Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/F2LLUB3Jlg4h8z4TpAEB3sGmr2c.roa
File: F2LLUB3Jlg4h8z4TpAEB3sGmr2c.roa (raw, json)
Hash identifier: zwZBc99dP+dsMurUVurPLLjk18zjrZkHQ/avdGk9Z4k=
Subject key identifier: 17:62:CB:50:1D:C9:96:0E:21:F3:3E:13:A4:01:01:DE:C1:A6:AF:67
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019F47912C42B899FA538EA08B0B727B97AA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/F2LLUB3Jlg4h8z4TpAEB3sGmr2c.roa
Signing time: Thu 09 Jul 2026 15:48:44 +0000
ROA not before: Thu 09 Jul 2026 15:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47721
IP address blocks: 78.135.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:91:2c:42:b8:99:fa:53:8e:a0:8b:0b:72:7b:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 9 15:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1762cb501dc9960e21f33e13a40101dec1a6af67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:29:73:1b:01:f4:bc:dc:83:3b:b1:10:e1:
76:b5:dd:ee:39:c0:d3:7c:2c:37:f2:30:fd:94:0f:
12:12:71:78:3c:8e:51:45:98:c2:e8:0a:30:3e:d8:
b4:28:40:ae:12:76:dc:60:fd:0c:38:c6:3e:d2:68:
16:f1:ba:ee:23:ef:b5:88:98:29:86:ab:cc:0e:21:
78:a3:54:b7:75:7d:f1:13:93:ad:9e:22:e2:12:4f:
4f:9a:45:7e:84:c1:11:04:6b:8b:5e:37:65:9f:42:
b2:58:7c:d5:e6:bc:90:44:34:8f:d7:b9:0c:79:91:
71:5f:16:54:82:af:69:98:5a:03:ba:e6:e4:d7:54:
55:74:78:50:07:6e:6b:b3:db:9f:d6:91:e7:06:0e:
ea:da:23:98:59:ad:6c:f4:da:90:30:50:65:30:82:
7d:50:25:52:5f:a5:75:4d:82:31:7b:85:7c:06:62:
88:c7:47:ad:56:75:b4:60:d9:e2:2e:a8:b5:0b:fb:
aa:d8:bb:da:86:ff:33:8b:f1:2b:57:18:96:9a:31:
65:77:d7:a0:6a:d8:ab:ab:24:29:c8:2f:fd:cc:8c:
7d:e8:d2:07:32:f4:2e:66:91:19:42:bb:3f:d7:4f:
b9:2e:6b:8e:53:b0:2e:5f:b9:7f:96:c9:21:90:d8:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:CB:50:1D:C9:96:0E:21:F3:3E:13:A4:01:01:DE:C1:A6:AF:67
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/F2LLUB3Jlg4h8z4TpAEB3sGmr2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ec:50:96:6c:03:38:bf:89:63:9d:23:74:40:02:d8:a2:c0:
72:da:b4:9d:d3:33:ca:6e:8d:79:0b:b5:31:20:76:3c:d1:55:
4a:5a:58:cd:f1:17:ee:34:a6:44:56:ee:0d:a5:1a:64:6d:44:
93:84:66:41:64:c7:8f:f3:94:d0:1a:f7:39:1d:36:c6:c7:a2:
13:33:9b:78:d3:90:55:e0:ae:95:be:22:9f:4a:37:ff:06:d5:
e4:27:94:85:15:d9:ff:a0:67:02:c1:71:3a:fc:60:34:7a:31:
5d:bd:97:ed:d8:e1:a5:c6:ae:6a:a4:c1:3b:48:1e:6c:cb:56:
20:31:d4:ad:d0:c7:00:8f:83:d7:88:98:28:e5:db:7c:43:22:
14:4f:a9:b1:37:b9:af:09:58:64:5f:83:6e:27:90:72:24:91:
50:43:82:3c:86:43:51:8e:0f:ae:87:6f:a4:b1:77:00:5b:d4:
d6:4a:d8:a0:9a:4f:e5:98:f9:af:78:b3:7a:49:a3:dd:44:2f:
dd:aa:c8:dc:ab:93:a2:22:c3:95:dd:e1:88:f5:d3:03:03:0a:
a9:67:df:ce:e5:c2:13:7b:e1:1e:bf:c8:a0:e2:c6:c7:88:52:
b3:de:8c:a1:8c:a8:8c:b3:2e:8e:dd:cd:99:d1:d7:0b:bf:40:
9e:a5:1b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:31 2026 by rpki-client