Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa
File: AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa (raw, json)
Hash identifier: 8ZkLoQZEXsJMEKT0BvkO1TAaKtUbWVe7ZEC6sjqW8hc=
Subject key identifier: 00:1F:B7:19:3B:7B:74:A6:E0:18:36:AB:AF:7A:CB:A5:52:67:C3:54
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019FC32BD0CF25B6299BDB1ECC198E4BDC88
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa
Signing time: Sun 02 Aug 2026 15:50:56 +0000
ROA not before: Sun 02 Aug 2026 15:50:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204427
IP address blocks: 72.56.40.0/23 maxlen: 24
72.56.94.0/24 maxlen: 24
200.169.186.0/23 maxlen: 32
201.24.58.0/23 maxlen: 32
201.34.152.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c3:2b:d0:cf:25:b6:29:9b:db:1e:cc:19:8e:4b:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Aug 2 15:50:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=001fb7193b7b74a6e01836abaf7acba55267c354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:ad:9a:7a:91:e3:88:02:67:54:87:cb:27:
61:17:73:99:48:53:b9:86:d5:f1:64:b8:8f:f7:80:
a9:fc:30:9f:7e:56:44:20:03:fa:79:7e:f4:5b:25:
7d:8b:60:1e:47:27:31:4f:04:24:d5:f6:32:a2:fa:
69:00:17:47:51:ac:66:fa:27:82:1a:48:f6:4d:6d:
0c:b3:22:a7:0a:ba:96:ec:6e:cb:2c:b8:79:77:64:
97:c0:b1:43:5f:0d:00:47:8a:60:85:62:6f:2d:7d:
2e:cf:51:35:40:8e:45:18:16:82:56:a7:63:ff:04:
8f:e2:6d:61:e7:f3:eb:81:68:01:7a:6f:95:70:4d:
b0:72:1e:02:be:79:c9:9d:42:1b:72:0a:b7:0a:0c:
1f:b1:c3:1f:8c:49:78:98:cd:8f:d9:5c:60:09:1d:
28:1b:af:d8:fb:69:13:cc:66:96:05:12:82:e9:f1:
61:bb:57:51:23:f8:57:ac:c8:23:fb:e7:e9:3c:55:
c1:8a:d4:5e:b9:40:4d:20:68:9e:5c:ec:fd:7c:08:
9b:8f:d6:93:7e:10:86:55:d1:3a:5e:f8:a8:c7:67:
24:0d:f6:79:b4:7a:1d:60:43:93:55:b5:87:d6:c4:
49:f2:49:9a:dc:57:c6:a8:1a:74:7d:8b:16:84:e9:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:B7:19:3B:7B:74:A6:E0:18:36:AB:AF:7A:CB:A5:52:67:C3:54
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.40.0/23
72.56.94.0/24
200.169.186.0/23
201.24.58.0/23
201.34.152.0/22
Signature Algorithm: sha256WithRSAEncryption
69:99:3b:04:90:81:3b:51:99:b8:87:25:9e:d5:c7:c2:5d:9a:
8e:f5:94:e5:51:ce:d0:45:30:f9:40:8b:ce:ab:df:5f:d0:d8:
b2:14:48:8a:49:33:8d:c5:32:a4:6b:52:5f:e2:c0:70:36:f0:
12:5c:16:28:c7:2b:9d:fe:1d:a7:a9:c1:72:7e:73:4f:f8:82:
fd:9b:ab:38:ed:3a:c3:3b:27:3d:10:96:ac:90:4d:2b:af:26:
69:68:6d:7e:29:4a:01:5b:ee:d5:bf:81:05:31:1c:73:31:d3:
44:e0:bb:ec:8d:eb:26:e1:bf:1a:c7:5d:09:50:18:16:cc:42:
a3:74:fe:0e:32:c5:99:56:fb:44:6f:ff:bd:a5:98:24:8f:cd:
46:19:e4:aa:07:ad:5c:df:3b:e7:f1:90:93:c1:07:f2:33:0b:
fd:1a:c4:c0:2d:e0:f2:1e:73:40:4f:f4:42:db:aa:b5:17:7d:
8d:ce:5a:4b:25:18:39:41:16:76:9c:e1:97:42:4a:00:41:6d:
d0:ec:9c:4d:ed:b0:a4:4e:d4:c7:58:14:e9:1d:a8:17:26:d8:
f7:01:b3:56:f5:be:f4:33:51:5a:1d:15:dd:3e:54:9a:c1:40:
6c:fe:bb:47:0f:dc:93:4a:35:e2:c5:11:fa:22:88:2d:93:44:
61:7d:48:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:25:44 2026 by rpki-client