Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/F7WYsIxqqzriF50vyErOo4yduxs.roa
File: F7WYsIxqqzriF50vyErOo4yduxs.roa (raw, json)
Hash identifier: UzLANsa4cvItOv2fxNqau8ra2px2e8RIpMmdipONeLg=
Subject key identifier: 17:B5:98:B0:8C:6A:AB:3A:E2:17:9D:2F:C8:4A:CE:A3:8C:9D:BB:1B
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 019F1ED0BB5229A4CFD2C31BBEDDF3E4CBCB
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/F7WYsIxqqzriF50vyErOo4yduxs.roa
Signing time: Wed 01 Jul 2026 17:53:43 +0000
ROA not before: Wed 01 Jul 2026 17:53:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213953
IP address blocks: 77.104.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:d0:bb:52:29:a4:cf:d2:c3:1b:be:dd:f3:e4:cb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Jul 1 17:53:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17b598b08c6aab3ae2179d2fc84acea38c9dbb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:ad:89:11:26:ff:62:da:6b:8d:27:ad:53:
31:be:35:81:bc:6c:1f:22:6f:de:98:42:06:62:7c:
7f:b3:d4:eb:b1:1a:6c:18:53:a1:6a:4f:db:4d:5e:
9c:6f:e7:9b:7b:ed:ba:e9:69:77:6d:d7:91:fc:cd:
1d:57:28:eb:5d:61:b2:1b:88:19:85:3a:9b:af:89:
9f:31:a0:2c:d7:09:07:6d:de:f6:06:29:64:6e:d4:
0a:10:07:fa:a2:5a:eb:6a:26:2a:d5:68:a2:4b:08:
e7:8d:73:c0:0c:97:70:1e:3b:8e:14:76:f6:b1:a2:
e3:d2:2b:ae:6e:48:8d:81:1f:a2:cd:59:03:e1:8e:
b7:42:6a:62:4f:cf:79:59:d4:ad:90:f9:8a:30:a5:
eb:dd:1f:0b:79:fa:27:b7:67:b0:68:fb:47:91:41:
a9:c1:00:fd:8b:0e:17:7e:44:a3:41:5c:cd:f5:5a:
2a:3d:6f:a9:40:85:f9:1b:a5:51:e3:9e:65:64:c0:
ad:00:7a:65:8e:92:74:8b:91:f2:ab:da:cb:2d:0c:
0c:e3:52:e0:50:91:f3:ed:bb:24:9c:d6:0d:48:2a:
ed:20:4f:59:e2:8c:5e:7f:8c:f1:50:ee:3f:5c:3c:
f3:8b:c7:09:56:64:11:8b:da:96:a7:10:87:b1:4d:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:98:B0:8C:6A:AB:3A:E2:17:9D:2F:C8:4A:CE:A3:8C:9D:BB:1B
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/F7WYsIxqqzriF50vyErOo4yduxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d0:7e:60:7c:71:c1:8b:f5:48:92:3e:f3:47:f6:af:04:e3:
3c:ad:18:1f:c8:59:10:43:ac:40:e4:4b:c0:1a:b1:e5:e6:c9:
ba:3d:73:cd:a3:a1:99:ce:44:58:6b:e9:58:a2:ff:f9:4e:ec:
5c:84:76:2f:7b:aa:a5:cc:81:7c:d2:15:2d:d6:ee:59:c7:ac:
bc:2e:a1:45:03:21:5b:d9:a2:54:08:7f:65:d9:74:99:38:68:
e3:91:c2:4d:84:14:42:7a:87:56:f8:e2:c3:cb:63:fd:93:f6:
1a:22:87:83:d4:8d:bb:bc:10:ff:aa:61:62:e1:de:f0:ef:98:
eb:7e:f8:20:74:88:00:db:29:cb:58:11:cd:9f:4c:67:1c:9f:
da:5a:f6:11:af:9c:5c:c0:04:2e:af:76:04:99:b5:21:8d:b3:
ab:a0:3d:da:04:4d:bc:ca:4d:69:83:f1:32:dc:ee:65:dc:b9:
49:16:ea:95:a0:f2:69:3d:e7:0f:6f:21:b2:fd:6d:36:85:20:
24:5e:55:fa:2c:0b:3c:23:e1:bb:8a:3c:92:9c:95:ad:c0:a2:
20:b1:8b:35:20:45:b9:e7:58:84:23:e9:30:35:81:f9:fa:88:
60:5e:39:92:c8:7c:16:3f:80:15:8b:2f:a0:70:98:65:24:f0:
a9:3e:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 09:56:12 2026 by rpki-client