Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/t5alOfpywogJ69ms_ghfbpQSXMo.roa
File: t5alOfpywogJ69ms_ghfbpQSXMo.roa (raw, json)
Hash identifier: Xm7EQvutEbyH9q4RgfnjrzY/7bndMKJ0WVlpuryg+3k=
Subject key identifier: B7:96:A5:39:FA:72:C2:88:09:EB:D9:AC:FE:08:5F:6E:94:12:5C:CA
Certificate issuer: /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial: 019F23692467DA04F00C706D3C9F4854F931
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/t5alOfpywogJ69ms_ghfbpQSXMo.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2263
IP address blocks: 192.44.77.0/24 maxlen: 24
192.108.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:67:da:04:f0:0c:70:6d:3c:9f:48:54:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b796a539fa72c28809ebd9acfe085f6e94125cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:64:b9:da:42:6e:c1:8b:ad:46:23:02:bd:
6e:7d:dc:98:f0:c7:36:00:99:2b:fc:95:72:9f:ba:
95:7f:6d:71:aa:92:7c:07:c0:75:00:9f:cd:ff:af:
eb:32:a3:47:b2:31:5d:ca:22:b5:9b:a7:fe:4d:cb:
2e:f0:40:b7:27:3d:5e:6a:65:54:40:85:d0:31:03:
d8:31:b7:c2:97:5c:13:c6:90:27:f7:d1:15:ea:2e:
67:41:e1:58:9d:52:59:bc:17:4b:f9:05:3f:9f:f1:
06:68:b4:de:d3:c8:db:c7:ad:c9:df:84:80:72:70:
a8:e6:65:1c:48:06:5e:53:92:3a:59:de:e3:fd:c8:
68:90:6e:6e:8a:ce:21:fb:2a:ff:fa:c9:22:fa:a2:
07:a2:e6:5b:ea:9a:39:d6:c4:84:8b:06:f2:0f:f4:
35:65:b7:92:e1:45:73:ad:c9:42:c5:48:73:69:d7:
18:db:a1:92:68:93:29:67:a5:d5:22:a6:3f:f3:b4:
cd:8a:f8:bc:c6:17:5f:82:b4:fb:74:95:e3:68:ba:
36:f0:6c:92:a3:ec:de:b6:fb:d1:64:00:d7:ce:b0:
03:e1:55:cd:0d:5e:4c:45:a9:80:06:01:4a:99:ed:
33:a0:6c:cd:ca:da:5b:a0:5b:d7:27:e3:13:4f:74:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:96:A5:39:FA:72:C2:88:09:EB:D9:AC:FE:08:5F:6E:94:12:5C:CA
X509v3 Authority Key Identifier:
keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/t5alOfpywogJ69ms_ghfbpQSXMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.77.0/24
192.108.119.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c6:36:fa:8c:d6:69:90:69:db:90:b1:1b:c1:ca:b3:82:13:
82:02:50:3d:4a:39:d8:48:21:83:42:2e:6d:0e:0e:16:4d:f3:
3d:10:7f:6e:0f:6c:67:81:47:da:cd:60:41:e5:24:5e:aa:6c:
6e:87:4e:82:9f:82:22:74:cc:69:6c:9d:c8:55:61:2c:81:d3:
09:1d:99:8e:a7:29:1f:63:ab:f1:13:be:47:a3:f7:6a:bb:77:
f7:c8:37:60:88:c7:7b:27:bd:b8:a4:ee:12:13:ed:25:15:67:
ae:9c:71:b7:9c:e6:2f:b2:a1:58:d2:3f:ba:85:c6:5e:55:69:
fd:3f:5b:c8:b0:e8:40:50:76:b2:06:d4:f9:60:64:5d:7e:e7:
de:54:b7:85:9a:81:24:3c:15:d9:e5:41:5b:70:7f:ee:91:73:
54:b6:c9:fa:10:0a:4f:2f:e1:e2:c6:e4:b6:d3:09:1c:15:a7:
a4:7b:68:29:01:35:50:6f:46:89:e4:05:d5:da:71:8d:39:10:
3a:cf:10:0f:df:db:6f:1a:f5:42:d8:13:c9:de:88:36:a8:0f:
bc:76:e5:60:c6:23:77:ab:25:0e:01:c0:81:1d:e9:bc:1c:b0:
50:00:99:43:77:e0:a1:16:af:09:bf:6c:8b:2d:de:69:b9:f1:
08:cb:c6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:34 2026 by rpki-client