Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/d_drZEi75KbJpWGAU1kWAxnMOt4.roa
File: d_drZEi75KbJpWGAU1kWAxnMOt4.roa (raw, json)
Hash identifier: mIzjxMSAtp0q7cgMj5Il09j/jt2ws8ao19RUeSe5pn0=
Subject key identifier: 77:F7:6B:64:48:BB:E4:A6:C9:A5:61:80:53:59:16:03:19:CC:3A:DE
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A04329D3603C51E978652B33BF9D849143
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/d_drZEi75KbJpWGAU1kWAxnMOt4.roa
Signing time: Thu 27 Aug 2026 12:20:09 +0000
ROA not before: Thu 27 Aug 2026 12:20:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 171.22.220.0/24 maxlen: 24
171.22.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 18:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:29:d3:60:3c:51:e9:78:65:2b:33:bf:9d:84:91:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 27 12:20:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77f76b6448bbe4a6c9a561805359160319cc3ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:8b:a5:63:3e:3d:05:69:89:85:5d:3a:82:
07:ab:aa:bc:ee:c0:d6:80:6b:ae:2b:84:cc:84:7c:
7c:f4:dc:ca:2b:5d:95:ee:99:ca:90:cf:69:ba:d3:
f8:97:b1:74:ae:ff:c9:bd:80:5a:2d:e6:99:04:2f:
d4:71:09:99:ad:40:c4:62:60:fe:a0:b1:4b:4e:72:
af:ca:62:86:16:24:1f:e7:a1:4e:f0:71:24:8f:e3:
03:45:87:cb:8a:4a:37:b9:3e:f9:56:cb:99:e0:76:
4b:34:c9:67:50:af:1e:39:af:79:26:b7:49:88:d6:
75:38:0d:14:2a:15:bb:37:c1:5d:21:a6:77:00:17:
3f:1b:ee:81:25:db:5c:bc:fa:c2:b3:e1:b4:69:6f:
eb:37:7b:c9:82:3c:db:00:d5:26:d4:7b:4c:4e:f0:
d0:ca:b3:7a:34:70:a8:56:f6:4b:da:f5:ba:8a:28:
93:d9:95:5a:3e:05:13:cf:8f:ed:7c:9e:94:d1:b8:
3b:05:f4:40:98:31:f2:db:28:d1:6c:25:dc:4a:32:
bd:44:21:60:8a:6e:85:0d:3c:68:31:75:30:e2:ab:
aa:08:d7:14:ed:b2:61:51:cb:8c:07:f4:ba:60:b2:
fe:2b:7b:7c:fc:4a:6d:e0:41:92:98:c7:9f:fd:0a:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:6B:64:48:BB:E4:A6:C9:A5:61:80:53:59:16:03:19:CC:3A:DE
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/d_drZEi75KbJpWGAU1kWAxnMOt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.220.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:21:b3:57:4b:2f:55:4b:bc:aa:27:21:79:80:8c:ee:f6:f4:
3a:16:a0:30:60:2c:e9:82:60:87:d1:79:46:9a:d9:c9:4f:66:
92:29:0d:30:52:91:66:82:1d:9c:47:46:c6:c4:93:ed:f1:53:
be:ec:36:72:38:a2:c0:7e:0b:9a:32:31:5c:78:8e:69:cd:da:
7d:69:38:d1:ed:fa:e5:d8:bd:fb:8b:81:a4:c3:ae:7d:ea:ea:
a9:42:03:7f:c3:6b:26:ca:33:00:c9:6c:ef:a5:5f:22:88:da:
b2:c5:8b:57:9c:e7:c6:ce:50:d5:38:3e:53:46:f2:57:86:d6:
bb:59:0b:90:5d:05:56:7f:d0:36:b2:89:a8:b5:50:3a:da:03:
94:f2:e9:ba:aa:60:96:63:c7:39:10:8f:95:1b:58:c0:6e:2b:
b1:e1:d7:89:d9:7d:2e:e9:7f:e4:fb:72:d9:7d:d8:18:27:2c:
8a:78:ed:8e:43:2f:9e:cf:d6:8c:2f:a9:60:b1:fb:56:66:ff:
a3:de:d2:65:6c:a2:06:69:42:bf:91:a7:1c:2e:c2:48:c5:e4:
80:41:b7:b9:5e:06:45:fe:0e:2e:22:ef:a3:37:d1:d7:2e:42:
37:d2:28:c7:83:2f:e1:75:8a:dd:cc:6b:de:20:76:72:a8:2f:
c0:2f:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:17 2026 by rpki-client