Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa
File: spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa (raw, json)
Hash identifier: BXi3IKk77rzMZn4UUQVhpo+TVx8nOmwNympB1D3a7c8=
Subject key identifier: B2:96:70:A5:35:97:EF:35:FD:A6:AC:43:45:50:47:A6:ED:6A:D2:44
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019F3424A48BA56CEA84C0616070C7D0F7D4
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa
Signing time: Sun 05 Jul 2026 21:17:24 +0000
ROA not before: Sun 05 Jul 2026 21:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 207.89.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:34:24:a4:8b:a5:6c:ea:84:c0:61:60:70:c7:d0:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jul 5 21:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b29670a53597ef35fda6ac43455047a6ed6ad244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:48:e5:cf:8d:df:36:2a:7c:56:bf:a3:be:c1:
53:4e:bb:35:d9:80:0d:12:af:a6:85:26:68:c9:8a:
a0:16:45:6a:d2:e2:11:a3:8b:85:d3:55:b1:1a:38:
62:e0:98:08:62:ac:e1:84:76:4d:f6:79:9d:16:75:
31:1f:9f:7b:85:c2:d7:1d:6d:d1:be:de:42:ea:e7:
ea:1f:35:52:35:9d:8f:f9:ac:5a:8a:09:65:6a:e6:
b7:eb:2e:9d:be:6f:b1:58:70:29:d0:ec:9d:fa:e0:
16:df:6f:19:bd:19:79:ee:b8:b9:d1:b1:41:c9:22:
8c:28:7f:95:52:89:ae:5d:7e:92:23:c8:7b:ab:21:
6d:8c:d7:13:ee:3b:18:cd:c6:42:95:bd:95:e8:47:
cc:24:73:2d:e4:72:fd:70:40:2e:c8:3d:46:73:fd:
64:0f:eb:2e:2b:51:ae:61:46:13:a0:d7:42:a0:bc:
39:15:62:b1:0a:05:53:34:26:85:b6:c2:04:72:a5:
be:cc:8c:f7:24:38:9a:08:9e:1a:f2:f8:72:cd:ad:
63:4a:5f:72:3c:1a:0a:20:87:be:b4:e1:7c:e9:79:
32:9d:89:bc:b7:2d:da:96:db:f8:ab:31:fe:97:43:
2e:d6:f9:38:63:e4:1d:84:84:f2:80:d6:05:15:8d:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:96:70:A5:35:97:EF:35:FD:A6:AC:43:45:50:47:A6:ED:6A:D2:44
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/spZwpTWX7zX9pqxDRVBHpu1q0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.89.16.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e9:08:38:bd:2a:d9:0d:62:1d:4f:72:f5:be:3b:94:96:13:
c3:cc:3c:23:dc:6b:a6:4c:82:1a:1b:5e:77:1e:5f:09:d4:d2:
c3:69:36:4d:80:f5:69:7d:08:59:5d:f7:81:0b:dd:a7:6e:63:
b9:13:3f:66:09:6f:11:20:2f:ea:14:65:8a:86:e1:2e:e6:2b:
d3:4c:41:73:a1:4e:3c:fb:34:c0:c7:41:29:2b:e9:d6:6e:b8:
9a:77:c5:c3:0b:2d:78:26:15:93:f0:2e:34:5f:d8:69:5f:db:
6f:14:bc:d5:ce:19:b1:f5:71:78:8e:c0:e5:a2:e3:01:a7:c1:
12:83:4b:90:ad:17:b6:78:92:b4:da:85:0f:64:d3:a5:05:1f:
d6:cf:a7:f3:03:4d:01:84:a6:4c:2f:11:00:88:f5:dd:2e:6f:
87:4b:86:ad:99:dd:b6:6c:f8:aa:60:7d:e3:8e:95:2f:6e:d9:
1e:3d:32:e1:35:1d:d2:eb:a6:01:48:c0:94:23:e5:67:81:75:
4c:36:5e:dd:43:f7:5e:54:e0:f0:66:bd:a6:24:20:14:ae:d7:
65:64:96:68:af:89:08:11:e8:1c:ca:0c:29:fb:c1:6c:41:d2:
49:38:8b:7a:2d:50:b9:14:a1:29:a0:b2:bd:d2:45:a1:3c:b7:
eb:99:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:14 2026 by rpki-client