Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/V65aqH-Zz0a_8NxsRxOb96rsblo.roa
File: V65aqH-Zz0a_8NxsRxOb96rsblo.roa (raw, json)
Hash identifier: ehed0No58ag61rcjhvMw+KmMpf+xwoKF+xv2qscSiG8=
Subject key identifier: 57:AE:5A:A8:7F:99:CF:46:BF:F0:DC:6C:47:13:9B:F7:AA:EC:6E:5A
Certificate issuer: /CN=10185d543f5aba849c02be2dbb9efa84573f4a3e
Certificate serial: 019F381897E85A53B0E0FABBFC17B7A0165A
Authority key identifier: 10:18:5D:54:3F:5A:BA:84:9C:02:BE:2D:BB:9E:FA:84:57:3F:4A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBhdVD9auoScAr4tu576hFc_Sj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/V65aqH-Zz0a_8NxsRxOb96rsblo.roa
Signing time: Mon 06 Jul 2026 15:42:43 +0000
ROA not before: Mon 06 Jul 2026 15:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206839
IP address blocks: 217.22.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/EBhdVD9auoScAr4tu576hFc_Sj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/EBhdVD9auoScAr4tu576hFc_Sj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EBhdVD9auoScAr4tu576hFc_Sj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:18:97:e8:5a:53:b0:e0:fa:bb:fc:17:b7:a0:16:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10185d543f5aba849c02be2dbb9efa84573f4a3e
Validity
Not Before: Jul 6 15:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57ae5aa87f99cf46bff0dc6c47139bf7aaec6e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:44:0b:79:10:78:27:b5:54:34:ba:2a:28:
b8:d0:ed:e4:34:a3:5c:fb:3e:d3:85:89:e1:02:4a:
1e:ba:a8:ab:7b:d5:b3:ef:0b:11:58:fa:a3:d7:aa:
c9:af:41:96:11:4b:35:34:39:7a:fb:d7:3c:19:c0:
64:f9:bd:50:f9:76:e6:24:4b:86:5f:c8:88:6c:31:
9a:ae:7d:df:d6:b4:9d:bd:0b:61:c4:2a:83:82:ae:
1a:49:e4:e1:4f:d2:c1:a0:c9:a9:2f:2e:a1:36:ae:
da:47:d0:b4:19:85:79:fe:a7:77:3d:0b:7c:9b:5d:
50:b1:82:b4:3a:ac:eb:bc:49:63:98:7e:81:fe:db:
96:6d:e2:cb:f5:16:24:0a:d5:bb:e7:56:2a:63:21:
4e:75:54:5b:2a:9a:94:54:25:e5:0a:8b:f3:78:a2:
ce:41:60:0f:be:24:c0:0e:53:34:61:5f:36:47:1c:
2d:c8:a5:4c:41:c3:24:3d:51:72:7f:56:d0:e4:c0:
18:de:4f:6b:80:1c:4e:09:9b:3f:97:18:08:24:4a:
51:72:3c:05:72:c5:b5:28:8d:af:dd:15:a9:ea:bc:
da:7f:0e:62:2a:a0:d1:ab:a7:f0:aa:ed:ee:e9:b9:
f7:bd:31:fc:03:43:43:a0:34:ab:96:9b:76:ca:e4:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:5A:A8:7F:99:CF:46:BF:F0:DC:6C:47:13:9B:F7:AA:EC:6E:5A
X509v3 Authority Key Identifier:
keyid:10:18:5D:54:3F:5A:BA:84:9C:02:BE:2D:BB:9E:FA:84:57:3F:4A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBhdVD9auoScAr4tu576hFc_Sj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/V65aqH-Zz0a_8NxsRxOb96rsblo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/134500-976d-4adc-b109-a1b1c12186d9/1/EBhdVD9auoScAr4tu576hFc_Sj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.7.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:bf:c5:7c:3b:b7:44:07:47:65:97:4a:b5:f7:98:88:5c:40:
7b:02:31:c8:87:f1:89:78:2b:78:2c:f0:aa:41:06:c1:e0:82:
64:ee:a9:4d:45:7b:21:fa:c6:64:b9:eb:16:93:46:5d:90:79:
2d:85:50:62:1b:4d:14:de:57:f8:0d:d2:bc:e3:d4:db:71:c1:
4c:cd:58:78:08:a3:5b:53:b9:ed:68:d8:7f:58:de:cc:23:e8:
63:22:89:56:74:84:f3:c6:00:0d:5a:68:8d:da:f3:6c:c5:f4:
e1:68:e4:15:60:74:7e:7b:b4:c3:05:0b:28:19:af:8b:60:96:
e0:a5:c1:b8:13:02:67:60:1a:61:a3:ff:29:48:ee:ba:0c:8b:
98:ac:25:26:fa:ea:78:6f:6c:24:62:4d:dd:38:6c:df:ea:2e:
7d:92:84:89:6b:aa:03:8a:98:db:48:af:6c:69:04:fa:4a:64:
71:f8:a3:d0:8b:bb:58:91:72:57:88:2a:55:80:b5:92:0d:1f:
11:29:28:c7:ec:cb:fd:62:bf:8e:9d:3a:98:ed:37:7c:b3:ca:
82:be:ed:31:03:b0:40:d3:1b:77:96:7f:f8:f2:9b:ab:6f:21:
96:70:93:07:13:2e:6e:6f:e8:ab:32:b8:fd:66:48:b9:16:e4:
74:5e:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:49 2026 by rpki-client