Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/18FiEiCxgYRp7mh77aYt3dnx5vE.roa
File: 18FiEiCxgYRp7mh77aYt3dnx5vE.roa (raw, json)
Hash identifier: wyB2pZLF8WVSc86WSg9prhicP902AAZNpbfyBaGfM2Y=
Subject key identifier: D7:C1:62:12:20:B1:81:84:69:EE:68:7B:ED:A6:2D:DD:D9:F1:E6:F1
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE38A42F67578B9622F8C722D75C9
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/18FiEiCxgYRp7mh77aYt3dnx5vE.roa
Signing time: Tue 15 Sep 2026 21:49:29 +0000
ROA not before: Tue 15 Sep 2026 21:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20454
IP address blocks: 142.228.45.0/24 maxlen: 24
198.33.138.0/24 maxlen: 24
198.34.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e3:8a:42:f6:75:78:b9:62:2f:8c:72:2d:75:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7c1621220b1818469ee687beda62dddd9f1e6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:a9:8f:29:b3:90:5a:2d:56:4a:1b:8a:77:
7a:13:e7:dd:a4:ab:37:99:4b:75:68:8b:9b:00:46:
65:6c:ba:bd:6c:e8:6d:b8:97:f0:ac:6c:67:2c:ee:
17:86:b0:f5:70:6b:06:5f:07:2f:d5:73:31:0b:72:
64:3a:53:b9:22:bc:94:3d:d8:bd:ce:4e:54:e4:bd:
7d:f9:ee:9c:be:99:6e:38:9a:67:5c:ed:c2:19:e3:
e8:e1:9b:ab:09:ac:45:07:6c:84:ee:65:71:5b:58:
7c:c3:47:ed:9d:48:f9:0b:a4:7a:d5:8c:5a:d2:3a:
6f:b7:ba:96:99:5f:0e:2a:26:8f:7a:05:cf:2b:27:
1f:62:0d:34:c3:3c:15:eb:69:bd:d4:c2:ff:08:23:
48:7a:25:23:f2:e5:08:41:78:db:a4:dc:1f:7e:1f:
59:32:a7:2e:2d:0e:fd:6f:0a:5c:a2:99:a4:d1:67:
1e:94:66:9b:25:04:cb:a3:14:d1:77:bd:44:cd:7c:
34:dc:9c:a8:af:0f:e9:bc:be:62:47:4c:ed:4d:d8:
43:e7:f1:f4:94:fd:19:02:8f:e0:af:09:25:5a:e9:
1a:02:90:f1:22:71:f6:51:aa:13:2e:c5:b7:a2:e3:
b9:27:ed:66:a7:4b:41:80:04:21:a6:f2:1b:9f:1a:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:62:12:20:B1:81:84:69:EE:68:7B:ED:A6:2D:DD:D9:F1:E6:F1
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/18FiEiCxgYRp7mh77aYt3dnx5vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.45.0/24
198.33.138.0/24
198.34.70.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:bf:65:9e:16:42:2f:92:b3:ca:39:38:1c:e4:f8:99:40:13:
d0:b2:67:40:e0:07:e5:5e:75:a2:29:78:19:9d:61:43:1e:2e:
e2:0c:53:02:66:81:29:a6:81:44:38:0c:85:5f:34:47:6c:bf:
ad:69:62:c3:aa:fa:ad:42:ad:7d:1d:49:c3:02:87:03:5e:af:
67:cf:76:4f:0a:c8:93:84:50:54:07:60:de:31:92:2f:5c:39:
65:41:fc:23:ba:62:42:cc:01:9d:8b:ad:b7:35:62:2d:b5:ca:
32:6c:19:67:6d:13:63:d2:13:1e:3f:40:da:c5:97:f8:59:e6:
c0:66:46:ab:0a:55:b0:10:58:31:5f:35:96:99:99:58:71:f9:
f0:73:02:20:87:f3:b5:4d:39:8b:b8:e7:dc:28:4b:c2:70:cb:
4c:7d:00:12:01:aa:b9:72:b5:7c:33:2f:3a:f7:64:ff:ea:b3:
96:8c:47:14:60:ae:90:a2:d7:1b:32:10:7a:4d:bb:8c:d4:93:
06:64:f3:8e:c4:d6:46:fc:1f:50:b8:06:2b:ff:d4:ba:d0:b4:
90:50:fd:71:40:bd:1b:87:11:c6:d2:c7:9b:c7:76:12:59:46:
9c:5d:3c:7f:ab:39:14:8c:eb:3d:cc:92:3f:97:57:f7:76:e5:
01:10:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:54 2026 by rpki-client