Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/dR2PlDh3cYP-vi5_XBcsLRj1q2Y.roa
File: dR2PlDh3cYP-vi5_XBcsLRj1q2Y.roa (raw, json)
Hash identifier: YQV6Gp2661FhATorBwriAXE3KgOr8Hc9j1LfrYaHB9o=
Subject key identifier: 75:1D:8F:94:38:77:71:83:FE:BE:2E:7F:5C:17:2C:2D:18:F5:AB:66
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F2369393541954F67AA09E2D7C9BEE31B
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/dR2PlDh3cYP-vi5_XBcsLRj1q2Y.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199436
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:39:35:41:95:4f:67:aa:09:e2:d7:c9:be:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=751d8f9438777183febe2e7f5c172c2d18f5ab66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:4e:4a:2b:3c:69:2d:ed:52:73:e3:0b:ec:
23:00:c9:3b:ce:31:b4:79:ac:65:c1:fa:c6:41:e4:
32:78:eb:a6:a0:df:23:bb:46:93:e9:67:e0:58:97:
81:dd:e5:35:7f:6f:3d:78:6d:89:5f:f8:12:bb:ea:
34:51:c7:c4:9b:b3:c4:bf:07:25:5b:2e:e2:64:17:
f7:00:a3:56:ff:ef:d6:91:18:41:50:0f:f7:f8:20:
af:ae:17:d2:e7:23:ed:7f:60:b5:b5:55:63:73:03:
80:0a:ee:80:23:6b:fa:88:de:0b:ad:68:e2:35:f0:
40:08:79:6f:69:f1:47:01:40:c7:62:ba:fd:79:26:
72:c8:49:1a:60:80:5c:dc:38:07:b7:bb:d9:30:0a:
8e:83:b5:5e:27:b5:34:2a:7c:df:93:d2:2e:08:9f:
ae:0b:0b:2e:3b:bc:46:8c:5c:4c:5e:5e:e9:54:ff:
10:7e:8c:de:17:c5:40:f1:2a:0e:30:5a:1e:8d:b4:
94:0f:45:ce:21:b8:53:e9:be:0e:bd:2f:13:53:e8:
1a:ac:52:7d:ef:b1:0b:8f:56:ce:7f:59:20:ec:87:
a5:5e:ee:ea:8c:e6:63:1b:6e:92:ef:26:f6:17:bc:
31:61:cf:80:27:ae:0d:08:fa:64:f7:5c:88:16:b1:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:8F:94:38:77:71:83:FE:BE:2E:7F:5C:17:2C:2D:18:F5:AB:66
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/dR2PlDh3cYP-vi5_XBcsLRj1q2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:b8:0f:4c:d4:60:e5:9f:46:3a:52:84:25:f5:bf:54:47:e7:
0a:c5:95:f9:37:21:50:60:65:4f:d3:36:25:06:3e:f7:37:f8:
dc:3f:a6:bf:a2:62:6b:6a:6d:39:92:40:c5:cd:3b:1d:fa:81:
31:8f:2a:3e:e9:66:6d:48:2d:f2:ca:7f:b0:2a:06:b2:a0:32:
d7:be:e4:54:2e:b6:61:28:1f:3e:9d:27:62:b8:37:ba:db:e0:
18:0e:83:5c:1c:46:bb:89:5a:e1:eb:b0:ce:6f:a2:2b:b7:43:
39:58:c9:f3:44:11:f5:b4:34:c7:d4:0d:c3:27:c6:4c:5d:44:
d2:3f:c4:a9:01:6c:de:ef:a1:78:61:04:f6:e0:3f:c6:04:79:
f5:c3:f0:30:48:ec:0f:0c:21:2c:b9:1e:7b:20:37:3a:e3:58:
00:b9:82:89:1f:a3:29:e3:df:2c:cf:ac:63:32:01:06:21:6d:
5f:a8:e9:30:32:65:e7:8a:5d:cb:70:79:cc:0d:79:76:4c:2f:
b5:1a:33:88:35:ac:ce:e7:a4:dd:9f:5a:31:67:5c:84:2f:64:
58:04:f7:e7:1c:2c:59:18:42:97:dc:df:e7:e1:8e:a5:54:75:
69:40:26:f6:db:f2:74:7d:50:7f:37:42:0a:7f:f3:4f:a6:ac:
c7:c7:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 04:28:22 2026 by rpki-client