Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/C7upr3OThd3tXxD0Jp3efP87jfI.roa
File: C7upr3OThd3tXxD0Jp3efP87jfI.roa (raw, json)
Hash identifier: lEZFdASUU6/xOhjoa3o2AQ+zoANpIUUDUCbBj5Ku9pA=
Subject key identifier: 0B:BB:A9:AF:73:93:85:DD:ED:5F:10:F4:26:9D:DE:7C:FF:3B:8D:F2
Certificate issuer: /CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Certificate serial: 019F7117D234D81E4939E4562B62D6841C10
Authority key identifier: 0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/C7upr3OThd3tXxD0Jp3efP87jfI.roa
Signing time: Fri 17 Jul 2026 17:20:14 +0000
ROA not before: Fri 17 Jul 2026 17:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 45.67.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:17:d2:34:d8:1e:49:39:e4:56:2b:62:d6:84:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b247e73391ec9d6a2a46f2cb0b02fc994288f13
Validity
Not Before: Jul 17 17:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bbba9af739385dded5f10f4269dde7cff3b8df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:02:59:a4:de:04:96:ab:a1:a2:61:ed:01:5d:
49:a8:db:a2:c5:5c:30:e7:f4:25:f0:b4:21:50:8f:
cb:ed:a8:5b:6c:2c:13:1c:c7:8b:b9:e7:63:6d:0a:
f0:24:1a:27:23:1b:8e:27:8f:87:10:bc:e0:cc:b7:
5b:07:4d:12:20:aa:a5:e3:bf:f8:3f:63:2d:c0:c7:
e3:dd:08:cd:f5:e6:8e:85:a4:69:5a:d7:e7:4d:f4:
12:f3:c0:81:dc:5a:0b:eb:85:99:f2:48:17:d2:ae:
29:f0:be:e2:76:d4:6b:8a:ec:b5:71:6b:97:8d:97:
66:da:65:ff:3a:fb:c2:ce:01:96:b7:da:01:da:b1:
b6:05:b8:94:c8:40:e8:67:3e:fa:fc:00:d5:3c:68:
42:ea:25:3a:f0:87:4f:7b:d6:15:04:d9:b0:f5:93:
6f:5d:69:17:da:d9:3a:26:95:35:ea:a6:85:5b:bc:
f7:54:71:23:94:af:38:74:b1:ef:f1:44:ea:bc:58:
70:2e:ee:b4:3a:29:df:7c:de:ba:e5:f7:b4:8e:4e:
ef:6b:1c:c2:21:20:4e:29:60:d6:e9:3e:2d:48:ff:
cb:09:2d:3d:de:d4:e2:e9:93:fe:39:0b:92:0b:41:
b2:78:ac:39:60:a5:c4:46:89:a0:5e:9b:15:0f:57:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BB:A9:AF:73:93:85:DD:ED:5F:10:F4:26:9D:DE:7C:FF:3B:8D:F2
X509v3 Authority Key Identifier:
keyid:0B:24:7E:73:39:1E:C9:D6:A2:A4:6F:2C:B0:B0:2F:C9:94:28:8F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyR-czkeydaipG8ssLAvyZQojxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/C7upr3OThd3tXxD0Jp3efP87jfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b3fd40-b125-4282-b883-736789ee6fd0/1/CyR-czkeydaipG8ssLAvyZQojxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.52.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e8:d0:b8:1c:44:bf:fa:95:86:96:9c:3a:aa:ac:f4:27:76:
35:5c:44:a6:84:15:69:c5:70:1f:0a:c1:3a:67:4a:0a:58:ba:
d9:54:27:61:5a:8d:3d:88:21:15:75:e6:c9:d5:d1:d7:d2:af:
26:a3:da:62:5b:98:f1:5c:de:7c:59:0f:91:fa:bf:b1:2c:d6:
db:69:ab:01:06:50:31:2c:9e:35:41:21:81:48:44:7e:27:45:
f4:4b:54:0a:3e:7a:a5:67:0e:cb:78:39:d3:39:16:b2:b4:3f:
98:03:fc:79:e2:05:c2:55:3d:b8:62:bf:7b:92:7b:35:ba:de:
2f:5f:32:5a:8b:84:77:d2:20:be:41:96:fa:63:86:20:60:43:
70:8d:9e:20:37:12:55:51:81:83:ed:03:a8:a3:96:e3:6e:54:
9e:e7:f1:81:b1:2c:b2:c8:1d:4a:d6:4b:ed:60:e9:78:36:e5:
3f:56:4e:f8:3c:21:74:0d:07:13:89:57:d7:dd:90:77:21:31:
45:32:5c:ca:33:42:80:64:96:a3:39:36:2d:95:c5:cb:2c:75:
68:d8:07:1b:93:c1:cc:e4:39:a0:7a:c2:da:f3:4d:67:0e:27:
7c:33:65:b6:56:f1:79:c1:c8:4f:f4:ce:3d:46:b0:ce:e3:4f:
ac:5f:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:48 2026 by rpki-client