Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W7DDkXRV3UXc1zhEH88npsjGDG8.roa
File: W7DDkXRV3UXc1zhEH88npsjGDG8.roa (raw, json)
Hash identifier: rACZoVeDREU9dw983gRNfMxaxnfU9Q4C9x3RJwrcEIQ=
Subject key identifier: 5B:B0:C3:91:74:55:DD:45:DC:D7:38:44:1F:CF:27:A6:C8:C6:0C:6F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F7513BA206F8B6FB7A8652CDBE26AA246
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W7DDkXRV3UXc1zhEH88npsjGDG8.roa
Signing time: Sat 18 Jul 2026 11:54:14 +0000
ROA not before: Sat 18 Jul 2026 11:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 82.197.200.0/23 maxlen: 24
84.245.26.0/23 maxlen: 24
2a0a:4c00::/29 maxlen: 29
2a11:2840::/29 maxlen: 29
2a11:3a40::/29 maxlen: 29
2a11:51c0::/29 maxlen: 29
2a11:6dc0::/29 maxlen: 29
2a11:9dc0::/29 maxlen: 29
2a11:c740::/29 maxlen: 29
2a11:eec0::/29 maxlen: 29
2a12:a80::/29 maxlen: 29
2a12:b00::/29 maxlen: 29
2a12:7400::/29 maxlen: 29
2a12:b900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:13:ba:20:6f:8b:6f:b7:a8:65:2c:db:e2:6a:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 18 11:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bb0c3917455dd45dcd738441fcf27a6c8c60c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:9b:62:e0:17:45:5f:6a:fb:55:81:da:3b:
a5:49:31:3d:a9:9d:4e:69:16:05:7a:7e:b0:56:27:
35:e9:48:8b:9e:b4:6b:fb:f1:24:26:8c:e3:5c:d8:
14:ae:8d:51:73:55:d5:68:e8:d3:ee:cf:b2:4c:05:
26:1b:c4:ad:4c:1f:e7:02:af:ce:4b:24:7e:d0:25:
23:33:44:cb:49:af:d8:87:69:18:0f:d5:c0:b1:f9:
a4:c8:05:40:58:fd:eb:12:64:bc:1f:80:91:94:42:
2f:b6:a6:9e:17:ac:35:96:58:9d:f4:b0:44:55:5d:
1c:c7:53:df:4f:9b:4f:82:ec:f0:2a:fa:b5:5f:8c:
c8:95:9b:e1:9e:fd:6e:6a:b7:7c:59:2b:d3:58:52:
f4:6b:28:f7:81:0c:40:3b:5f:a6:02:7d:97:09:2f:
1e:36:51:fd:80:a6:90:e5:f8:bd:46:2f:b3:7b:a7:
29:e9:31:80:d7:27:28:2e:52:95:01:04:1d:d7:bc:
1e:b7:e4:d9:b5:f7:fc:c2:a3:60:95:2c:c4:55:ee:
d0:b3:e0:c8:5f:a6:8e:97:bd:69:1a:fc:14:db:f3:
94:70:a8:60:46:bc:88:be:ae:5f:b6:2e:e7:df:be:
9b:a4:2e:49:87:ca:58:b3:df:74:04:d6:da:b6:29:
9e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:C3:91:74:55:DD:45:DC:D7:38:44:1F:CF:27:A6:C8:C6:0C:6F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W7DDkXRV3UXc1zhEH88npsjGDG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.200.0/23
84.245.26.0/23
IPv6:
2a0a:4c00::/29
2a11:2840::/29
2a11:3a40::/29
2a11:51c0::/29
2a11:6dc0::/29
2a11:9dc0::/29
2a11:c740::/29
2a11:eec0::/29
2a12:a80::/29
2a12:b00::/29
2a12:7400::/29
2a12:b900::/29
Signature Algorithm: sha256WithRSAEncryption
5f:f5:68:fd:24:21:1f:89:39:cd:4b:2c:db:12:04:e2:0b:37:
3c:8d:d2:48:1b:b5:d8:34:68:4a:c6:0c:70:1d:b6:9f:aa:ef:
5c:1e:6e:ab:6c:b9:b1:25:d0:74:c3:05:88:61:b9:60:35:7b:
b0:29:8a:db:26:a4:ed:7a:af:16:34:9f:db:3b:05:12:49:cb:
d8:cf:1b:ce:bd:d4:5c:79:32:e7:60:57:35:48:ef:e7:78:2b:
6f:d4:28:fe:8c:20:b2:c8:a3:07:a1:1b:84:b3:af:84:5d:28:
c8:15:93:b2:50:f3:00:19:c0:45:33:2c:b5:96:77:c5:13:e3:
7d:cb:33:4d:1f:35:f1:bc:ce:2b:27:9d:48:13:b6:ce:65:96:
79:02:e7:cc:ad:90:f9:05:84:e9:4d:a0:be:56:76:4a:56:cc:
5d:ee:20:d8:13:bb:1a:a5:e5:54:36:4f:17:54:e5:77:5c:b4:
96:71:99:c7:54:3c:41:50:d4:76:f1:20:2a:6b:78:1a:e6:12:
19:fe:bc:fe:99:2c:0b:15:c8:80:91:a8:63:d2:f8:cd:7d:90:
87:b8:21:ec:92:78:78:9a:16:87:b7:f5:bc:7a:b9:b6:75:96:
5d:a4:2f:ac:a6:31:d5:7b:7b:5f:50:c7:e9:9a:cd:ce:7c:9b:
55:52:44:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:57 2026 by rpki-client