Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/9Ftcg5opUvG1bGf780iCbGd9Bfs.roa
File: 9Ftcg5opUvG1bGf780iCbGd9Bfs.roa (raw, json)
Hash identifier: /yd9u12GLW2BYS7dVxTP/I+54jm43+QiQyqtvV7hubM=
Subject key identifier: F4:5B:5C:83:9A:29:52:F1:B5:6C:67:FB:F3:48:82:6C:67:7D:05:FB
Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Certificate serial: 019ED44474920E24B366801F12E1550EBBF3
Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/9Ftcg5opUvG1bGf780iCbGd9Bfs.roa
Signing time: Wed 17 Jun 2026 06:28:36 +0000
ROA not before: Wed 17 Jun 2026 06:28:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50897
IP address blocks: 192.44.75.0/24 maxlen: 24
192.108.115.0/24 maxlen: 24
192.108.116.0/24 maxlen: 24
192.108.117.0/24 maxlen: 24
192.108.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:44:74:92:0e:24:b3:66:80:1f:12:e1:55:0e:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Validity
Not Before: Jun 17 06:28:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f45b5c839a2952f1b56c67fbf348826c677d05fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:af:9d:82:5a:b7:17:55:e8:5f:0d:fb:c4:fe:
58:79:30:ac:5b:1f:a4:25:0a:c2:fa:a0:d8:d9:41:
8c:5d:35:66:79:9f:fc:23:39:36:98:b6:dd:fc:31:
af:79:3d:60:f7:ec:8b:64:7e:01:3c:d4:49:b7:83:
58:5a:69:31:56:c6:8f:7c:be:f8:fb:61:24:44:1e:
39:42:8d:fc:e1:d6:2e:31:03:9f:fa:4e:5b:db:69:
d4:1c:5a:8b:ef:e9:d9:ec:b1:55:de:d4:90:63:80:
17:11:2d:57:3f:ae:9f:13:15:ab:6e:82:f4:c8:13:
90:94:33:3e:92:51:fd:e9:f6:60:9e:d7:05:37:bc:
23:f6:4b:7b:c8:fe:a0:1a:f4:bc:d4:de:5f:00:df:
81:37:cf:33:a4:28:21:9d:12:0d:0f:4b:d1:31:69:
14:27:1a:37:3a:32:44:58:80:b3:ab:dd:53:d2:85:
6f:62:25:cf:87:45:8f:f4:57:27:21:5a:f2:c8:85:
dc:3f:84:e6:a1:ae:de:61:72:4a:f9:eb:13:73:24:
fb:df:86:d8:03:20:c1:d1:4d:24:4b:0f:59:4b:48:
46:a8:b5:c1:dd:7f:49:e7:e3:92:c5:f1:94:22:1d:
58:3a:63:37:55:70:6a:54:51:cb:12:a9:64:db:a5:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:5C:83:9A:29:52:F1:B5:6C:67:FB:F3:48:82:6C:67:7D:05:FB
X509v3 Authority Key Identifier:
keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/9Ftcg5opUvG1bGf780iCbGd9Bfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.75.0/24
192.108.115.0-192.108.118.255
Signature Algorithm: sha256WithRSAEncryption
98:da:02:f8:b9:83:c5:d4:42:84:5e:55:ce:7e:5c:da:87:2f:
d8:7f:c4:10:be:2b:f3:0c:89:c7:f6:70:a3:95:26:b4:7b:28:
53:88:8b:bc:d1:47:69:ac:1e:46:2e:79:dc:0e:7b:8a:22:2b:
d8:69:6b:a1:54:3e:5b:8f:f6:1c:78:87:e5:89:f3:bd:c3:98:
df:2c:a4:ff:8a:91:6b:9b:aa:a1:0a:96:80:a4:fc:fc:39:b4:
70:a9:73:ee:4d:0d:21:6e:4d:d9:22:61:b8:be:21:51:db:f6:
3d:3c:9f:07:42:ae:19:53:f7:8c:b7:a4:79:37:68:e3:6d:c2:
0c:1f:fa:0c:ce:da:c1:a9:94:58:42:63:8d:d9:37:af:1f:4e:
67:87:bb:59:40:76:10:22:f0:ec:8c:dd:59:d9:77:e1:50:a0:
61:b9:97:97:85:60:f1:f8:8c:03:9b:aa:ed:a0:45:56:c8:90:
98:1f:8e:83:f3:1c:98:b2:a3:2b:e3:a3:69:b3:22:b2:56:1b:
74:9e:72:d6:0d:2d:01:51:67:6b:f3:e9:02:c5:25:0e:d8:4e:
e4:e9:aa:56:fe:3b:23:8c:a3:8c:0e:3a:ab:75:d8:68:6f:c5:
da:79:87:50:d5:e3:99:b0:4e:b2:93:b3:c9:ef:3a:7a:d5:cf:
be:cd:1b:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 1 00:30:23 2026 by rpki-client