Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa
File: pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa (raw, json)
Hash identifier: TDT0jcowVii6rblfICInjysSX3+/qS6/908mLzL3IDE=
Subject key identifier: A4:A7:27:F1:93:A4:11:10:FE:5C:B6:60:3D:E5:0B:11:0D:AA:3E:86
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F2368396852D2246E2D2D0BCE4D2444C6
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209619
IP address blocks: 156.17.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:39:68:52:d2:24:6e:2d:2d:0b:ce:4d:24:44:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4a727f193a41110fe5cb6603de50b110daa3e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b6:52:c6:e1:7a:b5:3d:77:78:f7:80:c5:62:
41:b2:df:1c:6c:6a:c5:81:8f:f8:ec:8b:24:46:ec:
a2:be:d5:24:98:9a:08:3a:43:39:e4:9f:a6:31:83:
69:f8:fa:47:b3:51:33:31:e0:ec:19:52:f5:77:36:
86:cc:59:da:f6:e5:24:20:d4:8c:d1:b0:39:9b:df:
88:cc:ad:97:c6:00:e2:b7:31:b3:cf:5f:ce:1c:a9:
76:26:d9:20:1f:1a:f1:de:70:cd:e8:ae:d9:4a:53:
c7:ff:93:c9:b4:b0:d0:99:8f:6e:79:28:34:91:a9:
ee:8f:d3:cc:1b:03:7e:68:ba:a7:3e:a3:46:5c:14:
fa:9f:e0:ea:90:35:dc:d5:42:34:44:59:b3:4d:f2:
1f:1f:cf:1d:8c:05:58:26:54:28:f4:97:74:d3:07:
db:2b:1d:aa:1e:4a:0a:4c:af:b2:0c:a1:fa:0e:6d:
fd:5f:04:89:a3:5c:e7:ee:2c:73:1d:f1:ff:fc:ee:
9c:ec:52:a1:6c:bc:de:97:c7:80:c0:04:a6:d3:af:
03:b5:22:da:43:67:f8:25:05:05:df:39:31:dc:35:
71:b6:ce:d5:74:b2:4f:af:89:1f:71:50:0e:c2:ae:
3a:14:22:00:97:7e:5d:a2:ca:20:ed:36:ab:22:55:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A7:27:F1:93:A4:11:10:FE:5C:B6:60:3D:E5:0B:11:0D:AA:3E:86
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/pKcn8ZOkERD-XLZgPeULEQ2qPoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.17.204.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c1:9d:1c:0b:20:6c:4d:79:bc:b2:19:d4:6a:e6:96:6c:bf:
e2:ed:16:d7:c5:69:6d:97:24:4d:a9:99:9c:4d:da:5a:9f:92:
15:08:4f:b1:d7:9f:b8:b3:29:a0:69:e3:f3:ae:e4:2c:fb:f1:
ff:c8:80:35:46:41:86:90:d0:f7:bd:9e:ac:1e:ec:be:01:4d:
ed:37:01:18:29:d2:07:48:e0:01:02:37:1b:e2:ba:3c:15:24:
5f:cf:6d:36:79:ff:c8:8c:63:20:75:27:9a:b9:b9:75:f4:70:
7d:0f:11:1c:69:85:db:ac:0c:79:4c:40:e1:e5:65:49:6c:1c:
e6:c8:1c:18:70:67:2d:55:d7:d0:d7:b3:8f:57:b5:0c:f5:db:
d8:49:db:37:da:e7:3f:00:cb:15:de:97:57:b8:1e:48:a4:ad:
65:83:c5:22:02:69:b2:61:b9:70:24:06:52:98:8c:13:71:86:
08:d7:c9:e0:f5:62:80:cb:e5:09:73:3e:fe:93:d5:1d:cf:5d:
d8:3a:58:80:01:39:be:c9:4a:f0:a7:78:2a:13:7b:07:0f:25:
54:7b:47:91:b6:b2:c8:92:b8:b7:af:eb:2e:ba:88:51:84:f1:
4c:e6:a2:14:2c:75:d1:0c:23:4c:eb:e3:c1:9a:ae:ab:f1:8e:
c7:3e:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:49 2026 by rpki-client