Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/97YhHHaKFWN5cfJI4mjYZVezzyU.roa
File: 97YhHHaKFWN5cfJI4mjYZVezzyU.roa (raw, json)
Hash identifier: 08BBW4X87ePQH4+YJNSK8t+aTyoXsosoSNXbcmwllmg=
Subject key identifier: F7:B6:21:1C:76:8A:15:63:79:71:F2:48:E2:68:D8:65:57:B3:CF:25
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019FFA08D902355A9EEFC00744CDDFC486E8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/97YhHHaKFWN5cfJI4mjYZVezzyU.roa
Signing time: Thu 13 Aug 2026 07:31:51 +0000
ROA not before: Thu 13 Aug 2026 07:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209413
IP address blocks: 45.141.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:08:d9:02:35:5a:9e:ef:c0:07:44:cd:df:c4:86:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Aug 13 07:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7b6211c768a15637971f248e268d86557b3cf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:69:da:a2:f8:c4:7c:0a:ab:98:b7:6f:93:
e3:19:44:14:5b:72:11:a2:2f:1f:7e:b1:0c:0a:61:
b3:42:84:99:32:82:7f:cb:0b:71:39:a0:19:79:bf:
4b:f4:98:e8:1f:f6:76:f7:0a:f7:dd:13:26:df:d6:
0a:e6:4b:e0:dc:8e:fd:11:d4:e8:bc:6b:ce:a6:4f:
44:bb:3c:27:d3:b8:88:81:5f:05:f6:91:2b:4f:c3:
19:6e:b1:05:16:20:f4:76:83:d7:61:94:80:bd:b3:
cb:18:ee:35:9e:fb:2a:dc:e7:60:82:a7:0e:ef:03:
82:6d:d7:2b:5f:8b:f5:eb:f0:81:47:5b:16:77:0e:
fd:ad:34:05:7b:a6:d3:a6:33:0f:3d:39:50:00:65:
17:59:9a:22:1c:7c:b1:53:d8:62:ee:66:aa:0f:de:
9f:8a:01:36:f6:d2:45:29:5a:ca:c6:0c:20:02:5b:
29:f7:47:fc:7f:a1:1c:b8:a4:8a:f0:54:d5:00:e0:
85:ed:83:8a:f7:ed:04:82:31:00:10:e7:2e:05:c3:
3d:ef:3b:da:8c:e9:6b:c2:ba:70:f1:80:80:7c:0d:
38:2f:15:f3:52:f3:86:46:25:53:e5:5c:f3:3c:12:
a2:02:fa:a2:21:b1:15:14:b6:94:52:1c:f8:a4:8f:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B6:21:1C:76:8A:15:63:79:71:F2:48:E2:68:D8:65:57:B3:CF:25
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/97YhHHaKFWN5cfJI4mjYZVezzyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:49:36:7a:d5:c6:17:e0:cc:99:e5:3b:ed:01:33:d4:1d:2b:
c0:a8:35:1d:c0:ec:55:7e:e4:e1:a6:97:c1:b4:95:f7:99:97:
c7:6c:65:f2:62:10:2f:9e:ea:87:91:c8:6c:4d:b4:15:85:aa:
ae:53:43:3d:c6:d0:c9:bd:0b:95:eb:f3:a0:4b:37:b0:8a:80:
13:69:95:28:76:20:fd:c1:9c:d5:29:72:9f:8f:25:32:f3:10:
c5:6a:20:d5:b6:78:e6:6a:bf:c6:7c:44:bd:76:fa:2e:21:37:
af:0d:82:aa:a5:19:60:6f:21:ce:28:7a:88:ab:4c:4c:51:1b:
4a:2e:e4:1d:60:45:aa:38:18:16:e5:b3:ec:4a:a0:1a:2c:54:
54:6a:83:fc:fc:6a:26:e7:36:91:18:00:de:ea:34:e8:fe:3a:
2f:30:fd:c9:d9:a0:ce:ab:7b:4b:ac:ce:a6:b6:4a:98:86:20:
96:52:0e:31:c9:ba:d5:c3:ff:7b:c6:f1:9d:36:eb:24:96:d8:
ed:5d:68:82:a4:9e:9f:d8:cf:b4:fa:3a:b6:b7:d9:16:ee:7d:
19:c2:0a:8d:1a:69:d8:82:8a:83:25:d2:cf:18:e6:30:25:d4:
80:b7:a5:6e:06:70:6a:88:cb:7c:5c:c4:31:a9:aa:4e:1e:4f:
73:f7:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:43:59 2026 by rpki-client