Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/cP1pRSbGF2VydLggt4WcH_Io63k.roa
File: cP1pRSbGF2VydLggt4WcH_Io63k.roa (raw, json)
Hash identifier: rej2g9WtxITjbtIMhQNau2HJc/7FPh2+SNTgiY69p1A=
Subject key identifier: 70:FD:69:45:26:C6:17:65:72:74:B8:20:B7:85:9C:1F:F2:28:EB:79
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F2368388853619E9AE693208E0D2342D6
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/cP1pRSbGF2VydLggt4WcH_Io63k.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206632
IP address blocks: 156.17.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:38:88:53:61:9e:9a:e6:93:20:8e:0d:23:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70fd694526c617657274b820b7859c1ff228eb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:1e:f9:b2:48:02:80:a1:9c:95:e5:31:13:
9e:e2:7e:fe:ec:32:08:00:5e:f5:d3:b5:f6:a9:07:
8f:41:1b:13:12:29:09:35:48:52:ac:15:85:87:dc:
86:d9:9e:4c:f8:4e:42:70:24:37:23:99:25:5f:be:
8c:87:80:f9:ea:53:90:3c:fc:f8:a0:1b:85:fb:0d:
e9:00:71:3f:e1:e5:57:9a:8a:ff:9e:cc:59:c2:f7:
4e:64:e1:be:05:09:57:24:2e:a3:ff:43:85:78:7e:
4a:6c:80:b1:8c:06:91:70:74:0e:18:c6:b0:4e:ca:
98:48:d6:7b:00:f0:2b:6a:7a:60:8c:d9:f0:a0:84:
b7:9d:7a:69:5f:5c:46:95:ff:bc:e9:be:75:47:1e:
f4:8f:d7:a7:ba:0f:0e:a0:3c:fa:ca:f2:d0:21:9a:
39:8e:03:d0:ab:be:44:be:be:eb:1a:cc:df:ae:f2:
cc:8f:b2:94:26:2c:67:0f:15:92:2c:89:d8:ad:bd:
68:eb:69:46:9c:97:af:79:e5:59:73:fe:5c:7e:a5:
29:49:82:d0:26:7e:25:46:ba:a5:78:c5:e9:b5:f1:
ee:2e:53:b5:cd:57:85:34:18:56:d8:f9:96:d6:38:
87:6d:72:26:ea:48:c7:73:c0:fd:73:07:a0:70:13:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:69:45:26:C6:17:65:72:74:B8:20:B7:85:9C:1F:F2:28:EB:79
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/cP1pRSbGF2VydLggt4WcH_Io63k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a6:ac:90:37:1f:36:e8:fc:d3:ce:83:4e:a0:f7:51:a4:94:
3e:e4:e6:5f:4d:ec:cc:9a:2b:09:5b:93:a0:3b:d7:0e:34:aa:
dd:33:a1:0f:68:5b:5f:a1:06:69:20:62:fd:e1:12:08:57:1a:
07:45:07:85:08:43:88:4b:88:7d:27:ce:81:bd:ab:4e:d8:e5:
d3:d6:79:a7:a7:f3:b7:bd:68:c9:91:32:de:63:8b:97:fa:c2:
11:4d:9e:af:de:b8:9f:86:e4:3f:e7:65:36:7e:25:c8:4f:36:
2f:c8:09:c0:ca:c8:92:de:b7:20:be:f4:f1:46:a5:4f:4b:b5:
fe:9c:1d:02:fb:ff:cc:33:0b:7b:f9:e8:62:67:aa:55:62:29:
3c:73:1f:ce:4d:e7:6b:0b:cc:b6:4f:49:d8:b2:9c:97:96:1a:
e5:12:9e:c8:28:67:b4:76:6a:bc:f2:0b:7e:9e:5c:79:0d:ff:
37:47:45:23:c7:ce:7f:f9:b3:90:1b:ff:1f:64:3e:43:ae:c9:
05:a6:80:0e:1e:a4:b2:62:cb:d9:d4:1a:82:36:4c:77:e5:67:
7c:b3:37:54:4a:80:29:08:b3:95:3c:52:88:04:15:90:d3:6a:
11:95:cc:25:48:d7:8e:b2:a9:75:f6:27:dd:96:7a:2c:74:6f:
b8:c8:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:15 2026 by rpki-client