Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ccxb7wS4B72bxr97rcPzo43Qm0s.roa
File: ccxb7wS4B72bxr97rcPzo43Qm0s.roa (raw, json)
Hash identifier: yLlPADSmq5XNy4UQTQ8MuXsCPJPthWIAFav2IeO7BBM=
Subject key identifier: 71:CC:5B:EF:04:B8:07:BD:9B:C6:BF:7B:AD:C3:F3:A3:8D:D0:9B:4B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019E0DF7639DE6D899B16500930C5F50F4F5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ccxb7wS4B72bxr97rcPzo43Qm0s.roa
Signing time: Sat 09 May 2026 18:19:37 +0000
ROA not before: Sat 09 May 2026 18:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214918
IP address blocks: 217.156.22.0/23 maxlen: 23
217.156.22.0/24 maxlen: 24
217.156.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:f7:63:9d:e6:d8:99:b1:65:00:93:0c:5f:50:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 9 18:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71cc5bef04b807bd9bc6bf7badc3f3a38dd09b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:8b:4a:90:c3:d0:4e:7d:14:59:e6:50:0e:
23:f2:19:3d:3d:20:ef:81:eb:4d:97:48:78:eb:56:
c2:09:ce:71:a6:9d:77:6f:7f:97:92:65:1c:90:af:
d3:c0:33:e8:ae:8a:38:d6:f1:5b:96:2e:94:b1:ec:
62:88:0f:59:9f:b0:61:32:c0:86:e5:bb:67:d2:72:
4c:43:d2:9e:e1:bf:1c:6c:83:18:b2:f0:65:4c:d2:
ae:7d:de:83:f1:36:a9:eb:86:dc:76:89:40:1f:80:
26:cc:af:79:97:1d:57:be:10:d8:ac:0f:95:7e:f8:
a6:a0:88:fc:38:76:3f:24:64:c1:fc:f4:be:41:b1:
d9:85:ac:41:cc:6f:81:75:1c:00:2b:b1:e5:dc:a5:
d6:0b:5d:b7:b2:ba:d1:10:4b:90:e0:e5:67:4f:65:
63:be:f2:d3:d7:28:e3:54:6d:a3:a0:23:d6:a0:e5:
35:67:25:23:f7:eb:17:e0:ae:a6:83:b8:ec:59:bf:
e0:3d:ae:ff:40:f6:7b:b3:4a:04:2e:bf:39:6b:b8:
04:c1:ee:6d:a6:21:c2:d5:9b:0f:91:e8:86:2f:02:
79:de:22:31:a0:c0:ba:ea:9e:44:2a:18:77:2e:da:
6e:14:f6:9d:5d:7e:96:59:f1:07:a1:6a:f6:0f:06:
90:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:5B:EF:04:B8:07:BD:9B:C6:BF:7B:AD:C3:F3:A3:8D:D0:9B:4B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ccxb7wS4B72bxr97rcPzo43Qm0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:33:5e:c5:ac:67:22:3c:70:f5:18:13:03:16:d9:2a:bf:9c:
82:99:42:53:4c:72:3a:20:e0:55:70:a0:22:1d:b6:f9:36:dc:
e5:71:37:2b:2d:68:7b:32:2e:81:61:dc:ad:3f:d2:01:72:e5:
38:63:e1:1b:fa:56:f9:ca:84:81:eb:45:4c:ad:33:40:86:a2:
34:dd:7a:f9:73:a3:cf:da:ed:99:2b:18:a8:38:9d:11:b7:a5:
65:64:98:53:4a:c1:dd:b6:b1:d6:a5:0d:e9:e6:1f:8c:de:2f:
31:2a:ba:b1:b1:88:96:fd:48:7c:a3:a5:b1:38:cf:f9:6b:3d:
96:db:53:54:08:e6:04:b2:d2:29:78:b2:bb:5e:b5:c3:8a:3e:
66:d7:9c:cc:dc:fd:39:4a:79:7b:06:f2:f7:99:77:e0:10:da:
3f:40:88:d6:70:aa:cb:06:d4:4e:07:43:2c:33:69:33:ad:01:
1e:bb:81:53:8f:9f:cf:e6:99:a1:94:fc:10:c4:73:5a:c4:4e:
fe:20:c2:36:a6:d1:68:ad:b0:50:44:3c:c0:e5:44:6f:19:95:
db:ea:2f:76:59:06:0b:f1:93:a6:8b:c4:a0:04:04:30:fd:0d:
7a:d3:ff:76:69:cf:f6:87:d5:24:6b:f4:53:5a:6f:b0:59:a3:
22:88:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:54 2026 by rpki-client