Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/l7dx2V1VmJ0uATI8KzKriPzRcdg.roa
File: l7dx2V1VmJ0uATI8KzKriPzRcdg.roa (raw, json)
Hash identifier: aTsuNNXpYU+m17MRzPIbWQRZSdkXhSUcloTziC0YZCA=
Subject key identifier: 97:B7:71:D9:5D:55:98:9D:2E:01:32:3C:2B:32:AB:88:FC:D1:71:D8
Certificate issuer: /CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Certificate serial: 019F2368E97985868D56C13A810FDB52F48A
Authority key identifier: BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/l7dx2V1VmJ0uATI8KzKriPzRcdg.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209573
IP address blocks: 139.28.64.0/22 maxlen: 22
139.28.64.0/23 maxlen: 23
139.28.64.0/24 maxlen: 24
139.28.65.0/24 maxlen: 24
139.28.66.0/23 maxlen: 23
139.28.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:79:85:86:8d:56:c1:3a:81:0f:db:52:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbda8e3a1b7edf7a33aa8aa4dbd2a854eff8181
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97b771d95d55989d2e01323c2b32ab88fcd171d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:27:df:c8:ac:c7:cc:97:bf:56:ca:62:02:
57:7c:8f:42:5f:e6:bc:84:a7:b5:08:16:e9:3c:e7:
f0:08:81:9f:3f:ef:11:ed:29:c3:ce:0d:0e:fb:7c:
32:04:c0:d6:48:e9:f8:9e:30:a4:02:ee:c6:81:5e:
82:d1:3a:49:cb:dd:c1:ab:99:be:58:a8:84:c4:02:
a7:ff:00:58:70:0f:4e:dd:d6:85:a2:0f:27:9a:a0:
34:c5:e3:6b:ad:1b:c8:85:3c:4b:28:fc:c8:e9:3d:
1b:1c:09:d4:e9:dc:ba:07:43:7d:6e:6e:87:05:21:
a6:6a:b5:8b:df:de:1b:01:6f:79:73:8e:4b:3c:29:
32:c3:43:6e:b8:7c:6f:26:e3:0d:3b:9b:58:69:8d:
48:a9:83:68:f1:65:91:91:e8:bd:f3:d6:2b:21:e9:
5b:a4:4e:d9:53:ef:f6:ba:e2:68:3e:f3:3d:e8:37:
2a:8d:a1:d2:ed:28:73:0f:d2:ec:a9:d6:8e:13:95:
37:1c:2c:2e:eb:ac:ca:75:b0:d0:f0:9c:50:4d:43:
33:fe:7c:78:17:cf:48:3c:fa:fd:87:d8:4c:4a:0b:
49:23:af:87:01:9f:61:a5:ec:24:73:86:3f:07:a9:
2a:f4:47:4f:ae:80:44:d2:32:ea:ec:d6:b7:e3:62:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B7:71:D9:5D:55:98:9D:2E:01:32:3C:2B:32:AB:88:FC:D1:71:D8
X509v3 Authority Key Identifier:
keyid:BB:BD:A8:E3:A1:B7:ED:F7:A3:3A:A8:AA:4D:BD:2A:85:4E:FF:81:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u72o46G37fejOqiqTb0qhU7_gYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/l7dx2V1VmJ0uATI8KzKriPzRcdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/u72o46G37fejOqiqTb0qhU7_gYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.64.0/22
Signature Algorithm: sha256WithRSAEncryption
82:5e:28:f3:d6:fa:99:ae:95:71:e8:82:52:a6:c0:16:4d:5d:
25:b4:b9:69:d1:de:8b:e3:d0:af:5c:d3:64:55:23:8c:7f:f3:
33:66:f5:38:d5:25:e4:f1:0f:05:e4:24:ad:f0:33:2d:57:91:
b7:17:6d:c3:2c:5a:0a:51:58:df:fd:a8:16:77:54:64:6b:29:
f6:e3:b3:ea:a7:10:d7:56:a0:1b:43:91:67:0c:8a:f8:77:83:
f7:42:b6:50:e6:b5:3e:a5:7c:c0:ee:46:3c:f4:73:b5:09:b3:
68:dd:b0:97:43:e5:d5:59:22:c3:c5:76:b8:a5:76:82:68:88:
a0:5f:eb:a7:6b:6a:4a:41:7b:46:49:d0:01:82:34:f7:f8:e8:
c3:62:9a:77:bc:dc:ad:65:d1:6d:5d:64:93:9b:f0:ad:bf:9c:
56:aa:8b:4b:09:37:06:b6:a5:bd:be:e8:b6:16:7f:bf:65:83:
be:28:8a:aa:3c:ad:08:a6:62:4b:5a:c3:3a:70:d7:94:fa:ca:
99:06:03:b5:f8:b9:74:2f:1b:fd:ae:82:b3:e8:d0:d5:d4:92:
c3:84:19:a8:1f:2a:29:9b:db:6b:9a:57:47:9e:35:15:8f:fc:
01:5f:df:c0:3b:ec:e5:dc:88:15:e2:b7:ce:fc:b6:29:8d:05:
ba:29:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:00:30 2026 by rpki-client