Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drfFUHdUX3XDzh7vadn5GC0tRg4.roa
File: drfFUHdUX3XDzh7vadn5GC0tRg4.roa (raw, json)
Hash identifier: xGeVx1MuT4t/d+ZJiF6ABxSqLEFGR1O1DQg4AKfNXW4=
Subject key identifier: 76:B7:C5:50:77:54:5F:75:C3:CE:1E:EF:69:D9:F9:18:2D:2D:46:0E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019FE9E7D0B38C90ADCFB0E7C2BFE62B9A92
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drfFUHdUX3XDzh7vadn5GC0tRg4.roa
Signing time: Mon 10 Aug 2026 04:21:51 +0000
ROA not before: Mon 10 Aug 2026 04:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 172.110.219.0/24 maxlen: 24
172.110.222.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
194.76.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e9:e7:d0:b3:8c:90:ad:cf:b0:e7:c2:bf:e6:2b:9a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 10 04:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76b7c55077545f75c3ce1eef69d9f9182d2d460e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:7c:f0:47:95:92:24:90:d6:05:a9:0b:cb:
6f:b9:c1:5a:9a:89:4f:da:4a:9a:91:10:01:b9:0d:
05:1c:70:4d:e7:48:2c:15:2c:99:8a:da:88:14:b3:
63:e6:72:d6:6c:52:c3:ac:54:cf:f3:43:09:0d:2d:
18:5d:e4:ae:4f:23:38:6e:65:b9:0e:a3:72:83:e1:
c9:3e:48:6c:03:a9:64:00:41:92:8e:62:59:f4:d8:
84:59:3c:8c:d2:65:b5:4c:5a:18:1d:14:21:7f:5b:
d8:d2:71:22:94:b9:43:e9:03:b7:a4:72:58:97:e0:
1c:3f:ab:20:78:4f:8e:1b:40:97:23:87:8f:59:ad:
bd:01:16:33:1f:01:99:25:8d:1e:cd:ba:78:b0:c6:
89:8c:2b:4a:ab:4f:88:7c:22:4b:7e:fd:3a:07:76:
82:1d:44:58:af:3c:3f:c7:f5:4a:0f:ad:e1:57:b7:
bd:9f:8e:11:d5:8a:7a:79:b4:7c:8b:e1:01:22:aa:
c2:11:82:b1:ed:95:ee:33:db:e6:26:19:db:99:10:
51:1b:08:a4:65:6f:f5:5a:77:23:f8:2e:a2:cf:b5:
7e:46:ca:42:49:86:d0:27:93:0b:94:73:37:40:8c:
c9:e8:97:50:95:5a:3c:67:4a:1d:a0:76:8f:d3:bf:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:C5:50:77:54:5F:75:C3:CE:1E:EF:69:D9:F9:18:2D:2D:46:0E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/drfFUHdUX3XDzh7vadn5GC0tRg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.110.219.0/24
172.110.222.0/24
185.233.18.0/24
194.76.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2f:50:e4:61:91:6b:f3:b4:8c:a5:0a:71:9f:dd:f0:47:16:
6b:d2:2d:4c:71:0f:03:22:c7:32:da:fb:03:b0:49:28:dc:7c:
85:bd:90:5d:18:ec:d6:08:7b:7f:0d:85:f7:a1:91:aa:27:a6:
68:9e:01:4a:28:2a:44:06:0f:0d:0a:8e:84:16:49:b1:73:e3:
79:57:7b:95:38:b5:a6:bb:15:df:6f:8c:57:9a:71:81:5e:49:
5b:af:4d:d3:f6:f2:7a:86:75:bb:67:22:d6:86:89:2f:5c:a2:
ed:0a:b5:22:7a:30:c4:b4:ae:e7:aa:04:e1:c4:af:0f:31:12:
1c:32:e8:41:e1:ab:41:8f:77:c0:c8:68:46:3e:15:1b:3e:05:
5b:12:3e:09:0a:7b:f5:5d:a2:4b:6e:65:cb:e7:96:76:fc:00:
86:06:e3:03:9d:c5:7d:03:94:b8:ce:8f:e2:d8:7b:69:a3:0b:
da:d1:9d:1b:d2:1f:68:d6:90:57:c7:81:c3:23:4a:64:99:b8:
45:d9:f1:6d:af:a1:e9:14:30:71:d5:a8:92:73:de:70:81:64:
61:ce:b1:17:f9:18:d7:54:17:c5:47:e7:ca:4c:c0:8c:0d:23:
ab:e0:d3:85:ef:6f:f4:90:a5:bb:d6:a6:4e:2d:bd:2a:12:95:
52:c4:d8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:16 2026 by rpki-client