Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_7HyO8s2SIN7IxERWoTMZlNTfqQ.roa
File: _7HyO8s2SIN7IxERWoTMZlNTfqQ.roa (raw, json)
Hash identifier: dWsXnMxTEhfzFXIisHqz6O3ehf+dfGXtvUDq/tG4ojA=
Subject key identifier: FF:B1:F2:3B:CB:36:48:83:7B:23:11:11:5A:84:CC:66:53:53:7E:A4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A05B6BE5B326C9D54B1D7A96DD5D60940C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_7HyO8s2SIN7IxERWoTMZlNTfqQ.roa
Signing time: Tue 01 Sep 2026 05:23:12 +0000
ROA not before: Tue 01 Sep 2026 05:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 45.9.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:6b:e5:b3:26:c9:d5:4b:1d:7a:96:dd:5d:60:94:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 1 05:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb1f23bcb3648837b2311115a84cc6653537ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:0a:8d:87:70:06:e7:c4:cc:a7:7a:1c:c0:
75:83:64:00:90:1e:88:07:11:b0:18:7f:b8:18:df:
6f:16:7e:6f:72:56:b6:49:f6:69:77:cd:0c:5b:e0:
38:d4:75:e1:79:76:0f:7a:02:fe:1e:5c:00:64:e0:
4e:f6:e9:28:9f:50:9c:61:ed:f8:81:e8:5c:3b:48:
4c:d8:e1:30:24:f3:29:57:c9:71:6a:60:9e:1a:3a:
ad:f0:bf:c6:c9:2d:3e:48:62:a9:0b:1c:1b:61:5e:
be:3a:23:c2:b8:47:0d:38:30:e3:f1:c6:c7:be:09:
45:4b:a4:5c:17:a2:53:9f:a7:12:bc:f4:3d:9d:2d:
9d:e3:c3:3e:95:95:53:2f:9f:2d:cf:29:43:9a:45:
1b:e0:72:32:ae:50:5b:c6:cb:95:d5:0a:fe:22:24:
5c:a7:55:01:db:e7:72:35:7c:c2:da:2f:45:4e:11:
11:0f:b7:e5:e0:e9:1d:64:ec:5c:2f:6d:70:0d:40:
1b:2d:37:ad:a6:6e:4d:38:ea:ed:33:41:08:f6:96:
b9:31:af:ab:13:3e:ad:d8:55:71:9e:89:9d:7b:07:
55:58:34:0e:4b:60:a5:a1:60:36:d3:9c:ad:9e:0c:
77:5c:0a:13:3b:07:5f:76:50:b2:c7:19:ef:bc:f0:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B1:F2:3B:CB:36:48:83:7B:23:11:11:5A:84:CC:66:53:53:7E:A4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_7HyO8s2SIN7IxERWoTMZlNTfqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.0.0/24
Signature Algorithm: sha256WithRSAEncryption
20:93:73:d5:45:48:07:64:af:04:16:b6:2c:a5:6f:c3:98:99:
2f:1e:a2:93:70:b3:46:90:39:40:0c:63:bd:2c:d3:2e:53:16:
2b:b9:88:1c:8c:f4:c0:ca:68:e6:03:26:c2:04:6b:29:85:40:
13:ea:87:e4:03:eb:ce:2e:10:2e:57:e7:2b:92:b1:43:cd:d4:
f8:b7:08:6e:76:77:bd:f7:26:92:96:b8:6a:2b:bb:12:5a:f8:
a4:9b:0f:53:02:81:28:65:9c:81:ba:93:2d:be:83:d5:c9:69:
86:16:9c:22:e0:f1:c4:74:6b:a3:86:af:8d:fd:b1:2a:8c:8a:
d0:d5:7b:3f:79:c9:5a:c6:d2:60:e1:df:29:48:4d:23:34:66:
fc:38:06:a4:d4:7e:2b:14:64:b2:99:1c:f3:cc:33:89:46:c1:
65:9a:6d:2e:d2:49:fc:13:2a:32:f0:6b:b3:00:60:52:91:32:
21:1b:75:31:e3:b1:ec:bf:e8:12:dc:19:3f:75:2f:fe:50:a1:
7f:4d:af:b5:6a:8c:23:e4:a3:c7:1d:92:be:62:64:58:3c:85:
01:64:85:68:7b:80:fe:4b:2b:18:44:9d:e7:1d:22:52:77:a3:
33:50:70:cd:98:a1:33:cc:77:9a:20:15:d2:b6:b6:89:dd:52:
6d:3e:03:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:05 2026 by rpki-client