Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dI4l3rVA1R2d9GEeOfxuH0__cjM.roa
File: dI4l3rVA1R2d9GEeOfxuH0__cjM.roa (raw, json)
Hash identifier: e/9rIsyNOvq2ikL7IWZjBodce5+tbnftj5+dpPekOpI=
Subject key identifier: 74:8E:25:DE:B5:40:D5:1D:9D:F4:61:1E:39:FC:6E:1F:4F:FF:72:33
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F2368445E92B249D01E8F795713AA3E01
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dI4l3rVA1R2d9GEeOfxuH0__cjM.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49988
IP address blocks: 85.198.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:44:5e:92:b2:49:d0:1e:8f:79:57:13:aa:3e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=748e25deb540d51d9df4611e39fc6e1f4fff7233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:b7:fb:6a:b6:5a:e1:15:8e:48:e5:32:f2:
66:8b:9b:0b:bb:fd:93:65:55:64:8c:83:2c:d1:b4:
a6:3c:29:11:c2:36:02:03:2f:d4:05:86:90:66:54:
e8:3b:8b:f6:b9:11:11:a3:51:b1:86:c9:66:37:90:
7e:1c:12:13:7d:05:fb:f8:90:9e:36:6b:60:04:14:
52:ea:4a:6f:68:50:25:7f:14:2b:f5:9b:95:06:1a:
ab:c5:15:3e:ff:ad:eb:8e:a1:90:5d:1d:50:ee:a8:
25:65:c7:18:38:be:84:e1:12:8b:98:85:d4:f1:a6:
c1:7f:56:b6:5c:27:b3:b6:f5:3d:19:22:5b:06:c9:
f5:c9:38:bd:4f:73:55:13:e6:56:d0:a5:b6:54:31:
f9:c8:52:76:7f:32:33:41:fb:53:49:41:76:ee:72:
fb:d8:5d:1f:a0:0c:47:aa:50:37:5d:2d:b4:df:5d:
9d:35:e5:12:5c:81:48:64:58:c2:6d:cb:d0:20:b4:
fb:00:f4:56:cc:f4:3f:69:7d:d7:8e:73:1a:40:dc:
cf:0e:86:aa:81:ff:ce:5a:1c:3a:ef:63:b5:bb:e4:
2c:03:a8:74:5e:5b:4f:5e:b7:7f:d1:96:00:c7:9d:
2b:12:8c:f0:3a:69:90:cc:2f:59:2c:59:09:fe:0a:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8E:25:DE:B5:40:D5:1D:9D:F4:61:1E:39:FC:6E:1F:4F:FF:72:33
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dI4l3rVA1R2d9GEeOfxuH0__cjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a3:6a:89:98:4d:ce:f3:36:e9:95:0d:31:1d:db:49:64:ae:
f4:2b:91:52:73:08:03:fd:d7:0e:00:38:cb:a8:88:5b:3f:e0:
42:89:55:0d:0a:14:ab:9b:66:1c:1d:1f:66:26:7b:10:3b:20:
b4:0c:ed:28:74:09:e8:fa:48:ac:c7:fd:9b:1b:4f:21:15:25:
3c:cd:52:a4:b0:ef:57:45:d3:a7:5d:91:98:93:16:dc:3d:bf:
48:71:f1:51:fc:1f:7f:19:23:e0:ed:c8:dc:9f:69:86:55:97:
82:4b:f9:83:18:b3:ea:a4:5d:42:93:bc:7d:ae:20:04:6a:1c:
ea:e2:11:04:0a:c3:24:ab:89:c3:a5:0c:31:94:e3:c9:31:59:
18:23:97:f4:bb:d1:59:4d:85:65:56:c7:79:9b:1c:e8:ca:da:
90:25:8b:de:e8:4a:c3:7f:53:4e:55:d8:75:c2:84:3e:0a:27:
55:7d:b9:4e:c0:a8:9e:9a:4d:13:05:90:d7:3a:f1:ec:85:f4:
1b:15:27:25:05:ce:09:69:7c:d6:d7:fa:35:9e:1d:33:55:18:
3f:5c:9f:19:18:bd:b5:a9:5d:28:77:db:a7:61:7a:3d:4e:f1:
43:82:94:f3:81:db:c9:20:a7:62:65:ee:71:9e:25:ac:57:95:
0a:14:2f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:55 2026 by rpki-client