Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/OT57yXSbDNvvHun6s7sHVisvfQk.roa
File: OT57yXSbDNvvHun6s7sHVisvfQk.roa (raw, json)
Hash identifier: 3pa538tOYg66gGxDb3UhtAM2x4zp7Zx6CRCpsE/DupM=
Subject key identifier: 39:3E:7B:C9:74:9B:0C:DB:EF:1E:E9:FA:B3:BB:07:56:2B:2F:7D:09
Certificate issuer: /CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Certificate serial: 019F5A732608D33954DD534E8EAF17B4EB91
Authority key identifier: CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/OT57yXSbDNvvHun6s7sHVisvfQk.roa
Signing time: Mon 13 Jul 2026 07:48:43 +0000
ROA not before: Mon 13 Jul 2026 07:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 176.117.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:73:26:08:d3:39:54:dd:53:4e:8e:af:17:b4:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca61478e4d659bece8203c5e8ba8e8f82f0470d7
Validity
Not Before: Jul 13 07:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=393e7bc9749b0cdbef1ee9fab3bb07562b2f7d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:31:d2:a0:b9:36:ad:68:26:33:11:e7:e4:
1d:f7:e1:85:f7:9f:d2:8f:79:10:ca:1d:0f:1f:c5:
b1:91:c5:8e:7f:82:9d:a3:6b:da:34:25:af:3d:ca:
68:6f:8f:ff:f5:4c:2d:da:d4:d9:8e:46:4f:50:8a:
9c:c3:31:28:52:30:eb:d6:96:c3:02:97:c2:34:f1:
60:c2:c9:a0:42:9d:fe:f5:f4:59:7e:7d:64:17:c1:
1f:61:1d:db:5f:f8:f0:51:be:8c:b0:cd:8e:8a:2a:
a9:36:91:d3:f4:1f:0c:68:bf:0e:ca:04:b0:a9:93:
8d:dd:9b:27:d8:ab:b4:de:52:02:89:f2:fc:be:e3:
98:6e:53:ac:23:45:32:67:83:bf:88:99:c1:33:08:
3c:ce:34:99:9a:d7:71:82:d9:35:c2:f6:8b:4a:b1:
f1:99:87:5c:99:a8:c9:69:37:03:e7:2d:a6:37:ec:
63:d9:cd:0c:fb:99:bf:bd:22:ff:53:79:c9:c7:1d:
f7:a3:aa:38:99:59:13:13:61:a3:34:90:63:52:29:
31:79:98:77:bd:3a:a1:49:bb:ee:ac:44:b2:fe:b5:
c3:a1:eb:99:e5:a7:f5:21:21:13:24:23:61:cc:9a:
85:f2:74:7f:8a:20:33:c1:06:f4:81:6f:d5:2b:f7:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3E:7B:C9:74:9B:0C:DB:EF:1E:E9:FA:B3:BB:07:56:2B:2F:7D:09
X509v3 Authority Key Identifier:
keyid:CA:61:47:8E:4D:65:9B:EC:E8:20:3C:5E:8B:A8:E8:F8:2F:04:70:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymFHjk1lm-zoIDxei6jo-C8EcNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/OT57yXSbDNvvHun6s7sHVisvfQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/279b66-38f1-41a5-90e2-946da5f5efbb/1/ymFHjk1lm-zoIDxei6jo-C8EcNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:9f:29:dc:c2:25:1e:c1:32:b0:46:66:2f:88:17:08:2e:58:
5f:71:7d:df:39:1c:1b:e4:b7:7a:14:48:de:e0:2a:48:c2:49:
30:21:29:4d:d1:ea:0c:bf:f9:b5:ae:6c:9b:a8:24:2c:94:04:
0c:3c:1b:16:55:bd:90:e4:f4:d0:cc:61:dd:df:20:cf:9a:11:
2f:ea:02:31:2e:a0:89:30:01:0a:5e:bc:72:8c:6a:65:15:30:
36:08:07:f3:01:7b:6e:6a:fa:c8:b5:8b:1c:0d:72:15:0a:da:
3e:43:8a:de:1d:08:64:5d:f2:cd:a5:0d:b3:65:8b:ad:41:80:
8a:7d:47:8b:3e:11:3a:fa:ba:33:49:85:de:e0:c5:01:b2:2b:
c5:80:67:37:cb:96:ad:9b:16:59:00:62:7e:59:6e:c3:64:0a:
16:ee:57:8d:c4:06:6e:95:e2:03:ff:96:90:76:92:86:f9:c6:
b9:a3:8a:34:39:81:66:d9:73:a5:17:75:35:df:6e:d1:b9:65:
8e:16:05:fd:0c:35:d4:3f:7c:19:60:47:4b:34:81:dc:6f:98:
b9:42:eb:d1:2f:03:95:63:ba:b4:8d:b9:6c:9c:b9:41:79:0c:
db:d9:6a:56:ff:ae:17:b3:ce:b1:27:79:e6:25:66:c4:35:d2:
ed:af:a7:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9acyYI0zlU3VNOjq8XtOuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNjE0NzhlNGQ2NTliZWNlODIwM2M1ZThiYThlOGY4MmYw
NDcwZDcwHhcNMjYwNzEzMDc0ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTNlN2JjOTc0OWIwY2RiZWYxZWU5ZmFiM2JiMDc1NjJiMmY3ZDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz8x0qC5Nq1oJjMR5+Qd9+GF95/S
j3kQyh0PH8WxkcWOf4Kdo2vaNCWvPcpob4//9Uwt2tTZjkZPUIqcwzEoUjDr1pbD
ApfCNPFgwsmgQp3+9fRZfn1kF8EfYR3bX/jwUb6MsM2OiiqpNpHT9B8MaL8OygSw
qZON3Zsn2Ku03lICifL8vuOYblOsI0UyZ4O/iJnBMwg8zjSZmtdxgtk1wvaLSrHx
mYdcmajJaTcD5y2mN+xj2c0M+5m/vSL/U3nJxx33o6o4mVkTE2GjNJBjUikxeZh3
vTqhSbvurESy/rXDoeuZ5af1ISETJCNhzJqF8nR/iiAzwQb0gW/VK/cmKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDk+e8l0mwzb7x7p+rO7B1YrL30JMB8GA1UdIwQY
MBaAFMphR45NZZvs6CA8Xouo6PgvBHDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTIt
OTQ2ZGE1ZjVlZmJiLzEvT1Q1N3lYU2JETnZ2SHVuNnM3c0hWaXN2ZlFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNzliNjYtMzhmMS00MWE1LTkwZTItOTQ2ZGE1ZjVlZmJi
LzEveW1GSGprMWxtLXpvSUR4ZWk2am8tQzhFY05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHVrMA0G
CSqGSIb3DQEBCwUAA4IBAQBanyncwiUewTKwRmYviBcILlhfcX3fORwb5Ld6FEje
4CpIwkkwISlN0eoMv/m1rmybqCQslAQMPBsWVb2Q5PTQzGHd3yDPmhEv6gIxLqCJ
MAEKXrxyjGplFTA2CAfzAXtuavrItYscDXIVCto+Q4reHQhkXfLNpQ2zZYutQYCK
fUeLPhE6+rozSYXe4MUBsivFgGc3y5atmxZZAGJ+WW7DZAoW7leNxAZuleID/5aQ
dpKG+ca5o4o0OYFm2XOlF3U1327RuWWOFgX9DDXUP3wZYEdLNIHcb5i5QuvRLwOV
Y7q0jblsnLlBeQzb2WpW/64Xs86xJ3nmJWbENdLtr6dY
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:56 2026 by rpki-client