Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa
File: 0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa (raw, json)
Hash identifier: nCcYx5cHOz71cIaI4A31GrDOCs0TzM6iUrtdozko0AI=
Subject key identifier: D1:70:A7:46:6B:FD:96:B8:9F:14:DE:99:9B:F4:74:0B:F7:39:CC:D9
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 01A039371A7E0FACA283A737D6BBF68BE067
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa
Signing time: Tue 25 Aug 2026 13:58:27 +0000
ROA not before: Tue 25 Aug 2026 13:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30781
IP address blocks: 67.159.208.0/20 maxlen: 32
153.52.217.0/24 maxlen: 32
153.52.218.0/23 maxlen: 32
153.52.220.0/24 maxlen: 32
153.79.112.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:37:1a:7e:0f:ac:a2:83:a7:37:d6:bb:f6:8b:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Aug 25 13:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d170a7466bfd96b89f14de999bf4740bf739ccd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:57:74:0c:ef:b4:01:78:ed:3b:7b:a2:9b:8e:
72:2b:e5:dd:fa:8a:b8:99:89:04:f4:78:75:bc:64:
73:34:05:62:99:67:97:6d:bf:48:59:71:f6:d2:31:
8e:ee:e7:d2:a2:48:e8:48:f0:f1:58:7a:ab:eb:99:
cb:c0:43:55:fd:30:ed:7b:6a:e1:8b:4f:9c:d0:65:
a9:d3:af:42:e8:67:72:e3:fd:1c:82:69:b7:73:14:
45:48:14:dc:16:92:ea:ec:d0:01:f5:d4:9f:0f:94:
30:a4:49:02:9f:ae:f0:31:8f:dd:4b:72:24:76:76:
2e:a5:1d:e5:a2:af:a8:ec:79:bb:84:db:1d:49:b1:
96:d4:ae:a3:36:ef:37:14:08:56:8e:68:f4:54:ab:
44:80:b3:21:22:de:e3:47:85:51:ed:c1:5e:a7:56:
a3:7a:84:9e:6a:9d:52:54:eb:77:2f:72:d4:1d:51:
7c:62:66:26:f9:95:ab:97:fa:dc:fa:65:63:93:76:
4e:2c:a2:d3:60:b3:2c:a2:ca:8e:24:03:6a:f0:cd:
7b:88:4d:f3:57:63:cb:58:e0:eb:b4:43:93:ac:c8:
14:ca:2f:e5:44:c4:54:09:3e:bf:47:51:a3:88:56:
1d:63:b6:3c:ff:72:79:20:7c:70:87:b3:57:f1:65:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:A7:46:6B:FD:96:B8:9F:14:DE:99:9B:F4:74:0B:F7:39:CC:D9
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/0XCnRmv9lrifFN6Zm_R0C_c5zNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.159.208.0/20
153.52.217.0-153.52.220.255
153.79.112.0/20
Signature Algorithm: sha256WithRSAEncryption
70:5e:a0:06:cc:0d:40:7e:cc:65:ba:0a:10:c4:b8:91:7c:76:
e0:e1:e5:e9:a4:0b:83:3b:c5:a5:12:a8:77:89:b7:74:a6:4c:
e7:e1:22:0b:24:6c:91:9f:13:32:a7:2a:85:36:d2:e6:73:0b:
c0:3b:9f:1a:61:17:30:94:0c:2b:c3:c5:da:84:c5:78:6b:64:
7a:c0:52:b2:e5:2f:c0:ef:53:df:12:a1:40:da:4c:15:15:b1:
95:47:86:04:c1:ed:95:35:25:74:9b:5b:51:e0:04:bc:7e:3c:
35:49:f5:5a:65:2f:ce:48:56:4e:1d:ec:8a:c0:95:c4:5d:89:
57:27:44:9c:1f:af:74:93:41:58:1d:22:a4:e5:da:84:2a:4b:
a8:e9:56:b2:a2:37:7f:cb:2c:1d:88:91:b8:96:18:c4:61:ff:
0e:e2:6e:a3:3a:bb:d5:20:9a:a1:b9:b4:51:fc:1c:89:cf:db:
21:0a:a6:ba:33:86:8e:ba:4a:5e:96:de:a6:71:b4:c9:26:37:
3e:a7:23:60:89:b2:9d:3d:53:ed:d2:07:71:51:dd:ae:ca:df:
0e:45:9c:b4:17:d3:95:bf:71:b9:ab:6e:2f:f5:75:b4:a3:52:
fa:3f:af:f2:cf:74:bb:5c:b0:9f:cd:78:d1:01:81:0c:36:d8:
6e:d0:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:27:04 2026 by rpki-client