Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/syeK9CuRFEI8WMGC-N6sOcltkCY.roa
File: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (raw, json)
Hash identifier: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=
Subject key identifier: B3:27:8A:F4:2B:91:14:42:3C:58:C1:82:F8:DE:AC:39:C9:6D:90:26
Certificate issuer: /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial: 019F753D235E7A6FDF000FA3FA88677CC6FF
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/syeK9CuRFEI8WMGC-N6sOcltkCY.roa
Signing time: Sat 18 Jul 2026 12:39:28 +0000
ROA not before: Sat 18 Jul 2026 12:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 217.22.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:3d:23:5e:7a:6f:df:00:0f:a3:fa:88:67:7c:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
Validity
Not Before: Jul 18 12:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3278af42b9114423c58c182f8deac39c96d9026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:6b:74:a4:a2:6f:66:1f:2f:82:68:57:40:
a3:8e:4c:32:ae:e8:8c:e8:e8:7a:8e:9e:6e:fb:8c:
33:c0:42:9a:8a:c0:4b:6a:6b:14:d9:10:c7:df:10:
e8:3c:10:cb:6c:46:72:18:11:82:7f:8f:ee:ed:f1:
d0:4c:f5:20:98:a7:85:a3:6e:99:78:70:6b:da:09:
6b:10:a1:82:63:1d:b6:17:72:b1:82:6b:59:5d:1f:
c4:b6:0a:0f:1d:64:60:8e:25:c8:95:12:e5:1f:de:
79:aa:1e:64:38:59:06:43:91:3b:1c:ef:34:ad:41:
9c:aa:01:85:bd:fb:09:13:b9:5c:e8:02:71:5c:eb:
61:e1:c7:0a:6a:bf:da:18:c6:00:e7:84:6a:16:d4:
31:60:56:c6:31:47:d7:bc:f4:7f:9b:62:a0:da:32:
75:05:36:35:08:ea:ab:9f:a4:b2:00:4f:41:0e:46:
a9:64:fe:ec:45:24:61:03:7c:3d:b8:28:90:3c:e9:
08:83:d9:62:20:bc:70:bf:59:af:68:d2:1d:5e:6f:
de:95:b7:1d:73:b3:17:a2:aa:f5:b8:e9:35:0f:66:
54:e7:c6:67:2e:5d:e6:7b:ab:fa:5b:6c:dc:34:f0:
7f:3b:18:df:76:9d:99:ba:5f:e9:08:e5:d0:b3:23:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:8A:F4:2B:91:14:42:3C:58:C1:82:F8:DE:AC:39:C9:6D:90:26
X509v3 Authority Key Identifier:
keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/syeK9CuRFEI8WMGC-N6sOcltkCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:77:aa:b9:44:a8:6f:37:b1:48:4e:7e:27:8b:c2:1d:7a:
2a:3e:02:53:96:f4:cd:73:d8:d0:19:e5:02:06:df:45:f5:65:
c1:7e:09:8c:b3:ea:72:5e:96:3a:44:dc:71:85:37:45:f3:40:
24:11:2e:31:aa:a3:bc:75:2c:04:9d:5d:b3:98:68:5f:85:86:
b9:31:58:d2:a6:cb:5d:2f:d1:bb:c2:11:72:5e:27:1a:26:60:
50:7c:ea:d3:1e:b6:0d:6e:b5:90:81:2e:4a:ab:bf:f3:36:d9:
3a:fc:52:e0:6e:88:07:f2:45:d6:a2:bf:14:10:95:44:a5:70:
8f:ec:fb:c0:79:18:42:85:e3:86:92:d5:83:ea:54:c5:47:a0:
2c:00:36:bc:0b:59:ca:ec:e4:8c:10:f9:cf:7c:9f:a2:cc:bb:
78:a4:74:85:d9:83:6f:1d:83:ae:f1:84:8b:66:aa:20:2d:88:
82:68:b4:a2:4e:8f:40:e5:80:97:87:c3:bd:64:0b:1d:8d:17:
49:7a:cc:bc:53:63:46:48:2e:7d:67:8d:69:8e:ed:54:20:c7:
a2:47:2d:a7:21:57:6f:62:8b:0f:6e:13:d3:f1:ce:29:c9:f2:
c7:a5:98:9c:a4:76:2e:41:52:ee:82:86:ee:9b:13:b3:52:d1:
90:4b:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:58 2026 by rpki-client