Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa
File: 7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa (raw, json)
Hash identifier: 7BMUVhvyY50Slydl26/j9TUmeiQb1ahox00oD5OJl90=
Subject key identifier: ED:A5:8F:3F:02:6C:2A:55:B8:16:2E:B1:37:F5:D7:B4:B2:1F:25:70
Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506
Certificate serial: 019FD0724146E11DB7C8E151DE0B7796044E
Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa
Signing time: Wed 05 Aug 2026 05:42:56 +0000
ROA not before: Wed 05 Aug 2026 05:42:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212379
IP address blocks: 217.175.199.0/24 maxlen: 24
2a01:190:1802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:72:41:46:e1:1d:b7:c8:e1:51:de:0b:77:96:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506
Validity
Not Before: Aug 5 05:42:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eda58f3f026c2a55b8162eb137f5d7b4b21f2570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:e8:2f:00:16:17:b4:91:ad:d4:26:94:d9:
6f:34:e9:9c:bf:96:fb:77:ef:3e:91:3c:4a:0b:43:
6c:ed:e3:84:2e:85:fc:22:46:fa:6b:de:3b:17:61:
39:69:97:49:45:fb:22:73:5c:97:b3:ff:43:33:14:
67:10:4b:f1:13:da:31:01:36:47:37:92:2c:e0:cc:
b4:ea:38:5c:74:95:a6:0d:d0:16:ed:5c:e8:75:e7:
1f:c2:e2:10:fb:1e:d6:49:ad:0a:65:d3:cf:a2:84:
81:2a:86:b2:4a:3d:6b:8e:fe:ed:47:95:fb:cf:48:
55:4e:c3:3e:66:75:d1:6b:a7:8a:f7:a5:0d:d8:a1:
1f:d5:de:9f:5b:f4:da:05:b4:a4:91:97:05:08:a0:
f1:f9:5a:3b:05:54:61:eb:d0:34:61:94:91:77:0b:
e0:64:32:21:bf:e8:87:cd:f2:1b:62:93:1e:8c:64:
4a:c4:92:85:90:ab:5c:70:62:e0:50:e7:ba:6e:e9:
5b:df:81:ca:a8:b4:ec:9e:29:d2:e6:35:69:32:05:
49:04:3f:fc:82:41:ec:5d:e9:22:2f:8e:d7:c2:fc:
17:f3:35:46:06:53:0c:01:cb:e0:18:20:aa:f2:0d:
d4:b1:1c:12:c7:d5:a0:52:ed:1e:54:43:58:6a:3f:
75:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:8F:3F:02:6C:2A:55:B8:16:2E:B1:37:F5:D7:B4:B2:1F:25:70
X509v3 Authority Key Identifier:
keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.175.199.0/24
IPv6:
2a01:190:1802::/48
Signature Algorithm: sha256WithRSAEncryption
db:a6:8c:f5:52:09:8a:23:07:96:74:d8:37:52:27:1d:3c:a3:
91:64:73:1b:59:22:f3:db:0a:8c:1b:44:04:4e:c0:75:08:9e:
c4:a1:a1:23:71:e5:cd:97:78:14:2f:91:23:09:bb:72:ec:49:
35:a0:19:00:61:0d:66:bb:af:3c:ff:50:ef:17:27:2f:32:ba:
4e:2a:16:aa:40:05:e4:d3:76:ba:c8:75:d1:62:8f:ef:96:c8:
b4:5c:f6:5a:cd:6c:16:c8:3c:90:8d:d7:ef:aa:61:31:9d:e5:
c7:be:37:fc:c8:e9:e9:c5:24:42:91:1e:c5:4a:46:27:b2:6b:
e6:3f:a6:b0:e0:7b:c7:0a:a3:d4:d3:f6:40:1b:dd:e1:95:7f:
d7:29:de:72:d9:8e:01:c3:56:61:a7:8d:ed:d4:79:d0:4b:8c:
cd:9f:d2:0c:31:e4:20:c9:73:22:6d:fc:24:89:3d:2b:44:22:
f1:11:e3:ef:f4:0c:92:f6:1f:6f:bc:66:d4:5f:d4:14:62:e5:
c3:2f:35:29:f9:a4:c6:f6:f7:3f:ae:f0:15:81:00:8c:27:cf:
0a:37:3a:6a:eb:bf:aa:9c:27:1f:63:ab:32:33:3f:6f:98:09:
a0:63:b2:55:9e:70:4d:23:27:f7:15:c1:10:1f:b2:60:a8:0f:
fd:56:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:46 2026 by rpki-client