Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EDXcPCi28Qle9HGNvN1QUdaHRvk.roa
File: EDXcPCi28Qle9HGNvN1QUdaHRvk.roa (raw, json)
Hash identifier: DveWNs2wF7FORVxq4TmksxbQzy1QmZcV0OFUQhAfNgk=
Subject key identifier: 10:35:DC:3C:28:B6:F1:09:5E:F4:71:8D:BC:DD:50:51:D6:87:46:F9
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F2368468D71E7E742682F5852F85AF943
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EDXcPCi28Qle9HGNvN1QUdaHRvk.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202248
IP address blocks: 83.217.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:46:8d:71:e7:e7:42:68:2f:58:52:f8:5a:f9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1035dc3c28b6f1095ef4718dbcdd5051d68746f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:ac:14:28:87:c1:26:76:8d:85:e1:2c:03:
f2:84:9e:07:83:eb:04:11:2f:5e:c6:aa:e2:ed:77:
b7:c6:42:9e:d6:0f:49:67:c7:ef:67:e4:cc:8c:73:
a6:a7:a7:e0:00:c0:71:14:b5:33:90:08:4a:51:bf:
e6:ee:fb:54:b0:f8:7f:9d:bd:65:35:10:49:86:b6:
5a:54:68:1a:40:95:48:db:6d:1d:21:31:04:37:6a:
3c:49:46:6d:9f:ef:4e:7b:33:c6:ef:b8:89:5c:24:
9a:c4:21:ec:3c:f7:90:c4:cc:8a:57:4b:d8:c6:49:
63:b9:1e:a6:ad:70:a7:96:a2:25:a6:91:37:8e:15:
17:b3:2d:30:e2:62:43:cd:d5:6c:63:75:5b:7b:20:
f5:dc:a1:00:12:22:df:c3:e4:42:36:b4:3c:0d:d0:
b4:33:de:24:77:10:a5:7d:90:a5:c8:fe:51:c9:cb:
c6:4e:db:19:9b:a4:88:28:ba:93:28:64:6f:6c:4c:
26:34:76:0f:51:66:dc:35:e2:65:3c:c7:ef:36:93:
22:89:8b:99:a8:f3:94:0a:9f:f6:b5:a5:41:c3:1b:
3a:ae:1e:4f:6a:f7:7b:85:bc:76:5c:ce:0a:8e:e1:
ff:fc:38:ba:b6:02:65:d0:97:c1:9a:af:f5:f1:92:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:DC:3C:28:B6:F1:09:5E:F4:71:8D:BC:DD:50:51:D6:87:46:F9
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/EDXcPCi28Qle9HGNvN1QUdaHRvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.196.0/23
Signature Algorithm: sha256WithRSAEncryption
62:7a:bc:be:c8:53:08:81:6b:6a:24:e9:c2:4f:d8:4a:b6:95:
03:06:b6:54:da:74:07:f3:0c:37:86:89:45:fb:b7:71:2a:60:
68:44:d3:02:e6:a7:61:1e:4d:8b:1d:b1:7e:9c:79:26:12:39:
36:da:e9:45:2d:84:7e:01:80:b1:dd:70:de:ad:59:5e:ce:68:
9b:f1:fa:33:14:30:9c:bf:2b:e6:92:44:01:70:b5:ec:12:d7:
94:eb:e1:c8:2d:bf:ad:64:d1:68:4c:4d:9f:10:c3:6d:12:27:
33:0d:76:23:04:1e:a4:f7:b3:fd:29:98:f6:9b:3d:9d:96:17:
72:23:b8:a7:b7:40:3f:1b:93:61:c1:eb:db:1d:7b:bb:ce:cf:
b8:b3:c3:74:7c:46:44:67:aa:6b:c5:f1:fd:69:00:7b:53:81:
16:94:4a:24:a7:bb:1e:da:8e:e7:3b:c1:01:8c:35:c5:00:e9:
8c:b7:7d:d7:e5:bf:c7:6b:37:08:0f:0b:38:98:57:d4:cd:4c:
b4:99:c0:41:d6:de:f4:3e:86:cb:72:b3:07:5f:df:21:9d:ce:
30:80:35:3c:a7:09:67:6e:7d:25:6c:f3:2f:5a:f8:a0:3b:93:
7f:4a:9d:4b:aa:d7:22:a7:9c:c1:18:a2:36:50:6e:6e:a8:0f:
71:12:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client