Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/H2zetjbu6Mqb0o7ATyk278R0bGY.roa
File: H2zetjbu6Mqb0o7ATyk278R0bGY.roa (raw, json)
Hash identifier: bn4QHQyGhFY9rDnnbmAmmLUzcRf+y73YZKo0db/S5Ss=
Subject key identifier: 1F:6C:DE:B6:36:EE:E8:CA:9B:D2:8E:C0:4F:29:36:EF:C4:74:6C:66
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019F462FC5A462DE807C9AF7AE7B8F19FB11
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/H2zetjbu6Mqb0o7ATyk278R0bGY.roa
Signing time: Thu 09 Jul 2026 09:22:43 +0000
ROA not before: Thu 09 Jul 2026 09:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 209.33.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:2f:c5:a4:62:de:80:7c:9a:f7:ae:7b:8f:19:fb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jul 9 09:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f6cdeb636eee8ca9bd28ec04f2936efc4746c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:1f:1c:a3:86:88:0e:4c:27:af:25:00:2c:
b0:9a:a3:e3:5c:ff:1f:1d:3f:42:41:2a:b1:9a:85:
7c:d3:72:6f:60:a4:ad:ae:8f:62:1d:33:ad:c4:b9:
dc:58:a4:60:c2:bf:2a:ad:c2:08:4b:e4:03:ad:74:
bf:05:b0:bb:ed:c8:cb:7b:7f:70:4f:03:5a:78:30:
d0:9d:67:0c:c1:7f:21:3a:70:ea:b3:c6:7d:54:ad:
dd:5d:8b:75:98:ac:7c:1b:64:5d:bf:c1:2f:7a:ae:
75:73:99:6d:aa:2c:bd:03:19:e3:f8:6d:f5:88:78:
2d:d6:90:17:9a:91:08:fc:14:1e:3c:9e:97:08:a5:
87:9f:7a:bb:73:1e:23:3c:88:98:fa:d4:c5:a8:8f:
d9:8f:1b:1c:31:69:ae:62:cd:9f:dd:25:ce:6b:33:
7b:6f:53:e4:77:d7:e4:16:3e:06:c5:d8:43:e2:5f:
03:fb:a8:d4:9f:5c:97:5e:07:52:f6:93:fb:87:b6:
31:6d:06:da:08:51:52:66:32:ca:05:49:bb:e8:56:
48:1e:94:17:ec:58:6f:68:79:72:f8:19:eb:92:da:
be:66:16:bd:ed:f8:15:94:41:1b:c2:c1:de:39:e0:
d5:ee:97:c6:ee:23:96:ab:c8:46:76:70:2c:cc:34:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6C:DE:B6:36:EE:E8:CA:9B:D2:8E:C0:4F:29:36:EF:C4:74:6C:66
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/H2zetjbu6Mqb0o7ATyk278R0bGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.33.178.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9f:37:f2:13:b7:33:60:68:76:4f:ba:1c:af:54:66:ab:57:
ab:12:83:f2:3b:bf:b0:e3:32:54:04:e2:08:21:03:3b:58:d9:
5a:4f:22:77:68:df:3f:ef:a8:35:b8:55:4d:7a:eb:79:f9:1b:
89:26:0b:54:54:fd:8a:77:68:7a:04:3a:cd:d3:10:ef:ac:51:
f1:5b:5a:5b:7b:b3:a3:c2:4c:0a:e5:f2:8c:40:f4:26:ee:c2:
b9:51:33:07:02:b8:7b:c1:05:c5:46:f1:d1:1d:1b:99:4a:fc:
82:10:4b:99:32:d1:49:fc:d0:13:b0:f0:fd:8a:aa:64:02:a9:
41:ea:8a:09:1c:6e:42:4a:db:61:c2:d3:f9:07:c4:93:7b:d2:
53:e5:fc:e2:86:85:9c:77:08:b7:10:2d:b1:fb:2a:04:42:5c:
20:ef:d4:c9:2f:09:91:80:fa:1a:ee:c2:03:39:3c:89:48:60:
45:58:6e:b8:2d:db:51:2c:e5:eb:b2:96:28:6c:80:db:30:e4:
98:37:86:d9:3e:b2:ab:5b:2f:91:d5:6c:82:77:e5:d2:a0:b7:
88:e8:ac:b6:bf:d6:c7:e1:67:a9:e2:2c:87:77:8b:23:7e:0c:
91:6c:81:46:8c:4d:27:5a:db:17:65:13:1f:c9:94:fb:d0:3d:
98:a0:41:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:27 2026 by rpki-client