Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/dxz2oUPeADKtK52unfiT89vX5pQ.roa
File: dxz2oUPeADKtK52unfiT89vX5pQ.roa (raw, json)
Hash identifier: 7XE8Qjjg65fe2gUYJJrV1UUTDMRNQRh6r1HRYFcpsu4=
Subject key identifier: 77:1C:F6:A1:43:DE:00:32:AD:2B:9D:AE:9D:F8:93:F3:DB:D7:E6:94
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F23684FBAE9F4551EB106D53D0461AC6D
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/dxz2oUPeADKtK52unfiT89vX5pQ.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43966
IP address blocks: 79.173.64.0/23 maxlen: 24
79.173.66.0/23 maxlen: 24
79.173.77.0/24 maxlen: 24
79.173.80.0/20 maxlen: 24
94.243.192.0/20 maxlen: 24
94.243.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4f:ba:e9:f4:55:1e:b1:06:d5:3d:04:61:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=771cf6a143de0032ad2b9dae9df893f3dbd7e694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:e2:ba:89:32:1f:bb:72:1a:f4:5b:3e:7b:
0d:0b:f7:48:8f:ec:ab:8c:68:3d:69:11:eb:36:f4:
eb:92:c0:63:c4:7e:9b:63:ed:3b:8c:bc:09:2e:0c:
05:af:04:4b:84:b6:a1:0d:59:1a:49:45:0f:63:a4:
90:f8:e7:3b:df:5c:60:38:6f:a8:1c:37:41:fd:0b:
a0:c3:31:82:d6:d5:cd:5e:f3:40:3c:94:dc:e8:37:
2b:2a:df:08:30:c0:53:fa:d8:9b:66:5c:c1:eb:5e:
3f:02:35:b1:e6:e5:ee:ac:35:2b:e4:51:29:58:7d:
3a:ab:b4:fc:d1:93:8c:0e:95:af:d1:0e:9d:54:bc:
cf:24:de:66:6a:88:6d:a8:17:03:2d:d0:0d:91:db:
57:bf:55:ee:a8:54:e9:77:26:9f:6a:ec:04:03:f8:
16:63:68:2c:42:f3:ff:a9:08:1f:ac:5c:96:71:29:
88:23:0a:3f:a6:65:a2:c3:ea:6e:40:07:86:c4:9d:
28:e9:91:29:d0:30:4c:90:48:e8:40:a1:a4:43:b4:
ac:0a:53:0f:4c:9e:17:b0:f9:90:57:d5:fe:0b:4e:
f2:32:42:b7:ca:01:1a:66:ba:7d:3b:38:be:c5:9f:
b7:ac:2f:2c:45:96:5c:79:e2:a6:f8:30:d0:36:ea:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1C:F6:A1:43:DE:00:32:AD:2B:9D:AE:9D:F8:93:F3:DB:D7:E6:94
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/dxz2oUPeADKtK52unfiT89vX5pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.64.0/22
79.173.77.0/24
79.173.80.0/20
94.243.192.0/20
94.243.236.0/22
Signature Algorithm: sha256WithRSAEncryption
60:7e:9b:b7:a4:aa:50:b2:f0:10:31:ae:e8:ae:bf:c1:84:9c:
86:b6:be:f6:f3:c6:e7:34:2e:7b:9a:3d:4b:af:a8:20:55:09:
64:44:b3:24:cf:dd:88:f4:91:62:2a:89:94:cd:b8:e9:2a:57:
92:c7:ae:fc:36:b5:7f:2c:ed:33:5e:6f:1d:b4:04:db:d5:c7:
3e:9e:28:88:e7:08:6c:0f:42:3e:c4:3a:05:98:d4:4c:1a:a4:
b3:bb:4f:60:f3:57:ac:c5:1d:98:af:d0:d2:cf:06:85:1e:fb:
d7:01:cf:c3:1d:5a:08:7c:60:14:9b:88:ec:af:2b:6c:f1:82:
86:6a:69:e6:34:7d:2c:4f:a9:14:55:83:17:bc:6d:5f:c5:b5:
f9:f4:03:fd:bc:26:5a:37:25:03:34:7d:8b:95:bf:24:5b:3a:
af:65:ec:2a:05:26:92:69:5e:1b:3c:b9:55:b1:ef:d8:bf:a5:
ab:a9:23:64:9c:70:b0:e8:de:45:da:3b:9a:a1:55:32:d7:c7:
5b:91:67:72:04:7f:ba:44:72:dc:f7:bc:b2:ed:ee:ad:51:69:
f5:4a:49:41:2e:21:58:b7:0a:94:4c:47:0a:bb:96:14:89:90:
c3:01:99:eb:71:fe:0b:6c:d3:de:38:d8:92:1c:34:1a:9d:f6:
59:3b:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:13 2026 by rpki-client