Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/28eiJ1h5KcwaV_iaKODPRwI2kOc.roa
File: 28eiJ1h5KcwaV_iaKODPRwI2kOc.roa (raw, json)
Hash identifier: U9VCaFAdW8Asz9/RALSWiZuIY0emr/1kbZYq+4qCdZ4=
Subject key identifier: DB:C7:A2:27:58:79:29:CC:1A:57:F8:9A:28:E0:CF:47:02:36:90:E7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FE5C838E5583F874B8AC1F8C45710F53E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/28eiJ1h5KcwaV_iaKODPRwI2kOc.roa
Signing time: Sun 09 Aug 2026 09:08:51 +0000
ROA not before: Sun 09 Aug 2026 09:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219113
IP address blocks: 167.17.34.0/24 maxlen: 24
167.17.44.0/24 maxlen: 24
167.17.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e5:c8:38:e5:58:3f:87:4b:8a:c1:f8:c4:57:10:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 9 09:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dbc7a227587929cc1a57f89a28e0cf47023690e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:63:53:dd:21:37:95:3a:23:8e:eb:74:05:
5e:36:b0:49:98:5a:15:a4:54:3e:51:ae:1d:90:d3:
40:e2:79:40:47:af:d6:20:f9:65:ad:5b:b3:e4:4b:
f0:86:bf:1b:bb:25:1d:b9:49:54:9c:92:13:4f:57:
c2:0d:95:d8:82:96:84:9f:8c:77:a1:6d:5c:95:32:
f9:b3:09:9f:95:a0:e6:45:d1:97:4f:50:b2:49:e5:
c0:40:f9:6b:7c:5c:2b:24:e7:58:ed:f4:ce:0a:5a:
9e:fe:47:d3:5e:b0:56:1f:03:d7:d8:c6:df:c8:0b:
bf:0a:12:0b:1a:3a:b1:74:cb:2b:08:f7:cd:75:a3:
c2:fa:25:17:bf:25:00:90:17:5b:75:b6:1e:ef:23:
df:cd:f0:64:31:53:28:83:52:83:1f:c1:da:7b:fe:
f9:87:eb:6c:07:db:ee:94:d0:6c:e0:ce:94:f8:f4:
c1:19:ad:ba:e4:f7:09:de:4e:a7:e2:5f:af:03:43:
68:4c:96:ed:29:ec:f7:42:ea:ce:ac:7e:21:95:d3:
d6:42:fd:d1:04:b8:fa:66:4c:c8:dc:c7:71:c9:f8:
5e:3a:69:86:16:b1:5d:e0:18:2d:81:ac:e4:30:a5:
9b:d6:d0:2d:62:d2:71:98:ee:dc:f7:b4:ab:1e:de:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:A2:27:58:79:29:CC:1A:57:F8:9A:28:E0:CF:47:02:36:90:E7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/28eiJ1h5KcwaV_iaKODPRwI2kOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.34.0/24
167.17.44.0/24
167.17.58.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cc:43:2f:f6:cd:2c:cb:8f:da:5f:55:fa:e9:4f:0f:89:ee:
e7:f5:7c:9c:65:3c:0c:70:f5:9d:d9:eb:74:d8:30:53:2b:e5:
a4:c8:0c:76:29:4c:a3:da:fa:ad:81:93:d0:a4:1f:a3:5a:4f:
10:16:40:49:41:75:9b:39:32:0b:4c:c3:0b:e5:ae:4c:c9:7a:
72:ba:01:15:9f:3a:b9:4d:c1:9e:46:f9:49:92:61:2a:e5:c6:
e0:ec:f5:1e:54:5b:6b:1c:98:3f:f9:df:c1:65:a8:f4:0d:52:
66:d2:1b:2d:dc:fa:9d:01:13:f3:71:eb:94:8e:15:33:19:f1:
f5:f1:08:d2:3f:fa:2a:8c:ed:53:18:d6:df:69:fe:4b:52:ac:
c0:70:2f:e9:64:f9:14:62:5f:b4:78:26:82:92:5a:4f:ec:e9:
35:1d:8e:1e:69:cb:8c:82:0e:b5:aa:f8:85:a3:92:a7:db:a6:
6d:41:4d:79:3e:c3:9f:04:db:e8:2c:25:45:a6:39:ea:a8:6d:
cd:a7:d4:c9:f0:ed:63:d9:87:67:c5:41:48:8d:0c:83:d7:d1:
6d:41:77:85:ae:41:a0:90:98:5b:df:07:c3:28:35:48:35:d8:
af:ca:de:b4:ad:24:2a:47:b1:e4:03:af:73:28:94:ca:26:71:
e8:6b:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:57 2026 by rpki-client