Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/l1sAh0N6wY9QZkbVcWdPb1L4GAE.roa
File: l1sAh0N6wY9QZkbVcWdPb1L4GAE.roa (raw, json)
Hash identifier: KySd4mM+6AWPFzd6Iw/xQF6VoZKyotaqUBRCH2n9meY=
Subject key identifier: 97:5B:00:87:43:7A:C1:8F:50:66:46:D5:71:67:4F:6F:52:F8:18:01
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F8FEC3973E5995B23FE45F4B5EB2557AD
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/l1sAh0N6wY9QZkbVcWdPb1L4GAE.roa
Signing time: Thu 23 Jul 2026 17:00:50 +0000
ROA not before: Thu 23 Jul 2026 17:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212643
IP address blocks: 141.105.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:39:73:e5:99:5b:23:fe:45:f4:b5:eb:25:57:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 23 17:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=975b0087437ac18f506646d571674f6f52f81801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:2f:0a:47:86:6e:38:9b:2f:88:1b:a9:e8:
c9:f9:33:6a:fe:c1:80:c7:61:5c:0d:98:1f:84:0a:
5c:14:a9:96:e8:6b:dd:d3:24:60:07:3e:30:db:73:
f1:98:6b:c4:57:c1:10:bc:df:21:0e:00:0b:2e:44:
9c:55:f0:66:ab:2f:46:81:96:94:10:f9:12:6f:0a:
5f:42:ba:ba:a1:f0:b0:13:88:89:be:ba:0c:ab:25:
24:f4:a6:26:45:b0:b7:9b:21:85:ee:41:d8:36:da:
e4:31:4e:74:99:9b:8a:97:91:51:44:87:78:ff:fe:
c1:f7:0d:f3:bc:a1:1a:7a:30:f2:9d:40:0c:1e:26:
58:e5:18:c6:64:49:e4:e0:2d:db:3a:78:9f:4d:85:
27:12:27:84:9a:73:7b:7e:46:0c:7c:bb:99:a7:02:
ee:64:e4:5b:bc:82:e4:9b:4d:c3:4c:ae:8d:ac:70:
65:6e:35:e8:13:c2:df:2f:76:df:61:38:98:0b:c6:
98:b9:00:1a:b6:30:2e:3e:90:0c:3f:6b:48:c7:0d:
eb:e4:93:3c:87:bd:90:57:19:2a:13:41:da:49:68:
61:05:79:ce:ad:c5:41:dd:3a:7d:56:1c:f3:8f:87:
e9:4c:82:47:bc:b1:03:20:aa:aa:7a:c6:6a:7e:b0:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:00:87:43:7A:C1:8F:50:66:46:D5:71:67:4F:6F:52:F8:18:01
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/l1sAh0N6wY9QZkbVcWdPb1L4GAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.137.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a3:a0:d1:bc:6b:32:84:1a:b9:c5:98:21:de:32:d0:65:fa:
39:e8:d8:c5:b0:f7:75:5e:c7:ba:74:f0:32:e9:a2:7c:11:41:
15:34:48:95:7f:3d:f1:f7:b3:5a:ff:b3:ce:f0:54:20:72:4a:
98:5b:ff:d4:a7:d1:0e:2c:85:4e:cd:a3:cb:d2:5f:e9:98:c6:
75:d2:9f:74:ef:41:6b:5d:b8:7f:8e:c8:0c:a1:e8:b9:38:a7:
69:89:b5:61:e0:ce:78:b8:69:cb:06:dc:f5:e2:5b:97:c0:7f:
ab:9a:ea:8f:ba:c5:9f:c2:8f:ac:38:06:f2:e9:91:bb:2c:db:
db:a8:ad:55:93:3f:74:ae:fe:f1:c9:82:64:e0:c3:1a:d3:df:
3f:ac:24:9c:e1:2a:eb:9b:f4:dc:19:8f:de:c4:18:26:c1:7f:
94:30:a1:4b:20:65:47:3d:c4:cc:1a:48:fe:3b:8a:05:f7:e6:
cf:b5:45:16:b4:1f:e5:0e:f2:e5:d9:de:8c:3d:1b:28:fd:44:
f1:97:07:c4:e5:bb:66:99:c3:e9:30:b7:cd:44:02:47:a7:cd:
e3:b2:c7:51:67:a6:6d:b6:11:e8:36:a8:2b:47:55:9f:69:2b:
d6:06:4e:88:e8:30:dd:d8:83:b3:96:42:3c:30:1b:95:3f:47:
36:83:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:09 2026 by rpki-client