Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/04r64BSfgd-5PgS5nj1HGaTj520.roa
File: 04r64BSfgd-5PgS5nj1HGaTj520.roa (raw, json)
Hash identifier: 9SQdIG786baBma7juCvYz1sYWzVfuKVeNspaB2HD5EY=
Subject key identifier: D3:8A:FA:E0:14:9F:81:DF:B9:3E:04:B9:9E:3D:47:19:A4:E3:E7:6D
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F2368458315AC5EC6DFD38398A9AA9F58
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/04r64BSfgd-5PgS5nj1HGaTj520.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 83.217.202.0/24 maxlen: 32
83.217.203.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:83:15:ac:5e:c6:df:d3:83:98:a9:aa:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d38afae0149f81dfb93e04b99e3d4719a4e3e76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:1a:7c:9f:10:97:2c:4b:e6:98:e3:a5:81:
58:4d:8b:e2:d8:ec:77:41:10:7a:94:64:e1:66:82:
f6:ec:ce:a0:71:ed:ac:4b:2e:57:cd:e4:74:b8:66:
97:e9:eb:0b:1f:8c:5b:99:bb:f9:3a:c9:b4:71:0c:
9c:59:ff:47:22:da:4e:0d:26:ca:d9:d1:69:68:bb:
d5:01:83:8b:b3:91:25:58:58:78:4c:f9:35:f3:c8:
9c:76:46:2d:cf:87:3b:10:40:24:9f:b8:90:03:7f:
18:10:7f:d7:ab:69:a6:e5:4a:0b:88:2a:c2:7a:37:
c5:b6:b2:13:0f:a3:1b:ce:7a:f7:ce:b9:b9:06:46:
56:e9:a2:be:89:e5:64:f0:61:e4:cf:04:03:ed:0a:
58:af:8e:03:ed:d2:4e:88:9d:8a:2b:49:4c:42:6b:
8e:78:e8:ad:d6:c7:3f:90:8e:0a:e6:cc:c2:bf:48:
37:fb:07:2b:4f:65:e3:22:43:32:f6:77:39:6c:fb:
99:8b:ee:e9:aa:d1:15:47:e1:16:eb:3d:53:8c:4f:
28:71:7f:a4:93:98:80:c8:cc:42:83:fa:35:34:aa:
6d:59:08:6f:17:af:18:ee:44:55:af:0d:09:12:a3:
6a:78:98:94:cd:b6:6a:6c:29:a4:84:f6:73:20:5b:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:FA:E0:14:9F:81:DF:B9:3E:04:B9:9E:3D:47:19:A4:E3:E7:6D
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/04r64BSfgd-5PgS5nj1HGaTj520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.202.0/23
Signature Algorithm: sha256WithRSAEncryption
84:8d:6d:82:a1:4f:3e:ac:11:1d:b0:00:f4:7b:eb:70:47:8f:
e3:c3:0f:03:94:67:f8:dc:72:80:10:12:22:5f:60:c7:7e:ec:
5f:ca:62:ec:db:25:9b:25:8f:06:5a:e9:4d:60:17:76:2d:79:
cd:2a:3d:bf:1d:51:0b:10:95:0a:87:31:b7:35:32:b8:f0:2f:
92:1d:8d:fe:71:4d:c9:75:62:dc:0b:dd:1a:f0:9a:56:7b:e7:
7f:d8:1a:50:b4:a3:ac:bd:91:26:d7:da:e0:bf:e7:ba:86:79:
64:79:1f:51:5c:d6:f2:55:3d:0c:2d:9e:23:6b:a9:5f:23:45:
6a:2a:bf:65:82:18:16:ad:6f:5a:06:83:6c:6f:0d:78:3b:9f:
ac:ec:3c:6b:6d:79:2f:e6:6e:6a:ee:dd:71:fb:9d:79:f2:88:
df:5f:f4:cf:0b:46:46:33:0d:fc:49:b1:97:34:74:64:1d:25:
bd:20:c7:6e:d1:7a:fe:70:7c:12:17:3a:11:bb:89:96:1f:76:
5a:d0:34:fe:97:d3:40:6c:88:d2:03:1c:22:52:8d:fb:f0:28:
79:9a:58:10:35:3b:c6:46:1b:cb:4a:14:f1:8b:48:21:ed:2a:
3c:ac:69:80:43:56:2e:f5:5b:af:dd:ad:15:23:bb:38:09:4f:
5a:8e:1c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:53 2026 by rpki-client