Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1lCX43rfgrd3UwSra2DvMolB2ko.roa
File: 1lCX43rfgrd3UwSra2DvMolB2ko.roa (raw, json)
Hash identifier: HlEmjVnlqK6TJjU1qHHjaKYAoLJQkw56SG1ALNLBa+I=
Subject key identifier: D6:50:97:E3:7A:DF:82:B7:77:53:04:AB:6B:60:EF:32:89:41:DA:4A
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019F7226D264BD7491AA13B0D6A72066C877
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1lCX43rfgrd3UwSra2DvMolB2ko.roa
Signing time: Fri 17 Jul 2026 22:16:14 +0000
ROA not before: Fri 17 Jul 2026 22:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13347
IP address blocks: 217.78.40.0/21 maxlen: 24
217.118.208.0/21 maxlen: 24
217.118.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:26:d2:64:bd:74:91:aa:13:b0:d6:a7:20:66:c8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jul 17 22:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d65097e37adf82b7775304ab6b60ef328941da4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:ec:ab:cc:78:6d:45:2b:fb:61:f9:63:62:
df:32:2e:97:dc:36:86:b8:5a:f4:dd:81:1d:3f:79:
88:88:67:11:16:6e:4b:96:ef:f6:f8:ce:97:7f:03:
18:b5:bf:a0:1b:67:89:e2:5a:98:27:e8:b2:dc:64:
76:0f:81:10:ea:c8:4c:d2:7d:da:60:c5:c2:20:ee:
2e:a7:fb:a5:c7:d8:cc:d8:74:30:5a:56:19:de:5c:
a4:61:95:a8:34:db:bf:89:b4:8c:e9:23:94:bc:57:
be:28:fc:ca:10:ab:6d:23:16:42:ab:a2:7f:d9:cd:
9d:8a:7f:2e:e5:07:c1:57:91:de:30:75:44:d6:53:
3a:27:66:3d:70:10:03:13:7b:97:fe:00:b1:cd:8a:
bb:59:0e:6b:ed:47:b9:df:a2:db:02:7d:ad:97:ef:
86:2e:9f:cc:f4:b8:8f:ee:22:ef:56:89:10:16:74:
19:88:c8:1c:8c:43:ed:85:32:8d:54:f4:e8:29:2c:
55:88:16:73:47:20:d5:70:50:39:fd:ff:a4:c7:80:
e6:2f:52:d6:33:73:20:6b:e2:38:ac:b2:ba:b3:82:
0e:a4:b1:41:3b:70:ea:4b:23:f6:51:de:6d:46:3b:
ee:95:b9:e5:b7:37:7a:53:f5:48:22:80:e4:fc:10:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:50:97:E3:7A:DF:82:B7:77:53:04:AB:6B:60:EF:32:89:41:DA:4A
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1lCX43rfgrd3UwSra2DvMolB2ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.40.0/21
217.118.208.0/20
Signature Algorithm: sha256WithRSAEncryption
37:fa:10:a7:06:3f:32:6b:27:79:03:77:1a:a5:95:0a:b1:f7:
74:7d:4b:e3:f5:71:c6:26:f1:3f:cd:bf:13:d3:f3:c5:55:1f:
0d:78:36:15:19:25:dc:d4:e2:04:c4:3c:a5:d7:5e:68:b6:ba:
f6:2b:2a:5e:57:88:ac:9e:78:ad:5a:9f:ec:c1:5b:ba:45:2e:
62:a5:26:0a:01:27:2e:63:cf:25:76:f4:a6:ba:61:d4:b2:ce:
c7:45:ad:72:64:13:d8:2a:73:f1:ac:51:68:c7:92:a2:c4:3a:
ec:f4:02:3e:93:7c:22:fb:a8:fa:73:b7:aa:e6:1d:5b:e0:e6:
14:9b:2e:90:2f:14:07:75:a0:ec:75:fd:7d:70:43:2e:82:42:
5d:e3:5d:a7:0c:95:c9:69:1f:ba:57:c2:28:12:09:16:ad:80:
00:e0:a1:a3:a3:68:c1:39:62:6b:32:f3:be:f0:b1:4b:94:d2:
66:f4:2a:a2:ae:12:ac:e4:dc:9b:e4:f9:23:c0:ca:a7:a3:26:
83:3d:16:2a:40:1f:88:0e:8a:37:45:96:70:60:b2:c1:1b:c6:
22:92:bc:14:b9:e1:f2:32:01:f9:ed:3d:03:11:80:2f:bf:2b:
54:b6:44:ca:35:35:e1:38:06:19:75:06:91:39:5d:99:2d:98:
9a:f5:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:01 2026 by rpki-client