Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/d4ZsetDOK1N8Oc6-p-HftKevwhU.roa
File: d4ZsetDOK1N8Oc6-p-HftKevwhU.roa (raw, json)
Hash identifier: 0L55RAM7hPd5rdjKfZF2PwQWl976vJkt47d6mV+kYso=
Subject key identifier: 77:86:6C:7A:D0:CE:2B:53:7C:39:CE:BE:A7:E1:DF:B4:A7:AF:C2:15
Certificate issuer: /CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Certificate serial: 019FFFDA0C299DF290391686B8943983A2FD
Authority key identifier: EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/d4ZsetDOK1N8Oc6-p-HftKevwhU.roa
Signing time: Fri 14 Aug 2026 10:38:27 +0000
ROA not before: Fri 14 Aug 2026 10:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 93.190.72.0/21 maxlen: 24
185.70.48.0/22 maxlen: 24
2a05:2740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:da:0c:29:9d:f2:90:39:16:86:b8:94:39:83:a2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab476f677cd0c3298d2811e60f48e1b29b3afef
Validity
Not Before: Aug 14 10:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77866c7ad0ce2b537c39cebea7e1dfb4a7afc215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:e4:cb:7b:00:5d:cf:d2:ae:b8:2e:5e:7c:
4d:be:20:b3:ee:ec:3b:43:d9:58:67:bb:05:9e:63:
51:29:00:d5:67:eb:4e:29:a7:d9:3e:f7:75:d3:e9:
fc:24:11:42:68:8e:01:26:d3:18:2a:c4:94:66:8a:
7f:e2:0d:da:52:5d:d0:11:d6:5f:ea:ef:82:a4:6a:
7b:80:47:4d:65:80:8e:9e:0d:47:9f:ca:de:31:bc:
de:94:9f:f5:e3:0f:01:ff:29:e7:dc:b1:f3:01:fe:
fe:f7:8f:10:6f:68:91:93:9f:89:d9:b8:9e:82:7b:
b0:2b:3f:a5:49:bd:ec:a0:ea:a9:8b:1a:ad:39:22:
99:94:27:67:93:0d:57:9b:ee:3c:d4:88:d0:d5:e6:
22:59:f4:cc:b1:5d:4f:ff:87:9f:ff:7d:47:24:63:
b8:64:06:d0:3d:3b:b9:d0:85:7f:68:2c:3e:82:a0:
1b:22:14:28:e9:f9:03:2b:19:8a:23:3a:cf:4c:1b:
c7:07:10:55:cb:38:f2:ab:3e:11:f8:6d:df:4d:70:
ba:ab:b4:15:76:47:ce:ee:dd:5b:ca:46:09:6e:ff:
83:98:b3:07:48:f2:d8:9a:1c:79:c1:c9:c6:d1:63:
4c:f6:3e:8e:eb:de:28:25:c0:3c:15:46:33:15:9f:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:86:6C:7A:D0:CE:2B:53:7C:39:CE:BE:A7:E1:DF:B4:A7:AF:C2:15
X509v3 Authority Key Identifier:
keyid:EA:B4:76:F6:77:CD:0C:32:98:D2:81:1E:60:F4:8E:1B:29:B3:AF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rR29nfNDDKY0oEeYPSOGymzr-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/d4ZsetDOK1N8Oc6-p-HftKevwhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/657a92-6220-4425-8899-07f1950d8894/1/6rR29nfNDDKY0oEeYPSOGymzr-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.72.0/21
185.70.48.0/22
IPv6:
2a05:2740::/29
Signature Algorithm: sha256WithRSAEncryption
5e:7c:d8:e4:3f:c8:55:95:c6:5b:d2:68:05:e1:80:23:82:a6:
e0:40:84:27:4b:d7:ba:1c:2e:3f:7d:12:94:8e:a7:1d:0a:ad:
e3:89:2d:34:31:46:78:00:46:b5:99:a0:6d:c2:b8:f4:87:53:
fb:1c:83:12:bf:0c:f8:3c:14:d3:6d:5f:5b:57:73:d8:fd:e5:
ce:2c:32:1b:d6:ed:eb:43:76:ac:07:bf:6e:7a:19:3d:8a:2d:
36:73:38:d1:43:10:7d:2b:06:b7:1f:71:32:da:f0:71:ad:f2:
d6:f1:f0:65:ab:2d:b6:45:87:6c:a6:ef:66:01:e8:43:14:89:
b5:4e:4f:e7:b2:52:5a:9e:58:73:7e:c0:14:de:99:fa:4c:e1:
a0:85:1e:0c:2d:eb:ac:9f:01:19:7e:7f:5f:8a:c0:d5:99:79:
3e:1b:da:59:43:16:a5:de:09:8f:f1:7f:4f:1b:2e:ee:ae:50:
01:34:1c:d7:20:1a:2c:a6:f0:b2:61:00:70:14:f2:2d:80:ae:
12:3f:d2:0d:5d:93:92:c8:1d:fe:f2:41:4d:ff:83:ac:3b:2d:
d3:b1:ea:09:06:12:6a:62:c1:12:0c:e0:db:bb:b6:1b:4f:2d:
02:cb:47:aa:93:e1:7a:9d:ad:c0:e3:10:ea:4a:80:ba:50:a2:
b8:e9:14:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:44:22 2026 by rpki-client