Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/i5OmNF3R_ksTFprj9Ee705dQkjg.roa
File: i5OmNF3R_ksTFprj9Ee705dQkjg.roa (raw, json)
Hash identifier: boBqLzR4UMfLWnWA65zATuTLhh3sU6E3fN3d7N7eZI8=
Subject key identifier: 8B:93:A6:34:5D:D1:FE:4B:13:16:9A:E3:F4:47:BB:D3:97:50:92:38
Certificate issuer: /CN=0f6e70497e44b47d29f54bd88112a6defb7503d1
Certificate serial: 019F236915C25C64D6D6FD628A4AD4C6F4D7
Authority key identifier: 0F:6E:70:49:7E:44:B4:7D:29:F5:4B:D8:81:12:A6:DE:FB:75:03:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/i5OmNF3R_ksTFprj9Ee705dQkjg.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50307
IP address blocks: 109.71.112.0/21 maxlen: 21
2a06:7c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:15:c2:5c:64:d6:d6:fd:62:8a:4a:d4:c6:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6e70497e44b47d29f54bd88112a6defb7503d1
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b93a6345dd1fe4b13169ae3f447bbd397509238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:51:6d:03:42:41:fc:7b:10:2c:0b:74:a2:92:
80:72:26:ae:ee:04:9b:24:2c:7a:f0:7e:0c:d7:26:
95:67:0e:f9:4e:d8:3c:89:ed:a0:74:64:34:ce:a1:
1f:b2:36:86:ec:87:03:24:fb:a0:0b:39:f3:89:7c:
e5:5c:a0:8e:00:89:62:61:e2:50:a5:fe:80:72:d9:
4f:6d:74:ed:b9:f2:a4:7d:3b:c3:0e:d9:43:54:6c:
1d:2b:58:bd:6e:3e:80:73:e1:e2:ff:d0:92:96:cd:
77:07:57:50:b8:0d:0c:58:58:1d:0f:03:67:c1:73:
7e:98:ba:c2:8a:40:13:b8:d7:20:87:00:c4:77:3e:
ce:02:93:3c:c4:fc:e0:3e:4e:f0:82:8a:a8:c2:54:
45:31:ce:9d:82:e3:9f:2c:ef:7d:0c:e1:7a:f5:03:
b3:32:92:ea:e5:ce:96:e4:1b:10:e9:22:57:79:60:
c5:0d:7b:17:28:92:93:f7:e8:4e:6b:10:6f:2f:62:
70:f9:97:03:64:ea:e6:88:9b:64:07:66:51:22:10:
0f:88:6d:b7:9e:b1:2a:2e:b0:6a:ae:18:03:5c:ea:
72:39:f3:40:e1:10:54:84:61:4c:6b:0c:f6:45:29:
16:17:14:da:07:cf:f8:35:df:3b:63:e3:ad:51:f5:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:93:A6:34:5D:D1:FE:4B:13:16:9A:E3:F4:47:BB:D3:97:50:92:38
X509v3 Authority Key Identifier:
keyid:0F:6E:70:49:7E:44:B4:7D:29:F5:4B:D8:81:12:A6:DE:FB:75:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D25wSX5EtH0p9UvYgRKm3vt1A9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/i5OmNF3R_ksTFprj9Ee705dQkjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/D25wSX5EtH0p9UvYgRKm3vt1A9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.112.0/21
IPv6:
2a06:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
92:f3:d9:91:4a:f3:fe:b9:bc:84:a9:c0:aa:13:34:9c:8d:17:
8f:9e:d8:b2:a1:6b:92:f1:46:dc:31:6f:d4:fc:af:75:f3:d1:
cd:29:3e:39:23:0f:5b:5e:f4:e7:6b:a8:ed:aa:5b:3d:6c:99:
ad:2b:e9:cf:ff:a8:9f:6b:01:fa:4b:5a:3d:06:b9:b4:84:d2:
d6:19:5f:6f:6d:62:25:cd:26:a2:b1:3a:3b:52:90:bc:e3:11:
a1:55:46:f2:5d:84:ab:e4:57:07:e7:7c:08:fc:86:fd:83:ed:
8e:f9:e7:14:9a:3c:8c:83:51:b3:09:92:e8:8e:f4:1c:e4:41:
3b:62:e5:98:23:d8:46:a4:36:c7:0f:50:5d:9d:40:9f:11:41:
9c:6c:f7:86:11:46:6b:d6:4b:18:30:af:4b:bd:77:c3:0f:b2:
a2:07:39:14:95:65:67:47:70:e0:11:17:43:fc:41:18:70:e4:
eb:18:80:33:65:b1:32:ea:22:c6:a3:5d:9e:51:ca:b4:1f:3d:
f1:67:5a:e2:9f:f8:a8:4b:b6:be:b9:86:74:20:60:a4:c1:8a:
32:ca:61:0c:5d:ac:62:77:b6:66:21:1d:d4:22:d9:14:f7:98:
ec:82:8d:53:d8:74:9f:41:2f:b9:da:53:d5:66:3e:eb:cd:4e:
2b:a0:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:11 2026 by rpki-client