Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/d7z8TwLlS3vreU1zRMAd0zM28Bg.roa
File: d7z8TwLlS3vreU1zRMAd0zM28Bg.roa (raw, json)
Hash identifier: xNI8ZsYvpaH/qY+V6WC5BKC0Y6wfNmacANSCIsjTHpQ=
Subject key identifier: 77:BC:FC:4F:02:E5:4B:7B:EB:79:4D:73:44:C0:1D:D3:33:36:F0:18
Certificate issuer: /CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Certificate serial: 019F23689D7D5751E53CC0FE184DC23E106B
Authority key identifier: 40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/d7z8TwLlS3vreU1zRMAd0zM28Bg.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16354
IP address blocks: 134.19.136.0/21 maxlen: 21
171.22.96.0/22 maxlen: 22
185.30.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9d:7d:57:51:e5:3c:c0:fe:18:4d:c2:3e:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77bcfc4f02e54b7beb794d7344c01dd33336f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:a1:8b:9c:55:6a:fb:82:65:0b:e5:27:b6:
14:92:d5:22:6d:12:08:5f:86:e0:da:3f:85:82:66:
51:95:08:41:54:4a:b8:53:ea:39:4f:74:18:a1:a7:
90:4f:5d:dd:b1:62:74:d1:b1:f9:d0:45:af:ef:db:
96:20:e4:9c:18:c8:22:5c:57:36:18:2f:5c:c7:4d:
e8:7e:f0:9e:a4:38:a6:e1:58:b3:18:57:ec:19:11:
d6:eb:06:90:cc:ea:5c:e5:c7:d2:30:c9:2b:42:26:
0b:ce:01:73:c4:89:12:90:51:a1:21:eb:3b:6a:f3:
ec:f8:ba:b0:71:15:e7:96:76:fb:9f:5c:8e:81:e0:
80:1d:0b:36:06:6d:2d:02:88:33:36:ff:d4:70:19:
d6:30:97:c3:bd:31:4f:35:2f:0a:af:48:15:3c:e0:
77:cb:03:1f:51:22:cb:32:73:07:cb:24:c8:a4:af:
ba:9a:fe:63:04:a9:98:12:0c:2c:54:3d:78:4a:c4:
a3:04:a9:56:9c:86:f4:de:01:83:88:9b:d7:c3:1d:
cb:3e:8f:a5:17:14:08:69:67:44:f2:ae:37:9e:cc:
19:5d:65:2f:d9:69:f9:e1:6b:82:7e:0b:65:f9:61:
e9:97:fa:81:03:70:92:18:7c:91:19:bf:be:98:bf:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BC:FC:4F:02:E5:4B:7B:EB:79:4D:73:44:C0:1D:D3:33:36:F0:18
X509v3 Authority Key Identifier:
keyid:40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/d7z8TwLlS3vreU1zRMAd0zM28Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.19.136.0/21
171.22.96.0/22
185.30.120.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ef:b7:a1:b0:17:69:49:9f:7b:2d:d6:f2:5d:04:60:29:f0:
f5:9a:df:2c:b3:ec:88:32:a6:1f:9d:98:1e:fa:e1:3a:a2:b8:
84:c4:86:0b:67:d9:86:a5:9d:b1:df:4b:3c:e5:ba:8f:2c:b2:
45:7e:93:0e:dc:5a:b7:09:0e:f8:8a:61:11:b2:2d:99:36:38:
2f:04:6e:06:2a:08:93:34:c9:40:23:37:61:ec:b9:a4:0f:b3:
57:7a:f3:b2:ba:84:32:8a:b1:b3:45:8c:b2:c4:98:d8:58:1f:
bd:aa:f1:88:be:5d:5c:5a:77:80:b6:f7:21:6f:ca:91:37:f4:
10:ce:10:ed:97:88:c3:41:18:5f:30:64:df:df:8a:29:f6:5f:
46:cc:df:85:d3:b9:ea:50:83:5d:35:88:42:99:38:de:11:54:
58:e5:28:45:a1:3e:8d:89:b8:c9:16:85:97:54:b6:e8:30:71:
91:c3:ed:c2:9f:52:dc:1d:b1:78:2e:16:12:d7:63:e5:da:13:
a2:7c:84:27:69:b8:31:9b:8b:d1:cc:8a:3e:d9:a4:12:3e:f1:
84:54:24:97:b5:fb:7a:9b:9d:ae:79:71:0f:34:da:19:86:d7:
9d:4e:50:d2:69:8c:03:fd:47:02:dd:7a:7b:25:c1:a2:0e:cf:
87:b9:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:00:10 2026 by rpki-client