Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/4UrXqTyIhsiIh5MLmWgIum1q7pw.roa
File: 4UrXqTyIhsiIh5MLmWgIum1q7pw.roa (raw, json)
Hash identifier: 2Njc07dtF+G/jfmcnG8T0/AFPXKazhzNBGgSu3w0kFk=
Subject key identifier: E1:4A:D7:A9:3C:88:86:C8:88:87:93:0B:99:68:08:BA:6D:6A:EE:9C
Certificate issuer: /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial: 019F23692403FDE736925DF40B2D16307FDE
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/4UrXqTyIhsiIh5MLmWgIum1q7pw.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 192.44.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:03:fd:e7:36:92:5d:f4:0b:2d:16:30:7f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14ad7a93c8886c88887930b996808ba6d6aee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9f:c2:9e:39:db:0d:61:9a:9f:7e:88:b5:ed:
d9:cb:45:81:c3:2f:8d:82:fb:30:39:61:c7:57:db:
c4:c6:1f:a1:84:18:a3:4e:fb:ac:66:ee:59:e2:fe:
ac:d2:f6:73:01:78:60:d8:69:22:23:e9:85:33:78:
50:50:90:f5:1f:86:21:40:05:e1:21:e2:87:a9:9d:
82:f6:f7:01:55:2f:28:ec:41:fe:a4:af:38:6b:6f:
07:eb:d2:d3:df:f9:d3:45:ef:82:e0:be:4d:72:bc:
c7:78:fb:df:07:ba:aa:d4:9a:75:82:b7:ce:b7:8b:
23:33:47:8e:8e:cd:2b:14:c0:fa:bd:5f:52:53:c0:
c6:f8:65:54:ad:5c:ab:d8:e5:d7:bd:79:52:f2:7c:
cc:c8:45:ac:3e:e6:ea:78:1f:75:6e:db:38:c8:df:
2c:6f:60:3b:95:02:ca:c0:a1:c0:64:c0:15:9b:fb:
70:f4:86:d6:61:18:56:d0:e1:68:b9:35:dd:b3:0c:
6a:24:25:99:ae:3a:f0:f1:b7:ea:62:13:b0:16:8e:
8d:a1:75:74:d8:0b:3b:e8:8e:6f:81:b3:b0:d3:f2:
79:41:1f:12:f9:84:9f:0f:c3:e6:c1:a9:e7:5e:b8:
bf:16:d9:b6:29:a9:a0:a3:bb:36:b4:d0:ad:f5:1e:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:D7:A9:3C:88:86:C8:88:87:93:0B:99:68:08:BA:6D:6A:EE:9C
X509v3 Authority Key Identifier:
keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/4UrXqTyIhsiIh5MLmWgIum1q7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.76.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4f:c0:c6:c7:be:3c:38:ae:d1:78:b7:9c:73:62:db:76:34:
6a:b3:31:15:df:62:cc:b1:c7:85:c5:00:67:3b:d3:d1:19:ca:
a3:9d:08:de:89:20:a3:73:8e:ca:86:37:01:a4:0c:10:fb:23:
1d:02:15:8d:f3:a0:f6:c8:73:6e:d8:23:9a:43:da:f8:36:17:
f6:8e:66:61:02:27:7c:7a:b7:df:e7:2f:ce:9c:98:76:80:85:
df:a3:35:fa:f9:8a:a7:d2:af:31:2b:f9:cc:90:11:12:13:32:
7c:23:50:2f:16:ea:70:8e:19:ff:04:b7:58:16:84:b0:20:2a:
cc:67:ed:41:b7:11:8a:06:f8:9e:40:ce:a9:0f:fa:22:a6:e0:
e6:b6:da:9e:96:bd:fe:49:34:d1:d0:27:1d:0f:6a:83:dc:7e:
28:f2:2b:4b:2f:c5:af:b2:27:24:b9:59:f9:f6:8d:d2:87:6d:
ad:e0:ea:00:0a:ff:b4:3e:4d:da:2f:a0:93:20:a0:37:4e:c7:
02:74:41:d1:5e:29:33:e1:05:8f:63:ed:f9:8e:c1:7f:ea:db:
39:ad:c4:3c:05:04:c1:21:9e:52:b1:43:f9:3f:b2:db:3f:55:
7b:4d:4f:ca:21:f3:80:75:b9:63:b0:c5:da:be:23:4a:27:15:
4a:b7:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:02 2026 by rpki-client