Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa
File: 1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa (raw, json)
Hash identifier: ZakCFcLNqaNCY/gWYoldNivincMH7px+JGQWSfeB/TQ=
Subject key identifier: D5:00:E1:19:4F:F3:2F:4C:3F:30:C3:A6:09:18:C2:38:E0:42:96:34
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F23684040B024568F1E2DAB914AB1F7F6
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 83.217.192.0/24 maxlen: 32
83.217.193.0/24 maxlen: 32
83.217.200.0/24 maxlen: 32
83.217.201.0/24 maxlen: 32
83.217.220.0/24 maxlen: 32
83.217.221.0/24 maxlen: 32
83.217.223.0/24 maxlen: 32
85.198.80.0/24 maxlen: 32
85.198.81.0/24 maxlen: 32
85.198.82.0/24 maxlen: 32
85.198.83.0/24 maxlen: 32
89.169.0.0/24 maxlen: 32
89.169.1.0/24 maxlen: 32
89.169.2.0/24 maxlen: 32
89.169.3.0/24 maxlen: 32
89.169.44.0/24 maxlen: 32
89.169.45.0/24 maxlen: 32
89.169.46.0/24 maxlen: 32
89.169.47.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:40:40:b0:24:56:8f:1e:2d:ab:91:4a:b1:f7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d500e1194ff32f4c3f30c3a60918c238e0429634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:0e:30:c7:a6:2a:ad:f1:eb:89:ac:26:f8:
f0:77:ad:1d:9e:a4:b6:45:c3:ad:6e:5c:5f:c8:04:
e9:de:33:f0:5e:76:e8:82:0b:26:6f:85:de:73:8f:
d5:b3:9a:7b:78:72:2c:28:87:a9:f4:b1:b2:bd:24:
ea:f9:38:19:14:dd:da:37:5f:cc:ed:98:53:0b:87:
c5:3a:d2:6c:b1:82:2d:3f:90:73:8d:28:a7:fc:12:
74:8b:8e:b0:8c:94:e6:34:44:5e:56:e3:f5:78:e7:
6e:90:c0:ed:d0:ad:37:39:1d:17:18:7f:4f:6c:cb:
52:3e:a1:6d:c4:81:97:51:4c:98:23:a6:10:5e:2f:
14:cc:7c:73:db:5e:0c:61:80:ef:18:e8:6b:5c:44:
ab:2f:92:2d:a1:1f:9b:97:f0:34:09:9c:29:a7:69:
15:87:c4:80:99:dc:3b:6d:c2:c2:90:74:a5:75:9e:
31:d8:0e:4e:40:ff:6f:99:24:bc:e1:6b:97:ee:e6:
1b:1b:0a:45:b2:82:88:84:ec:6a:37:ab:01:28:f3:
a5:92:5e:a4:8e:05:d5:3f:0d:ae:67:68:8c:df:bb:
80:07:be:ac:b7:d2:af:c6:54:f9:00:bf:04:a5:12:
6b:86:95:64:25:a3:ec:66:51:ce:0a:d5:ce:5a:78:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:00:E1:19:4F:F3:2F:4C:3F:30:C3:A6:09:18:C2:38:E0:42:96:34
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/1QDhGU_zL0w_MMOmCRjCOOBCljQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.192.0/23
83.217.200.0/23
83.217.220.0/23
83.217.223.0/24
85.198.80.0/22
89.169.0.0/22
89.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
45:89:40:bd:72:c7:79:09:f3:86:c1:ed:26:63:87:51:9e:4d:
e2:9a:b9:e9:b9:02:9a:41:a8:87:34:e4:20:55:8e:72:de:9a:
42:52:fa:04:39:3c:9c:a8:26:c8:24:75:67:6f:3c:6b:3a:ff:
8c:c1:90:36:ef:8a:05:46:a3:be:9f:e0:07:d8:09:da:d4:f9:
fb:5b:38:93:96:33:dd:13:55:17:ad:76:d4:1d:91:14:a7:3b:
a5:01:90:7b:0d:6b:d2:20:67:8a:11:2f:63:50:68:78:ec:d3:
55:db:9a:51:ad:d0:06:6a:e3:c5:e3:79:97:e1:45:9c:9d:05:
d9:fd:85:03:d2:80:f5:00:4a:49:d9:6b:74:51:f3:cf:8b:1a:
94:58:6f:d1:a8:33:7a:90:eb:92:c4:84:46:fe:b4:6c:8e:49:
65:8a:11:6a:1a:33:26:3d:41:a0:3f:0d:91:d1:52:27:d1:71:
73:b2:a1:f8:08:40:d0:4a:0a:dd:0d:d4:82:c4:7f:ee:54:11:
d6:12:3a:68:ae:c1:64:1f:6e:60:35:15:50:c2:64:46:67:0b:
ab:ca:f7:77:c7:1c:03:93:84:b3:c0:80:11:4b:c3:f0:c6:09:
c3:e5:6d:d5:6c:5e:be:78:5e:5b:db:81:0d:f0:5f:34:05:9b:
9d:78:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client