Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/_7_wNAAicXXR8TnkXBd8yEi3uyI.roa
File: _7_wNAAicXXR8TnkXBd8yEi3uyI.roa (raw, json)
Hash identifier: h9pGjgHIL3tTstEJ29nRaeXUPN78zKTK73VStArFxz8=
Subject key identifier: FF:BF:F0:34:00:22:71:75:D1:F1:39:E4:5C:17:7C:C8:48:B7:BB:22
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 01A0D9C44798C153F781535C301E5A2CDB76
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/_7_wNAAicXXR8TnkXBd8yEi3uyI.roa
Signing time: Fri 25 Sep 2026 18:11:54 +0000
ROA not before: Fri 25 Sep 2026 18:11:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 217.169.192.0/20 maxlen: 24
217.169.192.0/24 maxlen: 24
217.169.194.0/24 maxlen: 24
217.169.195.0/24 maxlen: 24
217.169.196.0/24 maxlen: 24
217.169.197.0/24 maxlen: 24
217.169.199.0/24 maxlen: 24
217.169.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:c4:47:98:c1:53:f7:81:53:5c:30:1e:5a:2c:db:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Sep 25 18:11:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffbff03400227175d1f139e45c177cc848b7bb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ba:53:d6:c0:67:68:e6:96:59:20:32:cd:71:
b7:c0:cb:74:13:87:77:f2:9e:68:4d:4c:3d:06:7d:
d9:7e:4a:62:e6:fb:94:02:56:bb:eb:27:41:66:7a:
0e:7d:f6:40:46:34:b4:cf:43:57:5f:6f:3f:bd:0a:
46:09:90:b9:96:66:06:a8:1c:76:6a:f9:82:6e:47:
97:0a:01:51:37:38:44:ad:a2:02:94:81:08:0a:d5:
40:48:aa:75:92:ec:7e:86:4f:6a:b6:ec:83:4b:4b:
43:40:b2:71:1a:65:c1:94:46:ac:0a:d5:ca:f4:4e:
42:71:52:b1:13:14:38:90:5f:d5:1c:37:8c:7c:e9:
4a:21:ab:84:e6:46:0f:46:87:48:3a:02:62:13:4a:
35:7a:ee:d1:51:04:e4:bc:7b:f5:41:e6:54:07:ab:
b7:26:3a:66:d9:14:da:e8:7b:5e:c3:1d:b7:4e:9d:
1d:21:2b:c1:70:dd:8d:4c:f3:69:4f:f1:40:8b:8f:
60:ba:e0:ac:69:e8:1f:3b:6c:67:76:f9:c3:1a:af:
09:02:53:57:f6:18:1b:04:e1:82:b9:06:4d:00:90:
d2:ca:da:f3:cf:bb:6f:da:15:f1:7f:ee:d9:b9:b5:
75:f7:a9:4e:ab:b1:e3:13:99:03:f2:8b:8f:84:8a:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BF:F0:34:00:22:71:75:D1:F1:39:E4:5C:17:7C:C8:48:B7:BB:22
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/_7_wNAAicXXR8TnkXBd8yEi3uyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.169.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:77:69:f8:0b:bf:26:9b:01:33:16:33:81:89:88:55:0e:b7:
7c:c7:15:90:99:c5:b8:60:e7:fa:aa:ae:03:d6:c4:3f:2b:b8:
26:6a:ff:8f:de:50:3c:bd:da:a2:e8:3f:3c:61:96:91:24:83:
69:ff:c6:ca:71:9f:c9:69:ad:12:74:30:33:50:4d:a2:62:5e:
b4:32:5b:4a:d8:15:8a:67:ea:2a:35:72:68:09:b7:e9:da:e0:
4b:d0:16:f9:1a:ef:d2:77:bb:b3:dc:f4:ac:8a:ff:e5:3e:96:
7f:5e:c9:a7:1a:ce:3e:d3:7d:5a:b5:5c:5d:71:2e:1d:aa:16:
dd:17:59:b0:5b:9a:a8:4d:a3:f8:f9:23:6f:1f:3b:5d:dd:1e:
08:5e:82:cf:bc:ee:d0:b4:90:5d:ce:1d:6d:b0:b9:6a:e2:65:
58:f2:50:ef:81:06:b7:92:ba:cb:6d:7a:64:d0:a6:0c:77:82:
95:7c:77:05:c6:fd:aa:fb:1a:38:89:38:cf:24:6e:52:b6:01:
26:f5:8d:70:20:f5:2a:97:4b:d3:8d:e1:3a:89:e3:b2:b5:21:
0b:e9:84:d0:32:16:35:7a:2f:18:14:27:fc:12:69:4a:e2:0a:
29:27:fe:a3:7c:c3:73:7c:21:03:bb:f7:5b:d7:29:2f:14:ae:
6a:9b:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:08 2026 by rpki-client