Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa
File: AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa (raw, json)
Hash identifier: 1b9YLade5wRVtuNh+CLPpHprAJRfPxZf9fkGpaZl+nY=
Subject key identifier: 00:0E:D8:E2:C0:91:EC:FA:E9:0C:8F:39:61:F3:DB:BF:18:33:AC:08
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 019F55E4C5C02B406D2D94470CF2E455790F
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa
Signing time: Sun 12 Jul 2026 10:34:43 +0000
ROA not before: Sun 12 Jul 2026 10:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50670
IP address blocks: 1.179.88.0/21 maxlen: 24
77.91.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:e4:c5:c0:2b:40:6d:2d:94:47:0c:f2:e4:55:79:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jul 12 10:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=000ed8e2c091ecfae90c8f3961f3dbbf1833ac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:2c:5a:fa:7b:f0:4f:d3:2f:6e:ca:2d:7d:
a8:38:76:1f:a1:f3:92:c5:e8:8c:f5:46:b1:af:49:
45:70:b6:96:55:43:3f:8e:8f:f2:c4:6a:eb:23:c9:
e3:64:8a:bf:49:92:fc:ac:eb:58:ac:0b:5e:48:6e:
84:13:ad:e0:4e:bf:74:b4:f0:81:43:5c:2c:ae:0d:
47:87:8e:6f:75:2f:91:a2:67:e6:a8:d9:d8:86:b9:
b8:b6:7e:98:4f:35:bc:86:7a:67:b6:e2:8b:81:49:
35:c2:a5:60:04:81:5b:aa:ab:5b:83:3f:53:38:2a:
9d:dc:25:48:64:0b:7a:cf:89:a5:73:8b:f7:67:72:
df:67:e4:c0:36:83:f0:04:55:25:ea:a7:02:63:56:
dc:fd:be:33:54:ec:13:7b:11:86:22:e8:58:f2:cc:
68:1e:ca:44:e8:bf:83:12:f7:66:55:4e:7b:53:4b:
56:e7:69:57:09:fe:ae:7d:bc:14:c3:d3:87:fb:1c:
d2:1d:62:23:91:72:5a:5e:41:7f:54:b8:21:ad:fd:
7a:29:f2:8a:4c:ef:49:4d:61:68:7f:45:6d:c8:39:
0a:be:41:dc:0d:14:69:12:39:56:ec:b1:db:05:8b:
81:8f:bd:87:c9:a0:ed:6b:e7:53:b8:99:4f:cf:bf:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0E:D8:E2:C0:91:EC:FA:E9:0C:8F:39:61:F3:DB:BF:18:33:AC:08
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/AA7Y4sCR7PrpDI85YfPbvxgzrAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.88.0/21
77.91.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:0a:8b:9e:31:dc:91:45:1d:2c:04:4a:48:60:f6:61:75:8f:
2d:74:cc:f8:1e:4e:f7:20:c8:b2:27:5e:2e:64:8d:13:60:1f:
64:74:ae:65:60:9a:fb:25:6a:59:4d:83:2e:a5:2c:cd:4d:4a:
d8:83:e3:0d:6a:70:32:62:93:2e:04:8a:46:b9:31:f5:67:ba:
f9:f0:29:63:40:07:4e:04:00:6b:06:37:4e:11:90:ae:d8:3a:
65:c0:ca:d4:69:71:c0:45:c0:e6:d1:c0:1c:ae:6d:7c:d5:8f:
27:b1:cf:00:a8:44:d2:92:b7:ec:1e:1f:40:70:ef:5b:cf:ec:
0d:a1:0b:57:f6:c8:74:71:02:2e:4e:ed:6a:41:1b:22:08:e3:
2e:84:c2:c9:a8:e9:e0:f9:23:95:76:56:0d:6f:b7:27:e4:2e:
0e:95:d5:5e:8d:a9:09:48:dc:83:58:a7:90:b0:9d:36:ae:a1:
5a:d1:fc:8b:be:c8:54:b4:b0:12:1c:ec:86:91:18:27:52:c4:
5a:95:e4:3a:45:81:5b:b5:dd:04:21:78:75:2e:8e:e1:8a:3f:
a2:f3:f1:57:b6:5a:d7:67:98:ab:48:81:5e:bd:24:d6:f3:1f:
00:eb:40:b9:ae:23:75:3b:9b:95:32:08:53:90:60:5d:75:70:
fc:34:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:27:14 2026 by rpki-client