Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa
File: pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa (raw, json)
Hash identifier: g4uEePdexAW53FzeUPyjdIrDSmjkq/x7/+0BrdOJwdU=
Subject key identifier: A7:0E:D4:63:97:31:B4:38:09:77:B7:4B:02:DC:18:18:DB:D1:72:9A
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019F26D82A0A9AA81A0DF9980EF81FF0859B
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa
Signing time: Fri 03 Jul 2026 07:18:48 +0000
ROA not before: Fri 03 Jul 2026 07:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35152
IP address blocks: 84.239.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d8:2a:0a:9a:a8:1a:0d:f9:98:0e:f8:1f:f0:85:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jul 3 07:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a70ed4639731b4380977b74b02dc1818dbd1729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:37:dd:20:59:38:52:7c:1b:5e:01:97:4b:97:
56:67:63:03:05:bf:c0:3c:62:1f:a1:95:23:e7:d0:
50:ec:6b:df:8d:fa:2d:40:39:5a:e5:2f:0f:b1:7c:
91:f8:92:b7:8c:2c:47:d8:ca:0b:6e:bf:60:32:e6:
1a:5f:d0:dc:4a:b9:29:ff:ab:e6:ee:f2:b2:a5:c0:
eb:73:10:33:7b:de:2a:79:1f:64:10:b0:10:ca:2c:
0e:bf:a5:1f:da:98:41:57:d0:dc:6d:b9:c2:1e:77:
d0:3c:33:d6:4a:3f:7e:23:53:b8:62:b9:d6:fb:53:
91:25:2a:d5:bd:c4:bd:9a:13:7a:b9:a3:0d:ab:8e:
11:2d:0b:7f:21:08:df:bb:6a:41:c9:5e:88:d6:c9:
e2:f6:08:0f:33:cf:76:ff:1f:54:a4:36:d0:b6:95:
3d:ef:ca:4b:72:39:2e:ec:6c:45:e3:9f:73:b0:25:
16:e1:bc:20:6a:82:ce:b8:e6:8c:62:d6:d4:4d:b2:
d4:34:d7:98:85:74:2d:d4:7e:94:7b:d8:2b:58:0d:
80:83:a0:38:61:ca:f4:1e:44:c8:6c:96:56:58:fb:
df:6a:15:ea:ee:85:38:8d:89:e7:66:85:e5:00:93:
46:4f:33:89:04:e3:f7:4a:d6:7f:c4:a3:a1:61:82:
cb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:D4:63:97:31:B4:38:09:77:B7:4B:02:DC:18:18:DB:D1:72:9A
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/pw7UY5cxtDgJd7dLAtwYGNvRcpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.100.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c8:37:10:7d:a3:0b:eb:58:8d:84:bf:51:6b:d3:67:aa:4a:
43:64:63:3b:02:3b:2a:1a:aa:fe:b2:22:b3:48:c7:bf:85:fb:
25:96:37:3d:56:12:4a:8a:d9:27:97:53:79:55:25:7e:5f:05:
50:20:48:17:ed:9e:72:f4:92:67:b4:98:c3:df:2e:17:ee:08:
a2:4f:8e:81:7d:5d:ce:62:ec:ef:5c:42:21:3f:de:c8:dc:26:
80:2a:d7:77:41:eb:87:c8:dd:81:35:27:2d:86:46:25:24:13:
a9:48:bb:e7:01:c0:01:2e:40:be:53:ca:11:39:66:f2:12:d9:
58:8b:93:c2:ec:02:56:16:af:17:84:a6:99:e0:ec:0c:f8:74:
cd:a7:65:af:9e:48:06:26:41:a2:d0:0e:1b:6e:7d:c3:0f:0a:
29:7d:f3:2c:0e:b6:d7:1a:11:fe:1f:f2:f6:b9:a5:23:d9:dd:
3e:ac:86:d5:36:0c:bf:47:18:40:62:e7:2e:99:57:14:f7:7d:
b6:0d:aa:17:41:34:fc:5a:9b:31:39:cb:f2:17:d8:f1:e1:39:
b0:57:a6:26:81:7a:29:c8:37:2f:c4:6b:15:89:55:86:14:6e:
f5:6e:1e:aa:83:f0:bc:5b:f5:7e:68:9b:02:1d:6d:29:c0:89:
b1:cb:17:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:51 2026 by rpki-client