Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/pyuYJO0JvQk4_lPVmwUIAiKdtzA.roa
File: pyuYJO0JvQk4_lPVmwUIAiKdtzA.roa (raw, json)
Hash identifier: spVuUAlmbbx/0IommTdJLfUQZK543PbUAYnHl5p8iNI=
Subject key identifier: A7:2B:98:24:ED:09:BD:09:38:FE:53:D5:9B:05:08:02:22:9D:B7:30
Certificate issuer: /CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Certificate serial: 019F23688C13D3ED96B6D8642B3DEE169B3C
Authority key identifier: F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/pyuYJO0JvQk4_lPVmwUIAiKdtzA.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201471
IP address blocks: 84.40.0.0/20 maxlen: 24
84.40.32.0/21 maxlen: 24
176.223.248.0/23 maxlen: 24
176.223.250.0/23 maxlen: 24
2001:67c:4dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8c:13:d3:ed:96:b6:d8:64:2b:3d:ee:16:9b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25dbd1e38f3a7444d75252cdc5aa0ffd49bbb92
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a72b9824ed09bd0938fe53d59b050802229db730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:6c:8a:25:34:f3:f1:e9:cd:78:6c:d2:4d:
1f:2f:7c:65:7e:a1:9c:9a:9f:72:db:28:2c:25:86:
c1:61:05:0a:e6:cc:87:31:d2:93:d6:b6:93:50:84:
6c:3f:57:ba:1b:95:57:ac:da:d4:c2:0b:92:6b:82:
e5:33:ca:1e:d0:1a:e7:5a:4a:cb:af:ac:b8:4d:4f:
98:68:dc:02:23:53:a7:f4:00:5b:09:cc:da:0c:18:
7c:22:c0:cb:14:82:81:09:ae:87:78:ea:60:03:4d:
53:14:b7:e1:0d:50:72:4a:c8:f1:68:63:fd:62:ea:
97:b9:5f:84:28:b6:10:df:da:36:c2:4e:54:87:9d:
89:9d:ad:01:68:95:53:75:d3:e7:28:f7:d2:26:c9:
9c:d5:33:f3:08:86:3d:90:48:33:1d:89:d8:24:09:
48:01:cb:c3:35:67:76:0b:28:6a:7e:3e:cd:ef:36:
55:e2:ce:08:20:b4:8d:19:2c:96:3e:ca:5e:35:70:
d5:b2:ed:d0:fb:e9:64:fe:33:75:66:df:8e:a7:34:
89:70:6f:2c:94:6a:6a:8e:67:86:82:98:df:c3:9d:
1d:b6:00:d6:40:d3:6d:de:93:21:f0:77:1e:67:81:
d8:b5:7e:9b:f8:b3:2e:ed:ac:91:54:7d:4d:7a:0e:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2B:98:24:ED:09:BD:09:38:FE:53:D5:9B:05:08:02:22:9D:B7:30
X509v3 Authority Key Identifier:
keyid:F2:5D:BD:1E:38:F3:A7:44:4D:75:25:2C:DC:5A:A0:FF:D4:9B:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/pyuYJO0JvQk4_lPVmwUIAiKdtzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/8l29Hjjzp0RNdSUs3Fqg_9Sbu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.0.0/20
84.40.32.0/21
176.223.248.0/22
IPv6:
2001:67c:4dc::/48
Signature Algorithm: sha256WithRSAEncryption
6f:09:f3:d4:30:99:d9:d9:09:92:63:6e:7d:6b:40:e8:1e:00:
13:d9:b5:66:d9:39:a6:f1:31:6f:13:dd:0f:fe:a0:81:56:f0:
43:ed:22:15:40:7f:f2:3c:97:2c:97:fa:75:8b:91:ad:94:9d:
6d:4e:9e:d7:0e:4d:92:49:1f:d6:98:6f:5e:5e:0c:9e:6d:04:
29:26:39:46:26:56:35:34:77:33:89:5b:f6:6c:e7:f8:58:ca:
9e:d8:03:fe:91:81:9b:a1:d0:7f:4b:94:ec:f6:20:e6:64:1c:
d7:62:e3:37:94:f0:54:ac:78:ad:d5:0f:8a:5b:ea:4f:64:b0:
79:ab:49:e7:13:fa:fe:2e:00:39:4b:b9:af:07:3b:71:5e:b0:
8b:5f:80:2e:83:11:79:f5:de:60:f2:32:f4:4e:5d:b8:4d:14:
f8:69:55:cd:64:9d:4b:61:64:2d:67:1d:17:86:95:eb:05:09:
fe:87:b5:71:3a:9c:5a:28:1d:96:90:89:a7:18:12:75:51:5f:
cc:3d:37:5e:b5:a9:7e:ef:37:7f:6d:d9:c2:f0:7b:87:51:89:
de:7c:f8:29:d3:dc:85:eb:86:ad:28:75:1f:3b:55:b9:a1:98:
77:15:ef:b0:bf:50:fb:82:be:15:06:54:02:9a:37:df:56:5b:
42:0e:34:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:30 2026 by rpki-client