Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/P-rRYVXCTixpE8G0uFs42zL11uM.roa
File: P-rRYVXCTixpE8G0uFs42zL11uM.roa (raw, json)
Hash identifier: gGvo9uFElsBmxmc2f57ugvUF8fRFbGjjhlaZ3XTHPxM=
Subject key identifier: 3F:EA:D1:61:55:C2:4E:2C:69:13:C1:B4:B8:5B:38:DB:32:F5:D6:E3
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019FF48D5660B42AD122A56309A9E17BB4B1
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/P-rRYVXCTixpE8G0uFs42zL11uM.roa
Signing time: Wed 12 Aug 2026 05:58:51 +0000
ROA not before: Wed 12 Aug 2026 05:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 176.53.19.0/24 maxlen: 24
176.53.20.0/24 maxlen: 24
176.53.23.0/24 maxlen: 24
213.128.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:8d:56:60:b4:2a:d1:22:a5:63:09:a9:e1:7b:b4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Aug 12 05:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fead16155c24e2c6913c1b4b85b38db32f5d6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:4e:2f:17:2e:80:9f:44:ee:b4:a6:fd:b5:
3b:21:8e:ef:e1:85:51:2e:fa:8d:27:23:fe:43:ad:
47:56:00:37:7d:ec:25:04:ea:eb:85:38:b7:93:3f:
9f:fe:2d:ce:65:0d:b1:f2:87:7a:0b:34:cd:08:f2:
b5:db:af:4a:56:f6:96:52:10:49:69:41:85:b0:8c:
8d:40:8e:25:67:8c:50:0e:69:d2:a7:98:a3:66:0c:
3e:b7:4d:16:b4:50:79:90:1f:c5:a3:bb:11:c2:44:
cb:00:12:2b:68:74:d5:aa:3d:a1:9b:14:b1:d2:27:
fd:e3:6d:db:ee:e3:7b:70:aa:5e:99:a5:1f:7e:53:
cd:d0:4c:fe:65:bd:1f:09:fa:ca:38:f5:1f:34:2c:
23:88:b3:e4:8b:93:2a:b5:d4:12:b6:94:80:4c:eb:
16:54:42:3f:63:7d:88:8e:bc:8e:9a:ef:4c:e0:57:
6e:ab:67:e8:c0:f2:a9:ae:bd:d0:75:2d:75:09:e4:
7f:0b:00:b6:51:df:55:ce:2d:44:59:42:fd:ea:30:
70:da:fa:fb:de:6d:10:e1:73:99:c0:6a:68:7b:e9:
b6:0b:1f:67:da:6e:6d:dd:e4:31:ff:a0:76:11:da:
47:31:fb:41:ae:5c:9c:2e:0c:2b:4c:67:47:df:59:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:D1:61:55:C2:4E:2C:69:13:C1:B4:B8:5B:38:DB:32:F5:D6:E3
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/P-rRYVXCTixpE8G0uFs42zL11uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.19.0-176.53.20.255
176.53.23.0/24
213.128.79.0/24
Signature Algorithm: sha256WithRSAEncryption
77:eb:87:23:6f:8b:d4:82:4d:ca:dc:b7:78:97:4f:d0:19:8d:
1c:e0:4f:f9:5d:f2:6c:bd:54:35:49:e3:bd:cd:f8:e1:3d:44:
4c:3b:31:06:a5:32:21:0a:b0:80:05:ef:fe:2f:b3:90:e4:bc:
4d:dc:9b:1f:be:89:5e:ee:e4:c5:27:ca:4e:f7:f5:5f:99:0c:
11:b5:17:d7:af:93:26:ce:f2:49:9a:d8:9b:6b:11:a6:60:dd:
f1:4e:b6:08:27:f5:a0:db:7d:9b:e2:be:17:1f:b8:4d:16:3f:
95:52:ff:80:16:2a:94:6c:19:66:60:c1:0c:f7:b4:6f:27:d7:
60:f2:5e:01:fb:f2:94:48:cb:da:45:e9:a4:61:ac:bf:da:70:
22:59:7a:a5:3f:2b:90:f1:2d:a3:b3:08:20:97:d2:c4:c1:ec:
cf:9e:76:d6:9b:53:17:f7:3d:57:4f:e8:cc:e5:1d:d1:e1:02:
8b:94:eb:aa:9f:f0:5b:4d:a0:76:6f:81:2e:2d:11:1d:76:38:
03:9f:f1:3c:08:00:1c:df:85:9c:1d:c2:12:89:2b:f7:da:c9:
8b:a2:b2:a6:4d:93:ac:a8:ee:69:da:f1:59:ee:94:04:37:66:
aa:11:85:64:dd:99:39:e4:44:a4:c7:85:a7:57:c7:9f:74:5f:
9f:22:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:10:29 2026 by rpki-client