Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/k2AO4PJ_phOXLuvBebIPRI9C_Uw.roa
File: k2AO4PJ_phOXLuvBebIPRI9C_Uw.roa (raw, json)
Hash identifier: gd1Uz7T9BqTxSeblJcaBtrakvFRE11vtlqTt5BuE1uQ=
Subject key identifier: 93:60:0E:E0:F2:7F:A6:13:97:2E:EB:C1:79:B2:0F:44:8F:42:FD:4C
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019F32D147075B03423CFC71DC34529F9A01
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/k2AO4PJ_phOXLuvBebIPRI9C_Uw.roa
Signing time: Sun 05 Jul 2026 15:06:43 +0000
ROA not before: Sun 05 Jul 2026 15:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 176.117.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:d1:47:07:5b:03:42:3c:fc:71:dc:34:52:9f:9a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Jul 5 15:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93600ee0f27fa613972eebc179b20f448f42fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:56:16:dc:89:d9:60:75:44:a3:da:39:ee:
07:f1:a9:0d:5f:a5:e1:7d:a9:72:61:be:c0:cd:09:
1b:4e:ed:86:11:bf:38:6b:df:33:1d:7c:0b:cb:b6:
13:a1:d4:55:f6:ca:35:a6:90:70:a2:21:0b:fb:0b:
83:fe:46:05:92:51:83:95:0a:d3:ba:a6:27:1e:1d:
0f:c5:6e:83:45:a8:65:6c:ef:b0:c2:ca:25:0d:00:
bd:c9:13:24:d6:f2:fc:36:47:31:4f:f2:4a:5e:6d:
8b:fa:67:10:ea:1f:89:93:31:24:7e:23:d4:8d:39:
33:80:ca:7c:01:5d:bf:9b:2e:60:2a:08:d2:21:07:
ee:15:92:54:d3:bf:de:75:cc:eb:c4:b9:63:61:6e:
a9:09:4a:ce:c9:a4:ed:84:65:06:a5:31:78:d5:fc:
8e:fd:b9:f2:db:d3:2d:50:0c:f1:45:c3:a2:b9:52:
a4:55:c7:99:e9:07:b1:7f:60:99:57:f6:fa:ad:88:
72:40:b7:12:7e:7b:19:7b:51:80:db:ac:98:77:fb:
30:9c:8c:d5:57:a8:fa:f4:21:f9:5c:7d:cf:9d:6b:
0c:b8:87:82:26:3e:28:fa:e0:a1:5f:ad:d0:8f:51:
9d:30:21:da:a5:50:8d:80:48:d7:1a:aa:5f:ed:4e:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:60:0E:E0:F2:7F:A6:13:97:2E:EB:C1:79:B2:0F:44:8F:42:FD:4C
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/k2AO4PJ_phOXLuvBebIPRI9C_Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c6:5f:fb:9e:5f:c8:37:b5:04:79:8a:8a:25:e0:65:dd:52:
fb:e2:56:ec:9d:60:b3:44:96:38:6c:3b:02:cd:32:5c:21:ca:
9b:61:10:0f:42:bc:bb:10:6f:1d:c9:72:c7:13:58:29:9a:0d:
38:03:ca:fb:0f:59:45:6d:41:b6:af:91:53:dc:e9:6c:1d:cb:
84:87:26:d9:52:a1:66:e3:5d:a7:7b:b1:37:fb:bb:51:55:48:
59:87:19:52:30:29:7a:05:5e:4c:9d:6d:2e:84:ff:60:63:fd:
f6:6d:b8:d8:5b:a5:44:c5:e0:05:1b:9b:91:73:f5:15:65:2a:
a8:57:2d:37:5e:61:2b:75:a4:74:49:83:8f:80:ad:63:5f:8d:
68:83:63:33:45:fd:c6:8b:19:a7:ab:2c:5c:19:78:0e:8f:8f:
33:af:03:18:57:26:46:fc:68:af:e2:c8:77:a6:58:37:cd:f0:
d3:7f:cb:c7:ca:a3:da:8c:3c:56:83:07:40:29:30:a1:34:ba:
ba:57:d7:01:a4:d5:6a:fa:ff:6d:89:bd:d1:0d:23:6a:b2:92:
e1:23:90:8f:f4:eb:66:70:87:34:90:76:c3:ad:42:a0:1e:18:
d6:d8:1e:37:9b:08:4f:12:e6:18:f0:dc:3b:0c:fe:77:11:71:
58:04:7d:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8y0UcHWwNCPPxx3DRSn5oBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYwNzA1MTUwNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzYwMGVlMGYyN2ZhNjEzOTcyZWViYzE3OWIyMGY0NDhmNDJmZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmtWFtyJ2WB1RKPaOe4H8akNX6Xh
falyYb7AzQkbTu2GEb84a98zHXwLy7YTodRV9so1ppBwoiEL+wuD/kYFklGDlQrT
uqYnHh0PxW6DRahlbO+wwsolDQC9yRMk1vL8NkcxT/JKXm2L+mcQ6h+JkzEkfiPU
jTkzgMp8AV2/my5gKgjSIQfuFZJU07/edczrxLljYW6pCUrOyaTthGUGpTF41fyO
/bny29MtUAzxRcOiuVKkVceZ6Qexf2CZV/b6rYhyQLcSfnsZe1GA26yYd/swnIzV
V6j69CH5XH3PnWsMuIeCJj4o+uChX63Qj1GdMCHapVCNgEjXGqpf7U4/XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNgDuDyf6YTly7rwXmyD0SPQv1MMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEvazJBTzRQSl9waE9YTHV2QmViSVBSSTlDX1V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHVrMA0G
CSqGSIb3DQEBCwUAA4IBAQBtxl/7nl/IN7UEeYqKJeBl3VL74lbsnWCzRJY4bDsC
zTJcIcqbYRAPQry7EG8dyXLHE1gpmg04A8r7D1lFbUG2r5FT3OlsHcuEhybZUqFm
412ne7E3+7tRVUhZhxlSMCl6BV5MnW0uhP9gY/32bbjYW6VExeAFG5uRc/UVZSqo
Vy03XmErdaR0SYOPgK1jX41og2MzRf3GixmnqyxcGXgOj48zrwMYVyZG/Giv4sh3
plg3zfDTf8vHyqPajDxWgwdAKTChNLq6V9cBpNVq+v9tib3RDSNqspLhI5CP9Otm
cIc0kHbDrUKgHhjW2B43mwhPEuYY8Nw7DP53EXFYBH1Q
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:10 2026 by rpki-client