Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0FaqYlr9KAk4_T57NHEG_oNuaHw.roa
File: 0FaqYlr9KAk4_T57NHEG_oNuaHw.roa (raw, json)
Hash identifier: COVCMMI9J8zaNTVpRqu2I7E6PzoKi92yvqnulWBZJOE=
Subject key identifier: D0:56:AA:62:5A:FD:28:09:38:FD:3E:7B:34:71:06:FE:83:6E:68:7C
Certificate issuer: /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial: 019F23686EE71DA06E4D9F6CA4A04F5217F0
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0FaqYlr9KAk4_T57NHEG_oNuaHw.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 140.150.9.0/24 maxlen: 24
140.150.17.0/24 maxlen: 24
146.103.69.0/24 maxlen: 24
146.103.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6e:e7:1d:a0:6e:4d:9f:6c:a4:a0:4f:52:17:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d056aa625afd280938fd3e7b347106fe836e687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3c:47:c2:f2:08:71:b6:dc:ec:f6:b5:60:50:
59:72:ac:a6:40:35:30:72:34:69:ab:e9:ed:b1:2b:
a4:53:13:cc:3c:fe:14:e1:f2:5e:46:31:c5:43:e5:
51:9f:d6:b7:37:e3:a1:6a:7f:8b:de:fd:55:17:d9:
11:7c:2d:cd:8d:00:dc:26:8b:9c:b8:d4:b1:19:90:
14:5d:b4:d1:e8:c5:b7:4f:c8:c3:d9:49:60:a1:05:
98:8d:8d:73:18:c6:9d:31:89:9c:77:76:de:2c:8c:
5a:78:5e:54:ba:5c:11:be:65:56:0f:30:ec:81:aa:
19:89:c8:8f:08:6a:dc:a7:6c:50:e0:4a:ef:69:17:
0c:8a:e6:cf:40:43:d3:ce:f0:77:79:f4:bf:bc:69:
bb:c1:9a:07:82:84:c6:9e:6e:3a:6f:96:ff:bc:07:
39:96:ae:ec:bd:f2:8b:5a:52:ca:aa:a9:02:2d:30:
ed:06:b8:a6:52:d4:b7:b2:87:40:cf:6e:fd:7a:7c:
7f:28:8f:31:f2:fe:54:64:d7:13:e3:7b:3c:5a:22:
f9:c1:93:ac:ba:03:9a:1b:50:e3:38:4e:64:03:4d:
e4:96:10:43:e0:c9:4c:9a:91:8a:5b:57:2e:18:eb:
ad:5d:ae:6f:80:40:3f:8a:b3:20:f1:43:02:fb:e4:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:AA:62:5A:FD:28:09:38:FD:3E:7B:34:71:06:FE:83:6E:68:7C
X509v3 Authority Key Identifier:
keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0FaqYlr9KAk4_T57NHEG_oNuaHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.9.0/24
140.150.17.0/24
146.103.69.0-146.103.70.255
Signature Algorithm: sha256WithRSAEncryption
81:24:a6:2b:9a:2d:b2:4b:54:a2:4e:de:04:ca:f8:09:ac:79:
e3:99:ef:21:d8:46:a9:38:85:9b:92:95:cd:b3:4b:94:53:92:
68:4a:e5:3f:1c:d7:3b:a9:9d:fc:dd:7f:28:b9:47:d1:e1:cc:
72:0a:85:8b:9b:dd:8e:0d:75:50:6e:2a:68:fd:36:72:da:b1:
28:95:36:93:40:01:e3:01:16:10:54:6f:28:07:39:04:25:47:
2b:31:c8:96:40:53:ce:ee:8a:ba:63:e5:5b:85:96:fe:85:52:
8e:de:2d:4c:a5:40:00:19:ff:f1:a2:11:5e:82:53:9a:dc:bc:
51:2d:bc:99:01:5a:ce:53:74:f2:20:ed:c0:43:49:5d:17:a0:
8f:af:e3:4e:7a:52:47:4a:7a:1c:30:dc:60:be:ab:a6:3a:8f:
11:7b:d0:e0:92:da:6a:c7:43:c6:10:19:3e:d4:62:a8:f0:1f:
07:8b:fc:72:b5:0a:b5:cb:ed:fd:5f:a5:c9:0b:b4:67:40:dd:
b2:56:a9:be:05:6f:85:fa:6b:eb:9f:50:7e:a3:8e:7e:77:c7:
46:2b:86:ad:82:ac:62:7c:e4:5f:d0:29:07:2d:47:2d:a1:95:
09:ac:15:82:2e:eb:cf:c3:ae:14:2a:03:31:d7:98:64:60:e7:
03:0e:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:37 2026 by rpki-client