Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa
File: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (raw, json)
Hash identifier: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=
Subject key identifier: 11:C7:35:B8:B9:2F:EB:63:69:BF:66:6D:CA:43:C8:97:3F:1F:BC:9E
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 019F702CE94AB10BF8DC37A1F80CCE2DA8FC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa
Signing time: Fri 17 Jul 2026 13:03:39 +0000
ROA not before: Fri 17 Jul 2026 13:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399138
IP address blocks: 31.133.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:2c:e9:4a:b1:0b:f8:dc:37:a1:f8:0c:ce:2d:a8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jul 17 13:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11c735b8b92feb6369bf666dca43c8973f1fbc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:3e:7c:6a:4e:65:8f:9a:90:23:f0:bb:2c:
16:75:22:79:5f:46:b2:a4:92:53:cf:c6:d5:ba:c2:
7a:4d:7a:de:d4:5d:d0:da:a5:29:a7:0e:73:fe:61:
b9:c3:56:9f:dd:0b:4f:a7:0f:12:ab:55:66:36:21:
62:01:f6:c1:fa:2b:65:f8:66:5c:51:31:ff:19:a4:
fe:93:fa:eb:2d:86:ed:68:12:e2:31:3f:f1:e3:fc:
fa:7a:64:85:25:ab:65:91:25:62:c5:4d:66:fd:1b:
59:5b:5d:b1:96:2e:40:b5:87:00:52:81:1b:c4:40:
e5:73:fb:db:ae:b4:50:72:ea:dc:d7:f0:4c:10:8d:
7c:cd:5b:63:cd:28:cb:ff:a3:e4:bc:57:d1:ae:f9:
ba:9a:12:03:a9:47:3c:3e:36:52:f2:c0:8c:46:ee:
5e:40:e3:28:08:1c:51:78:4b:07:f4:cf:95:3e:83:
49:ab:8e:14:7d:77:db:6f:cd:57:d2:8a:12:b7:a2:
0b:37:94:8c:a1:aa:90:ff:6c:79:c0:14:64:6e:c1:
76:b6:2b:f1:d2:86:2a:e0:90:02:d0:b3:02:42:03:
32:e8:7b:5a:c8:10:42:47:2b:54:93:7e:ea:35:32:
b1:30:97:c0:8c:bb:be:3e:18:62:b1:17:8d:56:80:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:35:B8:B9:2F:EB:63:69:BF:66:6D:CA:43:C8:97:3F:1F:BC:9E
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:6b:c3:dc:bc:c1:b4:7c:d8:1a:f8:33:63:e6:99:71:71:f9:
c0:39:0d:de:4b:c2:ec:97:8d:8a:4a:1f:a9:a1:df:a6:0d:ad:
e3:25:39:de:20:c6:8a:d4:96:c7:f0:1f:6f:81:ba:ab:fc:8e:
27:d6:de:8b:55:19:9a:9a:5a:2d:43:fe:07:25:52:18:09:ad:
05:85:99:83:a0:5d:f0:f7:a1:22:8e:e7:f8:33:5d:06:e0:3d:
75:30:f4:41:d7:5c:33:dd:7a:44:7f:5d:be:e3:e8:81:98:c6:
e8:27:a1:db:ff:11:9d:39:89:a7:70:09:7e:a4:4d:41:e1:f3:
e3:ad:ae:e7:80:3c:d2:b1:f5:af:3a:fa:f4:6e:b6:83:5d:87:
95:54:0d:4e:57:aa:53:a2:56:06:74:54:70:e0:41:3b:74:15:
2e:98:55:4b:d4:c5:dd:25:13:a3:c5:29:0a:6a:5f:74:ce:c2:
27:7c:29:87:31:65:d8:52:df:ea:a6:2a:f5:69:0c:35:ff:c3:
ce:52:ae:1f:ca:b4:fb:61:29:60:0b:4c:e7:6d:b4:6a:ef:68:
ab:7d:d2:f3:92:91:65:d8:b5:5a:16:25:76:5a:f5:9a:4c:e4:
24:a8:a4:2b:76:92:59:86:2f:d6:28:d9:36:29:e9:aa:5f:69:
0b:86:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:16 2026 by rpki-client