Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa
File: yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa (raw, json)
Hash identifier: Nm0h82jqL4Nvgoi4mPrldwTgDk33jTBjxspRQ87cyk0=
Subject key identifier: C8:4D:3F:42:0F:14:89:B2:74:05:8D:22:62:CD:C3:C3:0F:C3:FB:1F
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F236845EBB1FF3AB6C4B7FD69BFAFA85F
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64419
IP address blocks: 83.217.198.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:eb:b1:ff:3a:b6:c4:b7:fd:69:bf:af:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c84d3f420f1489b274058d2262cdc3c30fc3fb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:b6:f6:b1:c6:ea:fc:fc:c1:f3:be:d6:4d:
13:17:5e:00:bc:bb:41:20:10:45:ec:53:fd:a7:f6:
32:ee:c0:85:4b:49:5d:23:91:83:60:5f:9f:09:81:
4c:33:18:e9:10:57:60:bc:d6:db:16:ec:3f:f0:56:
01:28:be:86:9a:74:36:8d:7a:7c:fb:86:59:35:c5:
37:21:4b:6d:9f:b0:18:96:af:cc:58:74:d8:79:96:
8d:7a:99:62:15:b9:9c:13:7b:0a:29:d6:5a:11:db:
ab:1b:5b:76:43:39:e6:69:9f:d6:cf:74:e1:e6:a7:
09:39:6e:b0:6c:65:3f:10:7a:b7:a7:7c:ee:61:2f:
fc:d4:2d:0b:ef:4f:55:6b:b2:12:eb:d4:aa:e1:35:
67:fe:a8:0c:cc:0d:1a:cb:3d:fa:83:60:eb:56:0c:
d4:49:e7:dd:64:81:7c:95:c6:9c:0a:97:4b:74:dd:
10:5b:e0:1d:6f:ea:f7:a9:77:f3:23:4b:60:61:39:
e9:15:ff:1e:7a:7d:d1:27:79:bd:1b:02:de:47:a4:
df:f9:9d:ba:70:c1:e0:0c:4d:43:f5:57:e2:75:ee:
74:cb:b4:95:10:6e:f5:d8:c6:72:64:9e:b1:e4:20:
38:d9:69:02:c4:49:9d:4f:2e:b4:fa:eb:6e:e6:ef:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:3F:42:0F:14:89:B2:74:05:8D:22:62:CD:C3:C3:0F:C3:FB:1F
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/yE0_Qg8UibJ0BY0iYs3Dww_D-x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.198.0/23
Signature Algorithm: sha256WithRSAEncryption
40:5e:d1:da:d4:c8:e2:11:d4:a2:c2:64:29:dd:56:c8:29:1f:
77:1c:60:e4:b0:c3:74:6e:ac:a2:5b:d2:87:f3:41:2e:9d:33:
6e:52:d5:5a:ee:0e:76:d8:34:e3:b7:5d:6a:59:f5:39:48:c6:
af:7d:7b:d3:cf:05:a4:88:7a:5f:f3:a0:da:3d:76:22:a6:b9:
c1:36:a0:e6:2a:4b:a2:48:e3:14:d2:e4:4e:c7:4b:a5:7d:33:
5f:4a:ae:3c:17:44:b6:33:58:b2:8f:52:0b:f4:3a:25:52:b3:
93:8a:99:6f:96:23:21:ca:e6:04:5f:74:3d:7e:5f:cf:0d:1f:
ca:8b:b8:b1:9b:32:29:02:52:50:27:41:09:6c:59:7e:63:86:
e3:dd:c7:b4:b3:55:08:d5:cd:77:cf:d3:39:9e:e3:87:fa:96:
dc:65:7e:8d:5d:25:4f:ad:72:80:80:82:63:92:ac:06:4c:c0:
23:e8:89:b0:9c:18:f9:6f:6c:b6:f2:3b:79:71:c8:61:fa:be:
9a:a9:d4:82:4e:d4:46:90:50:2f:d0:03:c9:43:ea:ad:64:9f:
0d:02:ca:f1:bd:37:d3:16:ec:37:3d:8c:c2:41:2c:3d:8f:a9:
d4:a3:cf:60:a8:b6:42:ce:ef:f5:28:9e:a2:51:71:ed:6e:31:
33:5c:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:36 2026 by rpki-client