Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/79P1nblmX5Sl5oZdwI0Dj3MUbys.roa
File: 79P1nblmX5Sl5oZdwI0Dj3MUbys.roa (raw, json)
Hash identifier: La6+lZpjnP/18h6j5GqiME+A/vxO0IF8qjUuVJayEN4=
Subject key identifier: EF:D3:F5:9D:B9:66:5F:94:A5:E6:86:5D:C0:8D:03:8F:73:14:6F:2B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019ED9CC09CF22ECF8EAF6FFB547E2F831F5
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/79P1nblmX5Sl5oZdwI0Dj3MUbys.roa
Signing time: Thu 18 Jun 2026 08:14:48 +0000
ROA not before: Thu 18 Jun 2026 08:14:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 161.104.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:cc:09:cf:22:ec:f8:ea:f6:ff:b5:47:e2:f8:31:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jun 18 08:14:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efd3f59db9665f94a5e6865dc08d038f73146f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:f7:9a:7f:53:16:c7:e6:bd:44:b2:b8:97:
f8:0e:54:55:fa:31:48:10:8c:36:59:69:69:91:89:
40:fa:22:f7:06:1c:9c:ba:11:96:b9:ef:fa:2a:2c:
73:76:70:ad:1c:eb:b8:3b:87:5d:5d:41:f2:4c:bc:
e4:5d:b5:58:a0:fc:0a:04:d9:18:81:be:31:fb:60:
23:86:24:59:ae:06:80:4b:6f:d5:1e:f8:28:77:2b:
2a:fe:42:58:bb:a8:bf:c8:60:be:57:af:40:94:c1:
00:c5:55:60:8b:32:aa:54:9f:de:7f:5b:64:89:ad:
d2:17:91:46:3f:9e:61:b7:03:62:79:1b:55:21:9d:
37:95:9a:d4:e3:e2:1c:25:e3:e0:81:41:48:3e:86:
f6:a4:55:64:b1:8a:c7:c7:15:68:48:81:3f:68:c5:
cf:6d:44:fe:ec:b1:75:0d:87:c5:88:75:d8:85:8c:
80:d0:36:e2:b2:21:91:d4:78:06:22:e3:3a:cf:be:
50:d6:b1:56:11:1d:ff:83:2d:c4:2c:7a:e0:40:69:
7f:7c:7c:45:53:1c:c6:94:1c:1c:c0:3f:b6:76:a6:
b7:7d:ef:83:8d:95:0c:0b:04:0a:e2:e5:fc:51:29:
59:d3:5a:28:05:c5:d0:c0:53:ae:66:b1:08:bd:7c:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D3:F5:9D:B9:66:5F:94:A5:E6:86:5D:C0:8D:03:8F:73:14:6F:2B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/79P1nblmX5Sl5oZdwI0Dj3MUbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.104.0.0/21
Signature Algorithm: sha256WithRSAEncryption
43:93:50:98:ea:55:d4:a4:d9:e5:3b:b9:76:e8:d1:a7:48:fd:
80:d1:c6:09:4b:41:71:0f:52:a8:b7:92:67:45:1c:6d:c6:98:
83:e5:48:ac:32:d5:73:38:1a:f6:2b:45:89:52:90:8b:6a:db:
b8:f6:c4:66:47:a8:2e:43:c4:13:bb:a4:7c:b3:e7:85:61:54:
4e:0c:df:e2:c5:b6:31:02:da:36:6b:7e:8c:ef:c1:58:7b:54:
69:9f:fe:bf:46:0c:08:c7:c9:d2:04:85:26:80:0c:3a:5a:b5:
37:71:ee:5e:63:17:a8:e5:fd:d6:c1:34:c4:5f:b6:0f:e6:df:
b0:5b:cf:53:bf:40:70:54:72:63:ea:9b:0f:2f:19:80:9b:21:
33:37:98:0c:f3:e4:25:57:68:f8:a8:83:6d:57:d4:a0:f5:94:
16:a6:39:6f:78:64:7f:5f:7b:4a:62:ec:21:3f:78:b8:08:c0:
d2:38:54:b7:e4:35:52:b0:56:eb:de:8d:a9:59:c8:7b:a0:a6:
2b:de:50:2f:27:dd:bf:37:bb:b5:e5:2a:04:8b:d4:ca:ef:e6:
63:8b:b0:cf:39:c2:61:7b:e8:0f:ee:e7:ce:28:8b:28:32:5e:
76:bb:12:ef:5b:07:a6:d6:fa:42:8a:08:02:4a:6d:9c:13:49:
5c:2d:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client