Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/r97T0zrjjPPADnFxgjfEjKH0-vI.roa
File: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (raw, json)
Hash identifier: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=
Subject key identifier: AF:DE:D3:D3:3A:E3:8C:F3:C0:0E:71:71:82:37:C4:8C:A1:F4:FA:F2
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 019E44F308C57D75551F8C692B21F7E654E3
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/r97T0zrjjPPADnFxgjfEjKH0-vI.roa
Signing time: Wed 20 May 2026 10:33:58 +0000
ROA not before: Wed 20 May 2026 10:33:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211190
IP address blocks: 37.46.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:44:f3:08:c5:7d:75:55:1f:8c:69:2b:21:f7:e6:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: May 20 10:33:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afded3d33ae38cf3c00e71718237c48ca1f4faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:4e:b3:de:d9:a8:ce:af:69:be:de:45:d6:
95:ef:1b:1c:dd:87:8f:80:34:82:0a:3b:72:35:6a:
8e:1e:c4:f5:79:0a:3f:48:4c:04:63:03:fc:fa:4c:
1f:3a:2f:52:cb:fa:43:f8:e4:41:1e:92:d4:5a:81:
4b:0f:be:d0:c7:36:63:96:e7:aa:71:7f:9d:01:3e:
60:d3:f2:0f:01:28:3a:1f:89:86:65:80:f0:7c:98:
e9:89:ff:6e:66:f0:4b:50:c7:47:65:b1:d5:24:fc:
76:06:9e:be:81:67:ff:68:50:8c:6c:ce:e4:15:ca:
62:0d:aa:a3:58:d9:e7:04:e1:ce:1f:da:e0:74:80:
4e:75:0e:be:6f:4f:ba:b1:ce:e7:f4:7e:38:93:66:
77:ae:c9:a1:20:5e:e6:f5:25:ad:6d:a7:2e:1f:e1:
ab:d3:1d:a5:cc:27:d9:f8:37:2d:24:67:b3:87:78:
e0:72:47:6e:ce:1a:5c:da:fb:9f:21:61:fb:c0:a1:
b0:c6:9d:2b:27:66:25:10:e8:89:58:3b:3e:d3:af:
9b:57:2a:b8:13:0c:e7:d6:c6:5b:8b:6d:9a:fd:0e:
93:51:55:e4:9d:84:10:38:32:a2:32:04:54:66:7d:
b5:f9:34:f7:42:65:ac:43:18:47:6d:8c:8a:45:7b:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DE:D3:D3:3A:E3:8C:F3:C0:0E:71:71:82:37:C4:8C:A1:F4:FA:F2
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/r97T0zrjjPPADnFxgjfEjKH0-vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:32:bf:fa:da:ff:d1:22:aa:cc:e3:98:03:c6:63:c3:7b:32:
57:50:d5:1a:af:b7:db:4c:bd:d9:ed:bd:9b:95:fa:38:75:95:
9c:d0:44:09:19:b6:83:23:c2:8f:64:5f:4d:a7:9a:cf:89:93:
7c:f5:65:23:e3:86:40:89:e4:85:ed:7c:d8:76:c9:c7:04:a0:
9a:0a:03:f2:c9:45:d8:be:02:43:c3:c6:2b:31:fc:f5:60:f8:
ff:22:4a:83:b1:f5:50:01:20:c1:1e:e3:cf:57:8f:b1:74:15:
71:bb:a9:d4:2f:3d:6a:26:66:72:c8:bb:6c:3e:94:3c:dd:7e:
68:5a:f8:22:04:4b:8a:9c:b7:5f:3d:7f:5f:c9:27:98:e9:7a:
1d:80:f4:7d:17:3f:2f:1a:27:67:15:44:a6:e2:da:ab:87:f2:
8c:e9:a3:59:81:ad:2c:7b:d3:78:54:82:b4:9b:9d:fb:eb:34:
de:2c:5a:26:48:b9:a8:af:65:16:85:78:12:57:aa:09:89:db:
a7:6b:f0:ff:df:2d:0a:2f:a3:8c:6d:9b:20:ee:27:93:36:fd:
7d:3b:15:96:97:a0:4f:4d:2c:2b:a5:c2:83:c9:3c:b4:c8:9e:
5d:41:5f:95:0d:34:7d:32:25:d7:ca:e0:83:a0:1f:90:bd:b3:
84:f5:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:20 2026 by rpki-client