Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/y7BRUgZ4EiTlXZsAo3g9ldGSkSY.roa
File: y7BRUgZ4EiTlXZsAo3g9ldGSkSY.roa (raw, json)
Hash identifier: wYpKAxhtz61UO/dZka5iB8/34HQg89DswEuJ3GS258g=
Subject key identifier: CB:B0:51:52:06:78:12:24:E5:5D:9B:00:A3:78:3D:95:D1:92:91:26
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A145BE7F301D78AE7714E364A74C63E4D9
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/y7BRUgZ4EiTlXZsAo3g9ldGSkSY.roa
Signing time: Fri 16 Oct 2026 17:24:34 +0000
ROA not before: Fri 16 Oct 2026 17:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218852
IP address blocks: 72.56.151.0/24 maxlen: 24
200.163.83.0/24 maxlen: 24
200.163.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:be:7f:30:1d:78:ae:77:14:e3:64:a7:4c:63:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 16 17:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb0515206781224e55d9b00a3783d95d1929126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ad:30:51:e8:5b:f9:12:cd:e4:dd:64:ee:05:
a9:7d:68:41:75:31:b2:d4:ec:1a:49:3b:89:93:f0:
da:4c:ad:6b:bb:65:1e:c1:ee:a0:26:28:27:46:0d:
28:d0:d5:d4:b6:13:8a:68:48:fc:0d:fd:0c:b6:bb:
5b:1a:7e:0f:a4:85:b0:93:ef:14:9b:61:6a:67:68:
af:18:7d:15:a2:15:fd:b2:a5:5f:d3:b8:bf:57:0b:
aa:65:97:18:2a:8d:8e:8b:12:72:81:1f:19:1e:75:
b3:5e:30:2b:fd:71:a8:fa:f9:eb:86:98:c9:8d:48:
c4:95:a1:45:6d:6d:cc:05:7e:d2:d6:08:df:39:01:
0e:f4:97:bd:c5:88:24:99:75:c6:d4:16:13:bf:8c:
8d:ce:c0:27:d7:e2:0e:f0:66:0c:13:fc:0a:84:bc:
17:63:cf:44:db:63:58:10:fd:24:ca:73:e3:11:2b:
c6:53:a8:85:e5:05:35:97:b8:cc:ff:76:70:6a:eb:
48:d1:c3:e5:38:3e:98:ba:4e:d2:3a:3f:1b:8e:71:
83:b1:0c:3b:e2:c9:7e:9b:3f:45:ca:2e:9e:a4:42:
5e:2f:62:dc:38:9c:4f:12:67:87:67:64:fa:18:8e:
e8:26:a4:14:98:f8:49:57:80:31:8f:e5:de:1a:64:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:51:52:06:78:12:24:E5:5D:9B:00:A3:78:3D:95:D1:92:91:26
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/y7BRUgZ4EiTlXZsAo3g9ldGSkSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.151.0/24
200.163.83.0/24
200.163.87.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:dc:ec:8b:42:68:d9:90:da:57:69:1a:62:38:e9:c0:10:15:
24:2e:ba:ed:7c:19:7d:34:af:14:c6:91:38:1a:a8:50:35:ff:
4c:4e:96:a8:ad:9a:84:12:9a:df:8d:ac:10:66:d1:67:fd:e5:
ed:cd:6c:a6:98:5a:a2:a7:08:31:1d:e8:2e:85:4f:1b:f7:1a:
d1:47:0c:a9:6b:6e:43:7e:86:87:a1:6f:8c:c1:41:22:2a:3a:
b5:2e:57:e6:01:fa:eb:18:07:6a:dc:df:4b:94:fe:b7:d9:a9:
47:d5:54:22:60:18:20:7b:c4:a4:79:19:b1:f6:8a:40:b8:1b:
ef:1a:30:00:26:d6:60:a6:84:14:fe:39:c3:f5:a8:7a:11:06:
67:4e:e7:8c:cb:6f:dd:7e:a1:a3:75:20:e3:2a:8c:e0:73:9c:
01:56:72:94:ff:b4:78:8f:ac:73:3b:7b:bc:17:c2:cf:15:16:
8e:17:27:65:89:23:57:54:87:ff:eb:30:f3:6f:48:9c:bd:f7:
98:5c:0d:0b:a8:01:12:44:1e:b9:6f:de:fc:fb:c6:7f:62:fa:
08:66:54:4d:07:81:6b:21:64:fe:3e:69:a9:61:0b:45:8c:de:
2e:a3:e1:79:90:cb:a4:28:5d:90:fa:70:b2:e7:f1:f5:94:e2:
12:a3:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:40:54 2026 by rpki-client