Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/4p7UX0PoagrX-RaZSv7MEXp2tTo.roa
File: 4p7UX0PoagrX-RaZSv7MEXp2tTo.roa (raw, json)
Hash identifier: FA0DJyuHRknXJhJ8wN0/XaXA1QBDmEdjI2kLjl1bWyM=
Subject key identifier: E2:9E:D4:5F:43:E8:6A:0A:D7:F9:16:99:4A:FE:CC:11:7A:76:B5:3A
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019CB184A7EB48C9107D79C5563F887A70B2
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/4p7UX0PoagrX-RaZSv7MEXp2tTo.roa
Signing time: Tue 03 Mar 2026 02:26:26 +0000
ROA not before: Tue 03 Mar 2026 02:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 72.56.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:84:a7:eb:48:c9:10:7d:79:c5:56:3f:88:7a:70:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Mar 3 02:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e29ed45f43e86a0ad7f916994afecc117a76b53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:f5:ff:1b:62:3e:89:58:1a:c6:ca:b2:73:
fb:ca:5d:43:f6:91:01:8b:7f:d7:ca:fd:28:82:4f:
cb:5c:76:5d:78:2f:4b:ed:2e:99:6a:c9:78:83:dc:
bc:35:22:64:1c:ad:41:05:af:d8:85:5a:d9:09:5b:
5f:55:20:03:6c:8e:2b:55:46:05:c1:67:19:d8:33:
c4:7e:ff:a3:d6:69:36:2e:10:8f:1c:a8:b2:15:11:
cd:43:06:59:e5:da:52:3f:0c:e3:89:31:cb:59:57:
99:47:c1:a7:87:6c:e9:1e:af:25:81:f9:de:3e:1a:
90:e3:c5:32:5a:19:50:d7:b6:04:26:dc:a1:fe:2c:
99:26:02:93:88:67:57:25:cd:0b:e8:d0:bd:9c:63:
a2:a5:4a:98:ee:99:c9:3b:51:48:e5:aa:55:f5:70:
f9:f7:53:28:b1:2b:0f:90:a6:ab:f4:89:ff:f5:03:
ce:e7:ee:10:37:0a:8d:41:fc:87:f4:e2:67:af:90:
fe:f9:54:21:25:b7:94:bc:91:7c:18:e2:0d:8d:8e:
09:67:68:b6:71:18:78:16:71:bd:db:ab:21:68:37:
13:9f:27:2d:1c:c4:0f:08:96:c3:17:0d:ec:ab:97:
cf:ed:66:96:91:33:a0:c8:69:f1:ec:25:62:3c:3b:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:D4:5F:43:E8:6A:0A:D7:F9:16:99:4A:FE:CC:11:7A:76:B5:3A
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/4p7UX0PoagrX-RaZSv7MEXp2tTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.0.0/20
Signature Algorithm: sha256WithRSAEncryption
d1:7a:b7:77:61:5f:a8:dd:db:28:12:25:25:9b:07:94:0d:fe:
50:fa:a4:54:52:82:6a:0a:c1:12:3b:ad:52:a8:76:60:79:b4:
4a:94:95:05:b1:bc:5a:38:ae:7b:b4:75:47:c2:ab:96:c6:0c:
01:4f:14:9f:97:8c:5b:45:c6:be:bd:b5:84:bb:5b:f4:fd:fe:
15:fb:c7:61:b1:31:ca:2a:b4:96:c3:47:ba:83:97:fe:70:5e:
e9:07:63:04:23:90:d9:e5:83:d8:2b:d6:21:78:5f:6a:8d:13:
a4:bf:b3:99:dd:12:ee:34:ff:5a:f8:80:3f:c7:f2:94:77:d9:
cf:3b:45:16:88:c5:fe:81:44:c0:f6:f0:5f:8c:48:92:d0:27:
a9:ac:e2:1c:bf:ee:ea:03:c9:d5:f2:c2:b1:2d:d8:d0:c3:a4:
e2:f0:21:88:25:6c:63:67:3d:af:b3:d1:10:02:0d:26:38:f3:
04:36:3b:fc:6b:25:82:c1:86:31:85:88:a0:b5:bc:27:31:2e:
91:e6:9a:02:40:bd:04:0b:77:1f:22:84:9f:5c:63:80:e5:e6:
a0:84:21:d2:21:23:8e:2e:b7:11:cc:6f:05:a0:48:a0:ac:53:
b9:60:05:2f:0e:d6:99:f3:4b:ac:f4:a9:68:15:b4:04:ce:bf:
66:36:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:18 2026 by rpki-client