Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/duR9uQ1SsCstwHLOlmLoUwdbMns.roa
File: duR9uQ1SsCstwHLOlmLoUwdbMns.roa (raw, json)
Hash identifier: yA4AsbUZ49Idd1b6bOSpb8V75FCHwuh/putB9VxYleY=
Subject key identifier: 76:E4:7D:B9:0D:52:B0:2B:2D:C0:72:CE:96:62:E8:53:07:5B:32:7B
Certificate issuer: /CN=a231d7b97a07676122f72e465091d23606ae66a2
Certificate serial: 019E2BA816E60A00162C91A6577DF6C26CA6
Authority key identifier: A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/duR9uQ1SsCstwHLOlmLoUwdbMns.roa
Signing time: Fri 15 May 2026 12:41:36 +0000
ROA not before: Fri 15 May 2026 12:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200456
IP address blocks: 217.179.4.0/24 maxlen: 24
217.179.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:a8:16:e6:0a:00:16:2c:91:a6:57:7d:f6:c2:6c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a231d7b97a07676122f72e465091d23606ae66a2
Validity
Not Before: May 15 12:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e47db90d52b02b2dc072ce9662e853075b327b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:c2:98:d8:2c:75:d2:fc:b3:3a:e4:d8:ca:
64:0b:a3:01:5b:e3:78:85:85:1d:a7:57:14:ba:dc:
20:df:c1:67:6a:96:53:d7:4a:df:42:58:35:76:6c:
a4:e5:40:5e:d4:d2:ef:bf:47:f6:41:c6:57:1e:79:
39:d0:cf:9d:58:bc:d8:87:33:81:a7:92:2e:9b:06:
20:e0:50:45:30:8e:7b:07:7d:d1:a7:4b:c5:ed:fd:
b6:e1:33:14:aa:e9:a5:ae:98:cf:94:b3:68:5e:be:
c0:48:f8:4b:ba:87:4d:7e:48:95:c9:84:00:b9:22:
16:aa:70:82:ed:cd:6d:fd:d3:0a:2b:33:dd:74:6a:
e8:f9:7c:c4:67:2a:13:5b:49:4f:9b:ea:3a:e5:f2:
c1:77:bf:1c:83:cc:70:ab:ac:86:96:86:e0:f4:22:
f9:a7:94:bc:17:0f:37:30:0c:27:11:0d:28:1f:30:
8b:06:83:1f:d0:ae:7a:58:77:64:bd:28:0e:38:c9:
a9:c0:6f:15:25:6c:78:5a:b5:96:64:d4:bf:6a:09:
8d:3e:96:58:e9:19:34:4b:c3:bc:59:1e:11:75:a1:
31:0b:7d:c2:3d:bf:ab:27:ca:b7:83:8e:8d:30:bb:
aa:b2:10:ca:f7:df:f2:8c:9c:23:03:95:f8:71:e7:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:7D:B9:0D:52:B0:2B:2D:C0:72:CE:96:62:E8:53:07:5B:32:7B
X509v3 Authority Key Identifier:
keyid:A2:31:D7:B9:7A:07:67:61:22:F7:2E:46:50:91:D2:36:06:AE:66:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/duR9uQ1SsCstwHLOlmLoUwdbMns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3666ed-1f81-4fe9-aa32-75c29067540a/1/ojHXuXoHZ2Ei9y5GUJHSNgauZqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.179.4.0/24
217.179.7.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a1:b2:15:e6:4d:95:3f:e2:9a:4c:ec:99:a0:42:26:a1:6e:
7f:e7:b3:d9:3a:cb:94:39:47:c3:cd:56:fe:9d:99:c6:f1:1e:
63:56:f2:65:a6:bb:47:05:e4:f4:35:f1:27:58:89:61:f7:74:
24:2b:64:e3:c7:24:da:0f:e4:fe:aa:97:00:97:bf:43:01:cb:
9c:c4:b4:3a:c6:cb:0c:cc:66:52:4f:1c:69:89:63:0a:1f:13:
f8:5c:0e:30:aa:ef:55:13:e1:4a:be:28:8d:2b:e9:05:ed:bb:
7e:cc:47:76:b5:e4:1e:53:db:ab:39:d7:b3:a2:33:ac:35:bf:
16:5a:1d:2a:00:67:6c:3b:f3:7e:43:9e:a6:c0:ac:32:71:b0:
5a:32:a6:df:32:d1:83:28:07:05:54:55:51:fb:00:22:99:45:
2d:84:ae:14:20:ec:87:df:a2:32:b1:c8:f3:d8:94:6a:bf:5f:
ed:75:cf:ff:77:85:39:84:e7:ad:44:45:80:7f:cb:eb:9f:81:
88:ab:31:7a:f2:ed:fe:20:bc:ed:96:72:29:92:61:bf:84:b4:
4f:31:09:78:79:77:37:42:47:d8:ca:6c:b0:77:dc:0d:5e:a8:
77:40:15:98:20:e3:c4:2a:f0:48:d0:9c:09:bf:0b:53:bc:cf:
24:e5:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:42 2026 by rpki-client