:37:d4:92:35:
f1:52:41:dd:95:7f:86:09:cb:02:15:5c:9b:d2:9c:
aa:63:ba:de:b7:f7:5e:25:51:33:85:d6:78:93:5b:
35:0e:50:6e:ad:ec:c7:16:f5:78:95:bb:01:c3:f8:
25:80:92:3e:c9:6b:99:cb:6f:86:6b:aa:7b:40:33:
7a:0b:ea:8a:44:08:a4:24:d1:66:86:1b:47:24:5b:
ee:a9:95:8c:bd:a2:5f:d0:31:b1:81:35:c8:30:62:
6f:57:fd:9e:b5:a2:b0:5e:9f:37:14:2e:45:f1:16:
ee:33:74:db:cb:12:40:4f:83:c9:d8:5d:fe:5e:e3:
75:d4:ea:f6:91:a6:46:35:3b:13:f1:22:75:94:44:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:1B:D5:E1:7A:2A:0A:F9:7A:06:61:D0:69:98:CC:CD:E6:5B:25
X509v3 Authority Key Identifier:
keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/d9wb1eF6Kgr5egZh0GmYzM3mWyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.171.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e4:4e:c1:4b:c7:2e:83:b0:b4:8d:46:57:c1:19:41:3c:0b:
bd:7e:84:71:52:66:c5:ab:b8:92:7b:1d:26:e9:6b:66:30:a0:
df:d3:00:7e:b8:81:3d:bc:12:3f:4d:53:eb:96:16:1c:ca:a5:
65:e6:f5:d9:75:1f:32:f9:c9:a7:33:45:73:dd:64:c9:9a:6f:
4e:03:88:30:0a:4f:ce:1f:60:36:05:40:be:ea:f4:60:0b:32:
01:22:1a:3a:f6:4a:da:b8:e5:5a:37:ba:d6:17:cf:15:fe:ae:
bf:88:f1:8f:96:03:4a:90:5c:23:ef:3d:da:be:b3:18:7d:12:
c0:f8:0a:a4:ef:67:aa:c6:64:b2:da:b5:60:d8:a1:b5:85:4b:
e2:03:63:a5:6c:1a:7f:4d:07:2d:a7:7b:97:27:7a:6c:21:1e:
f2:3f:bc:08:05:57:eb:42:b7:d3:18:aa:80:a3:ed:c4:62:3c:
25:ff:09:0a:97:1a:9d:f6:73:00:ab:c3:45:23:6e:31:86:99:
88:98:ee:e6:75:db:36:ac:f8:7a:65:fe:aa:b3:e7:a3:cc:ca:
4b:4f:35:73:39:a5:1b:90:69:17:2c:d3:6b:c0:a0:b7:fe:34:
d9:88:ac:14:54:2f:ab:9c:0e:30:80:1d:51:61:98:82:ba:73:
95:fc:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:47:32 2026 by rpki-client