Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-c5YCZb17TBl6Mbt4vhtwewO4mU.roa
File: 1-c5YCZb17TBl6Mbt4vhtwewO4mU.roa (raw, json)
Hash identifier: NqFMA1w9jBcsgemz02lDoOhXg/kRQ6qJQXsVy+4xmbo=
Subject key identifier: F9:CE:58:09:96:F5:ED:30:65:E8:C6:ED:E2:F8:6D:C1:EC:0E:E2:65
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F89152F68158D258EA3EAF4073A05310C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-c5YCZb17TBl6Mbt4vhtwewO4mU.roa
Signing time: Wed 22 Jul 2026 09:08:14 +0000
ROA not before: Wed 22 Jul 2026 09:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10753
IP address blocks: 109.204.102.0/24 maxlen: 24
109.204.104.0/21 maxlen: 21
109.204.114.0/24 maxlen: 24
109.204.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:15:2f:68:15:8d:25:8e:a3:ea:f4:07:3a:05:31:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 22 09:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ce580996f5ed3065e8c6ede2f86dc1ec0ee265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:6d:86:b1:d0:18:d2:cb:de:08:b9:29:ae:
3a:cc:8a:44:8f:15:10:e8:1d:b8:41:82:7d:fd:bb:
0e:c4:95:b6:5c:1f:9f:b8:aa:d6:8c:0a:ff:a9:18:
80:43:89:d3:0e:ea:73:80:82:34:b9:52:25:06:d0:
90:77:24:1b:0d:bf:9a:fa:49:e1:4d:a4:88:40:09:
68:72:a1:fd:85:ea:61:b3:27:fc:7d:73:cb:26:0a:
2e:52:26:68:69:ef:8c:8d:e5:7b:e4:43:5a:9a:c3:
6c:15:73:1a:5a:02:47:d0:f7:de:cb:28:18:cf:af:
d6:02:de:82:ee:2d:1c:5d:4e:5c:ab:3e:de:f7:25:
20:42:3b:8d:02:48:c1:68:93:ae:85:9f:0d:53:43:
d4:a3:56:c9:35:fc:cf:84:4a:b8:0b:17:02:0b:96:
1a:b1:17:74:36:d3:b6:24:39:9f:1b:0d:79:2e:b2:
3d:50:01:9b:04:75:2e:af:30:95:a6:28:fe:4d:3f:
6d:a4:59:2b:a0:9e:ae:6f:72:86:4b:9c:41:54:6a:
67:ea:a4:54:1a:fa:32:2f:70:e5:bb:bd:3a:ab:20:
e7:57:a2:e7:04:9c:1b:02:70:20:ba:7e:16:0f:da:
30:e5:34:f4:9e:c2:ab:70:11:ee:67:0d:a1:20:e4:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:58:09:96:F5:ED:30:65:E8:C6:ED:E2:F8:6D:C1:EC:0E:E2:65
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-c5YCZb17TBl6Mbt4vhtwewO4mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.204.102.0/24
109.204.104.0/21
109.204.114.0/24
109.204.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:de:d7:d1:d8:47:31:2f:64:2a:4f:65:6e:7b:2f:90:45:70:
21:a2:58:93:e1:cb:41:c2:03:ab:41:2d:dc:e6:63:97:4c:82:
e4:57:fe:7f:e7:e4:36:63:3d:9c:90:f3:97:7a:9c:c0:29:16:
0f:2a:65:f0:b2:6e:e1:16:b1:55:0b:69:f2:3a:7f:77:af:7b:
78:cc:16:66:1a:a2:10:c7:2e:f8:b6:8b:ae:52:7e:27:1f:1d:
6b:78:9b:c0:2e:4e:5c:ab:2d:7a:ff:5b:36:02:5d:db:1e:a3:
91:7b:fe:de:e2:48:ff:17:c7:b4:0d:2d:ba:51:8c:cc:b1:0e:
9f:1c:df:a3:e3:51:e2:17:12:0d:04:cb:5b:52:87:7f:fb:64:
61:e2:dc:43:5b:fe:6a:59:50:a4:e7:19:28:51:62:1b:70:54:
6f:7d:05:13:04:0c:a5:0c:82:7f:33:58:6b:d2:3b:2d:3d:cd:
ef:1b:5e:7c:5a:b6:ae:1c:30:8b:26:fb:62:11:d0:47:96:5b:
7f:04:23:62:72:49:d3:9b:54:7c:40:73:3d:8a:40:f4:01:ea:
5c:9a:41:f6:4f:de:92:c9:1b:8b:ae:9c:9b:50:3a:8a:ce:6c:
b8:89:7c:d4:ed:8c:e0:53:23:44:ae:85:aa:ee:a2:3e:69:a3:
e2:68:f8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:20 2026 by rpki-client