Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_s523LoR7yqQFsuJlJKffa2kko4.roa
File: _s523LoR7yqQFsuJlJKffa2kko4.roa (raw, json)
Hash identifier: lr0H3JSUhrb3NCWU87fbd1lf/e0Xu9ou2wC3Ih0oLqc=
Subject key identifier: FE:CE:76:DC:BA:11:EF:2A:90:16:CB:89:94:92:9F:7D:AD:A4:92:8E
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 019EF91536303A7C2EF7078CEAB1676937A8
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_s523LoR7yqQFsuJlJKffa2kko4.roa
Signing time: Wed 24 Jun 2026 10:02:57 +0000
ROA not before: Wed 24 Jun 2026 10:02:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.137.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:15:36:30:3a:7c:2e:f7:07:8c:ea:b1:67:69:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jun 24 10:02:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fece76dcba11ef2a9016cb8994929f7dada4928e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0d:80:f7:87:ea:bb:fb:c6:32:85:e5:94:a1:
49:01:86:bf:e5:c9:c5:f3:b9:17:54:65:c1:5e:14:
05:17:27:bd:bd:7f:8a:88:5a:ae:52:d1:23:68:02:
08:a8:25:cb:e2:75:2d:dc:cd:7c:f1:54:fc:2d:a1:
53:7e:9e:d9:5a:e8:36:79:07:05:21:cf:dd:c0:60:
51:2d:83:94:5a:59:0c:54:e1:b1:eb:1e:7e:3a:fe:
b5:ad:f6:8e:bd:a1:40:92:fd:44:d6:47:b0:df:b1:
fd:81:2d:52:b5:94:26:ba:2c:3a:b7:fd:17:38:c6:
eb:10:62:5d:af:d6:85:bd:75:ab:7d:55:56:a7:8a:
8d:c5:19:db:05:24:d8:f1:d1:06:73:c6:ca:cb:2e:
52:1e:4a:be:33:07:f4:90:b4:fe:0f:17:6b:1a:0d:
fd:9c:48:85:ee:32:1c:96:8b:00:9f:83:fb:63:ab:
d5:76:f4:17:7a:5a:8f:8f:3c:c2:60:c5:e1:29:dd:
99:3b:bf:9a:94:f7:c2:c7:82:6c:d2:66:1e:d3:f3:
ec:21:31:7b:e6:44:72:f2:2b:b6:dc:31:c1:18:ca:
d8:f4:98:d1:d9:ca:36:e7:fd:4b:0f:99:0a:c1:e2:
bd:cc:49:ab:78:d6:37:6e:12:ac:06:12:a4:51:dd:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CE:76:DC:BA:11:EF:2A:90:16:CB:89:94:92:9F:7D:AD:A4:92:8E
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/_s523LoR7yqQFsuJlJKffa2kko4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d9:7b:31:e9:79:ef:8a:0b:f2:d1:29:7a:1c:82:4a:f5:ae:
76:d6:38:c8:00:5f:b4:17:f2:b4:17:99:d7:fe:92:c2:6d:84:
cf:ae:c3:bb:67:d6:9d:f7:9c:53:e3:9d:f2:f0:af:d6:a7:2a:
56:5f:7f:df:b1:e8:38:a9:27:9f:9a:ee:87:f9:e1:72:c7:73:
23:c4:c0:dc:69:43:e6:95:fb:5b:1d:25:9d:a8:de:11:78:3c:
1d:dc:ed:c1:68:3d:ec:50:39:80:9a:fe:f5:97:4b:32:e4:53:
3a:da:35:40:42:9b:dd:b3:66:d5:7f:5d:5f:e6:49:bd:be:95:
5e:de:16:45:3b:91:c3:44:e8:7b:d9:b1:df:4c:9a:a4:1b:8f:
db:70:81:47:05:91:2f:50:af:65:2b:96:81:2c:51:83:5f:6f:
e6:d1:25:af:09:ac:30:ba:f7:6d:de:bc:84:d3:d3:7e:96:11:
26:6c:01:69:a7:54:d9:89:8d:e4:26:1a:26:28:44:3e:71:1c:
9f:75:67:5b:e1:f8:a8:4f:9a:09:12:ad:b1:7c:d5:d3:b6:d2:
27:65:96:2a:57:0e:c5:1d:44:c3:52:10:d4:50:72:3e:d9:4e:
ac:62:9c:81:07:d3:38:fd:df:19:31:63:83:c6:64:3a:62:df:
1d:8e:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:51 2026 by rpki-client