Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/dtNXuacoKVjJ8KqoS7jdzJTAksc.roa
File: dtNXuacoKVjJ8KqoS7jdzJTAksc.roa (raw, json)
Hash identifier: NlulyFd8cZc2rDJIPjQm4KqbJa/u5d0hCyvR2vSoziA=
Subject key identifier: 76:D3:57:B9:A7:28:29:58:C9:F0:AA:A8:4B:B8:DD:CC:94:C0:92:C7
Certificate issuer: /CN=7c7c24689d29800fdab395b63d716ab810520847
Certificate serial: 019F6F76D485D422A83B64215A9902F30BA1
Authority key identifier: 7C:7C:24:68:9D:29:80:0F:DA:B3:95:B6:3D:71:6A:B8:10:52:08:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/dtNXuacoKVjJ8KqoS7jdzJTAksc.roa
Signing time: Fri 17 Jul 2026 09:44:46 +0000
ROA not before: Fri 17 Jul 2026 09:44:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201041
IP address blocks: 91.207.104.0/23 maxlen: 23
213.110.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:76:d4:85:d4:22:a8:3b:64:21:5a:99:02:f3:0b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c24689d29800fdab395b63d716ab810520847
Validity
Not Before: Jul 17 09:44:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76d357b9a7282958c9f0aaa84bb8ddcc94c092c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:d5:c2:12:0d:d5:3a:d5:fe:6a:8c:ff:09:
20:58:70:b2:95:bf:e5:33:9a:aa:61:d9:64:0e:9c:
02:c1:4d:da:be:48:0f:b4:3f:85:e2:51:07:86:fe:
16:77:c2:a2:3b:ad:be:69:94:6f:7a:66:68:29:66:
0a:29:99:e0:6a:18:bf:64:39:a8:8a:10:e0:5a:9f:
e1:93:a8:60:95:99:ae:65:fe:ec:4c:04:52:66:92:
b4:c4:a2:64:9d:20:a2:6e:25:c9:9a:9f:fc:b5:38:
6e:98:ad:58:70:c4:93:41:26:8a:01:40:40:4f:6b:
ec:a7:70:50:3c:21:70:a3:a6:a3:4a:64:b5:d2:25:
a5:ca:5d:28:b7:7a:fc:4d:bc:b3:ff:68:78:96:00:
35:57:9a:97:18:d1:37:9d:7e:16:fc:67:20:2e:e8:
c2:f0:7d:37:c9:5a:03:ef:21:d2:ec:cd:aa:4a:e3:
8f:ac:ab:e4:3e:0c:e2:ee:2d:26:66:1a:75:e1:20:
f0:ca:cf:cb:65:f2:75:d1:5e:2b:81:e0:9b:d0:3b:
5a:8d:85:a4:14:ba:3f:7f:f3:90:8d:9b:e3:b7:3d:
64:7b:5a:25:5b:9b:b0:1d:b2:d8:19:04:13:7a:95:
c1:8a:88:87:5c:75:cc:5f:4a:8b:f2:cc:aa:fc:4f:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D3:57:B9:A7:28:29:58:C9:F0:AA:A8:4B:B8:DD:CC:94:C0:92:C7
X509v3 Authority Key Identifier:
keyid:7C:7C:24:68:9D:29:80:0F:DA:B3:95:B6:3D:71:6A:B8:10:52:08:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwkaJ0pgA_as5W2PXFquBBSCEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/dtNXuacoKVjJ8KqoS7jdzJTAksc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e87722-bb56-49d6-90fb-ec883312f7fa/1/fHwkaJ0pgA_as5W2PXFquBBSCEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.104.0/23
213.110.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e8:aa:0c:65:b3:71:c8:25:7a:3c:ae:ae:4a:c6:27:fd:65:
4f:1a:14:28:ae:89:24:ba:1b:6f:84:aa:67:75:c1:ea:81:55:
b1:4e:1e:42:30:e8:b7:85:bc:6b:1a:2a:87:4f:33:5d:c5:77:
56:c3:50:93:39:06:dc:9f:a4:a2:41:c0:a6:3a:27:aa:64:1d:
fe:fa:42:ee:c8:96:31:3d:98:b3:7f:4a:66:ab:ec:99:64:34:
e3:5a:07:1b:34:e3:19:ea:a8:7e:db:3d:f5:8f:ad:7c:de:58:
49:fd:8c:00:65:65:d7:88:60:8b:bb:14:c1:98:8c:ae:85:f7:
3d:b8:8b:41:7d:be:ae:c9:4e:2a:49:65:69:cf:d3:67:10:6a:
85:de:d4:ba:a7:fd:79:62:97:78:ee:92:4f:3d:a7:d8:39:4c:
f6:4e:ad:ef:38:d2:df:64:10:dd:97:4c:30:35:f7:f1:22:48:
9b:6f:79:e1:fa:25:ac:dd:8b:68:06:30:f4:e5:74:bd:2b:4b:
c7:a2:89:3a:81:96:34:12:4c:d8:c5:4f:03:ab:7a:b2:4d:24:
f1:2e:34:81:28:72:0c:31:fa:c1:b6:c8:27:04:84:c5:6f:0a:
13:e1:cb:a1:bd:0a:12:69:e1:94:9b:3f:1c:5b:12:3d:db:ea:
b5:1e:9e:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9vdtSF1CKoO2QhWpkC8wuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2MyNDY4OWQyOTgwMGZkYWIzOTViNjNkNzE2YWI4MTA1
MjA4NDcwHhcNMjYwNzE3MDk0NDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmQzNTdiOWE3MjgyOTU4YzlmMGFhYTg0YmI4ZGRjYzk0YzA5MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWDVwhIN1TrV/mqM/wkgWHCylb/l
M5qqYdlkDpwCwU3avkgPtD+F4lEHhv4Wd8KiO62+aZRvemZoKWYKKZngahi/ZDmo
ihDgWp/hk6hglZmuZf7sTARSZpK0xKJknSCibiXJmp/8tThumK1YcMSTQSaKAUBA
T2vsp3BQPCFwo6ajSmS10iWlyl0ot3r8Tbyz/2h4lgA1V5qXGNE3nX4W/GcgLujC
8H03yVoD7yHS7M2qSuOPrKvkPgzi7i0mZhp14SDwys/LZfJ10V4rgeCb0DtajYWk
FLo/f/OQjZvjtz1ke1olW5uwHbLYGQQTepXBioiHXHXMX0qL8syq/E9jXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHbTV7mnKClYyfCqqEu43cyUwJLHMB8GA1UdIwQY
MBaAFHx8JGidKYAP2rOVtj1xargQUghHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh3a2FKMHBnQV9hczVXMlBYRnF1QkJTQ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lODc3MjItYmI1Ni00OWQ2LTkwZmIt
ZWM4ODMzMTJmN2ZhLzEvZHROWHVhY29LVmpKOEtxb1M3amR6SlRBa3NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lODc3MjItYmI1Ni00OWQ2LTkwZmItZWM4ODMzMTJmN2Zh
LzEvZkh3a2FKMHBnQV9hczVXMlBYRnF1QkJTQ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW89oAwQA
1W5/MA0GCSqGSIb3DQEBCwUAA4IBAQBK6KoMZbNxyCV6PK6uSsYn/WVPGhQorokk
uhtvhKpndcHqgVWxTh5CMOi3hbxrGiqHTzNdxXdWw1CTOQbcn6SiQcCmOieqZB3+
+kLuyJYxPZizf0pmq+yZZDTjWgcbNOMZ6qh+2z31j6183lhJ/YwAZWXXiGCLuxTB
mIyuhfc9uItBfb6uyU4qSWVpz9NnEGqF3tS6p/15Ypd47pJPPafYOUz2Tq3vONLf
ZBDdl0wwNffxIkibb3nh+iWs3YtoBjD05XS9K0vHook6gZY0EkzYxU8Dq3qyTSTx
LjSBKHIMMfrBtsgnBITFbwoT4cuhvQoSaeGUmz8cWxI92+q1Hp6o
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:36 2026 by rpki-client