Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/t-dP-AZPnkHkqlHCU8x_OBKeSlc.roa
File: t-dP-AZPnkHkqlHCU8x_OBKeSlc.roa (raw, json)
Hash identifier: Qz6w+jK0frNTIX2n5fHtLF6eSk5shlSZoaqEzEllZnU=
Subject key identifier: B7:E7:4F:F8:06:4F:9E:41:E4:AA:51:C2:53:CC:7F:38:12:9E:4A:57
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019F18E75E05F571FA5A2C1714DA3485E6A2
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/t-dP-AZPnkHkqlHCU8x_OBKeSlc.roa
Signing time: Tue 30 Jun 2026 14:20:43 +0000
ROA not before: Tue 30 Jun 2026 14:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41033
IP address blocks: 94.131.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:e7:5e:05:f5:71:fa:5a:2c:17:14:da:34:85:e6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 30 14:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7e74ff8064f9e41e4aa51c253cc7f38129e4a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:09:5e:1a:10:2e:5f:81:f9:b0:b7:eb:02:
4b:2a:b1:6a:10:02:3c:0e:c9:47:e1:33:cd:0f:1f:
c6:c2:0c:be:b8:01:af:7d:dc:f3:db:65:df:37:bb:
32:ae:5f:1e:74:88:5a:48:9b:e1:5b:75:52:d5:bd:
d3:60:b8:2b:ca:14:f2:87:36:61:0f:5d:60:64:ab:
c6:81:05:bc:fb:3a:f1:5f:dd:59:d8:f8:00:71:70:
3f:3b:d1:25:db:74:1c:3a:59:b3:2e:df:36:92:64:
6c:6b:50:b1:07:ea:a5:a7:d2:bd:c3:e1:17:9b:8a:
98:1a:a9:24:14:08:ed:12:47:b1:5b:50:36:da:38:
05:92:a0:49:c3:d0:27:f5:31:21:7b:a1:6e:48:85:
c5:f4:1a:b2:7f:e6:ed:7b:04:a2:89:86:46:8c:85:
77:6b:0a:fa:d2:48:9e:4b:0c:eb:65:4b:2e:90:e6:
d9:37:25:27:62:d2:66:02:81:43:e0:4b:09:44:54:
e8:44:c8:0b:57:f0:bb:1d:1d:9f:9f:cc:e2:91:c1:
5f:a0:96:a1:af:fc:ac:5c:e5:02:f8:54:6d:4f:d9:
a0:4d:1e:d6:a0:24:6c:c5:69:69:63:4f:ef:d3:a0:
fd:dc:96:aa:4e:10:d9:e6:e5:df:f1:3d:df:0e:5c:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E7:4F:F8:06:4F:9E:41:E4:AA:51:C2:53:CC:7F:38:12:9E:4A:57
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/t-dP-AZPnkHkqlHCU8x_OBKeSlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.218.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d1:1d:21:7e:f1:f8:39:1e:09:01:94:f5:3c:86:91:14:89:
82:80:63:c3:9d:51:b5:5b:54:b3:2c:ce:43:6d:45:4d:38:db:
ea:1a:40:d7:de:ca:36:c0:1d:3e:be:78:c3:5d:6c:dc:e7:85:
de:52:01:79:12:eb:fc:2b:54:f9:93:89:60:e8:49:ae:ef:9d:
10:96:21:07:02:12:16:77:70:46:3e:9b:40:f9:18:18:e9:c2:
bf:85:03:7d:d5:a4:48:97:ba:0c:05:6e:17:64:f2:d0:04:7a:
2f:a4:1a:e9:83:f8:c7:3b:56:12:79:e5:fc:db:30:97:9e:3f:
6f:10:3d:3e:86:29:e9:95:66:29:eb:e7:4c:2a:ba:57:7b:a6:
ef:24:73:73:69:79:84:d3:7e:bd:a3:49:f5:df:ca:86:bf:37:
81:2b:7d:b6:a4:27:c4:54:59:53:f1:15:3d:e4:6b:2d:84:45:
18:ff:e7:6a:ec:75:14:5b:73:dd:39:b2:45:18:82:ad:bd:d4:
af:73:93:7a:0d:09:7d:58:12:5e:1d:fe:04:ed:42:46:d5:36:
1f:e4:ac:2f:02:85:59:33:45:6f:e8:f0:f2:0c:58:58:dd:4d:
69:e5:c3:ae:31:d3:5d:e1:8d:45:03:cc:da:90:fa:b9:9f:0a:
3e:1f:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:37 2026 by rpki-client