Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/i875Xvlt3ZhUlt5UBw2LO7y2w6s.roa
File: i875Xvlt3ZhUlt5UBw2LO7y2w6s.roa (raw, json)
Hash identifier: T0OHp43507rDz1hbnFx5YUou8ZknLx9puw3KtmObuGc=
Subject key identifier: 8B:CE:F9:5E:F9:6D:DD:98:54:96:DE:54:07:0D:8B:3B:BC:B6:C3:AB
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019F148D0DCE23E3C2D0C2658AB6EA9A5053
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/i875Xvlt3ZhUlt5UBw2LO7y2w6s.roa
Signing time: Mon 29 Jun 2026 18:03:36 +0000
ROA not before: Mon 29 Jun 2026 18:03:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16190
IP address blocks: 217.113.0.0/21 maxlen: 24
217.113.0.0/22 maxlen: 22
217.113.0.0/23 maxlen: 23
217.113.2.0/23 maxlen: 23
217.113.4.0/22 maxlen: 22
217.113.4.0/23 maxlen: 23
217.113.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:8d:0d:ce:23:e3:c2:d0:c2:65:8a:b6:ea:9a:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jun 29 18:03:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bcef95ef96ddd985496de54070d8b3bbcb6c3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:6f:b3:fc:4d:cf:ee:fb:db:c0:cf:ca:24:
75:75:db:58:42:59:ae:10:fe:83:94:74:27:19:3e:
6e:7d:76:56:a1:ec:ae:ea:6a:cf:0f:82:f4:09:8b:
e6:ce:e8:4c:b6:39:1f:24:95:b8:e0:28:4b:10:2e:
61:a2:2a:c9:ab:6c:36:a2:a3:ae:e7:6c:33:3d:3b:
0c:de:30:0d:f5:9c:25:2b:9f:95:cf:57:de:74:49:
05:64:17:eb:73:59:31:bb:5d:16:05:6a:2a:70:68:
25:9f:79:0d:59:e2:9e:d6:cb:28:38:f9:c5:bf:bd:
7b:9a:ae:b5:00:bb:19:b2:b1:cd:c8:2a:7b:0c:38:
3b:98:4f:ed:16:6e:51:f3:dd:2a:11:3e:45:3d:e0:
07:7c:66:ea:b5:6c:0f:73:2f:18:38:42:3c:66:20:
c1:d6:35:4a:bc:27:f5:b1:b1:63:47:c9:42:7b:38:
40:e1:f9:86:e9:90:d8:f2:43:ba:b1:a9:a1:aa:08:
5c:fc:9f:69:ad:21:0e:34:5a:06:03:58:30:68:9b:
72:05:f9:b1:9d:47:3e:1c:5d:0b:4c:54:c9:35:71:
cf:f8:24:a2:de:52:3f:ec:8f:03:55:2d:69:60:fa:
97:81:5a:9a:59:c5:47:51:27:e4:96:d3:9a:ee:92:
08:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CE:F9:5E:F9:6D:DD:98:54:96:DE:54:07:0D:8B:3B:BC:B6:C3:AB
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/i875Xvlt3ZhUlt5UBw2LO7y2w6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:74:53:54:6c:95:6a:69:f7:cb:06:da:17:93:63:d9:af:01:
2d:ce:c4:0e:09:ee:29:23:26:7a:58:83:81:89:4a:e1:b6:68:
55:f9:fa:f3:54:1d:f1:d2:a6:e0:df:59:d3:a7:23:de:f1:cf:
c6:88:f8:eb:0b:a8:d1:66:76:5d:7d:5f:c1:45:4a:45:30:6f:
d1:98:ef:0e:74:af:d4:30:d0:08:40:21:a3:67:9f:24:51:af:
5e:e7:83:6e:7b:29:82:9d:8c:20:06:ca:53:68:6e:00:f7:91:
ba:9b:b1:2d:d0:38:0f:7a:dc:91:37:b1:13:96:f9:fc:58:3d:
3d:d2:f3:cc:0c:c5:05:d1:fa:6d:79:ac:23:c6:c4:a1:7e:db:
30:39:19:7f:31:b4:41:3c:70:70:05:ff:32:09:4a:62:04:46:
ad:ed:1a:d3:5d:fa:5f:d8:69:e2:43:3c:f0:6e:f7:5f:7a:fa:
31:cd:11:97:43:bf:b0:9d:61:70:a0:b1:dc:3f:f8:48:31:70:
4e:25:57:97:e9:dd:6f:ea:99:e2:5e:ae:08:5b:2a:9d:36:fa:
82:e9:73:34:20:07:83:75:d1:6e:ad:6f:7b:53:b4:7a:d6:ac:
2b:f6:cb:f3:02:b2:9e:d4:07:3f:98:f3:86:e6:df:76:4c:aa:
c3:93:ca:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 03:37:11 2026 by rpki-client