Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/T6rrJ0wdjoVVckWY9lDFVUTHWzg.roa
File: T6rrJ0wdjoVVckWY9lDFVUTHWzg.roa (raw, json)
Hash identifier: 7nkrNFlBpotFIVBfQte4R27HpO8HAvjxvRBGtD+xa2c=
Subject key identifier: 4F:AA:EB:27:4C:1D:8E:85:55:72:45:98:F6:50:C5:55:44:C7:5B:38
Certificate issuer: /CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Certificate serial: 019F8DCE96C0456920A489FC86A957F5ACE6
Authority key identifier: BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/T6rrJ0wdjoVVckWY9lDFVUTHWzg.roa
Signing time: Thu 23 Jul 2026 07:09:14 +0000
ROA not before: Thu 23 Jul 2026 07:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 217.173.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:ce:96:c0:45:69:20:a4:89:fc:86:a9:57:f5:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7029ce8cc9b787d94323e0ca0d14dd1e0043ec
Validity
Not Before: Jul 23 07:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4faaeb274c1d8e8555724598f650c55544c75b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:be:8d:aa:e1:00:9c:16:d9:25:56:ad:e3:
c6:6a:17:c9:27:10:c3:9c:85:51:10:01:c9:27:59:
eb:69:1c:94:6d:08:54:57:8d:25:42:d8:ca:58:b3:
fb:e8:08:61:57:e6:de:81:12:39:49:72:9a:5b:1f:
2c:8e:76:87:4f:7f:a1:43:24:7a:98:ff:c2:55:0d:
80:21:2a:d4:28:03:33:76:b6:9f:2d:5e:de:bb:e0:
e8:ec:4f:0d:86:78:79:74:60:e8:f1:c8:d8:ac:30:
c0:de:94:63:da:92:fb:a0:3b:f0:88:98:2b:33:fb:
5a:37:d1:df:5a:7d:77:f0:5d:16:ae:92:75:dd:38:
4f:97:aa:0e:7c:9b:1d:83:8f:e0:b8:01:b4:00:da:
21:40:fe:01:fd:d2:f1:ba:db:3a:ec:6a:5e:aa:90:
6e:54:df:fd:6e:bc:7f:60:15:ac:a6:9b:99:c5:88:
4f:d2:c2:ca:14:f5:c7:fd:79:36:a5:0d:10:ba:d7:
d7:5c:1a:03:59:79:c0:69:35:7f:30:62:5b:5f:b1:
1d:e7:ed:2a:64:d8:ee:07:6d:fe:a3:3a:37:38:a3:
27:8c:5a:19:76:f9:47:68:f4:83:69:05:fa:8f:60:
16:6d:ee:64:ef:8f:9a:7f:05:9a:25:88:f0:19:43:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:EB:27:4C:1D:8E:85:55:72:45:98:F6:50:C5:55:44:C7:5B:38
X509v3 Authority Key Identifier:
keyid:BE:70:29:CE:8C:C9:B7:87:D9:43:23:E0:CA:0D:14:DD:1E:00:43:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnApzozJt4fZQyPgyg0U3R4AQ-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/T6rrJ0wdjoVVckWY9lDFVUTHWzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a4a432-3661-4bf8-a265-5ff84e81659b/1/vnApzozJt4fZQyPgyg0U3R4AQ-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.89.0/24
Signature Algorithm: sha256WithRSAEncryption
13:be:f2:ec:1b:4e:f0:c7:f0:94:1f:9a:42:91:c1:2a:b1:a3:
46:b0:89:6b:35:cf:b1:2d:81:fc:33:ce:8d:34:bd:ca:b9:1e:
8c:c7:7a:ec:62:f5:d1:58:1c:a8:3d:66:2e:72:7b:59:2e:f1:
94:5e:a9:05:67:8c:3a:a2:e6:1f:d5:14:0a:9c:ec:71:cd:eb:
ee:e8:c2:0f:2b:a8:3b:fb:6c:d0:c3:59:ae:8e:a8:ff:34:de:
0b:a7:d3:02:0c:23:0c:ab:0f:54:05:da:25:18:ca:75:79:98:
e6:fa:ad:6b:e8:cf:c5:bb:fc:c1:d8:cd:f6:ba:ee:96:3c:29:
6e:dd:b5:e6:6f:0d:2e:97:bf:4c:3a:ee:38:d0:63:d7:b6:43:
bf:ec:3f:33:c1:dc:b2:e7:7e:36:33:c5:8e:ad:ea:69:4d:4d:
53:07:6f:31:64:80:77:a7:b4:16:32:46:e6:03:13:ea:aa:a0:
3b:fd:cb:61:2c:4f:c9:ef:4f:35:a0:b3:ea:51:8b:3a:b1:1c:
a8:7b:ee:93:95:02:4e:aa:d9:12:28:ff:e5:47:7f:af:1a:a6:
30:87:cf:07:dd:ca:d9:7e:ab:5e:c3:b8:b0:74:f6:8b:fb:ed:
f3:03:bb:ec:46:a0:25:aa:ef:db:f7:a5:51:4a:ec:d7:de:18:
25:c7:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:40 2026 by rpki-client