Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Ro3xSeOrBGicn2smJ0VK79azFb8.roa
File: Ro3xSeOrBGicn2smJ0VK79azFb8.roa (raw, json)
Hash identifier: mr1lvkVfRK9U1M4kC3c2rOU3vY0RY3v5eu/gtMJ4TFw=
Subject key identifier: 46:8D:F1:49:E3:AB:04:68:9C:9F:6B:26:27:45:4A:EF:D6:B3:15:BF
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FCE7E5CE585CE0EDB59CFDE9AEF23E875
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Ro3xSeOrBGicn2smJ0VK79azFb8.roa
Signing time: Tue 04 Aug 2026 20:36:55 +0000
ROA not before: Tue 04 Aug 2026 20:36:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 132.243.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:7e:5c:e5:85:ce:0e:db:59:cf:de:9a:ef:23:e8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 4 20:36:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=468df149e3ab04689c9f6b2627454aefd6b315bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:0a:b7:ae:7d:71:96:40:44:4a:c4:5d:5e:
33:c0:10:81:e4:01:1d:83:a4:dd:10:24:a4:5f:a1:
28:07:2b:13:be:bc:ee:df:24:99:f7:a4:57:4e:98:
a8:fe:ea:09:cd:9f:10:96:af:4a:24:09:a4:ea:87:
58:46:fd:05:ec:93:b0:29:6b:27:83:a4:34:12:cb:
04:aa:e5:8b:15:f1:a8:7a:aa:dc:ea:3e:a8:72:2a:
80:44:02:ed:7a:d1:d3:35:c6:2b:9a:84:61:17:ac:
ba:7a:20:9c:75:4b:67:46:cf:37:ac:0f:d8:ce:89:
0d:1b:19:9f:cf:c7:22:7f:58:3b:b2:47:68:2f:2a:
21:8e:e8:f2:7f:bb:6e:30:e4:a1:80:42:a9:9e:2f:
1b:5e:1b:b4:4e:2a:c0:ca:ac:93:8d:54:e6:3a:67:
cc:a6:ce:0e:a6:48:d7:fc:c4:54:71:2b:2d:ed:c5:
1b:4e:65:64:ec:d3:9f:99:39:af:78:9d:28:67:f5:
8a:5a:95:a3:6f:60:40:05:99:6e:cc:5a:09:f8:fb:
90:93:81:ae:13:93:71:a3:a5:e9:de:63:13:43:3e:
e8:7e:3c:6e:3d:c1:a9:24:ce:6b:74:ab:38:7c:12:
dc:9b:a3:44:d7:b9:a0:8a:b1:04:82:4e:44:7c:14:
4f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:F1:49:E3:AB:04:68:9C:9F:6B:26:27:45:4A:EF:D6:B3:15:BF
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/Ro3xSeOrBGicn2smJ0VK79azFb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7d:ef:30:e6:df:59:09:a9:35:3b:74:d4:20:04:e1:35:0c:
12:f0:db:71:0e:d3:84:f7:71:9f:6a:ea:d1:3b:ea:24:31:31:
67:03:08:db:f5:8f:fe:1d:17:9a:89:0f:48:a9:fd:3f:21:f1:
70:c1:ed:4c:83:d5:64:9d:8c:42:9a:c5:8d:9d:29:a9:a2:01:
e0:83:e2:c6:16:8d:7b:27:49:1f:2d:77:cb:d7:18:0d:17:78:
91:62:82:95:5c:e6:84:8d:97:1e:c2:5d:24:68:d6:a5:fe:9e:
fc:e6:a2:42:ec:aa:eb:aa:11:6a:b4:be:bf:0a:18:b2:86:e4:
3b:58:e3:8d:a3:6c:c9:20:c5:f0:74:18:c6:a8:2b:ba:df:55:
fc:c8:dd:89:97:3f:fc:0a:df:0d:b0:47:09:a4:48:1e:f6:9b:
6f:56:50:60:1f:ad:6b:2c:48:4c:e9:60:8f:91:15:1f:28:6b:
e2:e5:81:36:a8:41:3c:51:dc:de:cd:87:b3:c2:b4:0c:09:39:
1b:a9:da:a9:27:ca:06:19:05:50:47:c4:b0:31:23:4a:ea:82:
53:84:4e:94:c8:2d:cc:82:d9:0e:5a:8f:8c:97:62:4c:7c:b5:
0c:fb:8c:8a:06:5b:76:4b:9d:93:1e:da:af:d1:ff:d9:d1:0f:
78:d9:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:40 2026 by rpki-client