Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/v7uNIzxFL7ExToFNBIaww0F5PB8.roa
File: v7uNIzxFL7ExToFNBIaww0F5PB8.roa (raw, json)
Hash identifier: Dg0Flz2OmF2lqMuFCR5GqvY8tbmnQRwnOND08Misp9Q=
Subject key identifier: BF:BB:8D:23:3C:45:2F:B1:31:4E:81:4D:04:86:B0:C3:41:79:3C:1F
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 01A0BF597AF7430A846460D4F005F9767372
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/v7uNIzxFL7ExToFNBIaww0F5PB8.roa
Signing time: Sun 20 Sep 2026 15:05:07 +0000
ROA not before: Sun 20 Sep 2026 15:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199899
IP address blocks: 23.252.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:59:7a:f7:43:0a:84:64:60:d4:f0:05:f9:76:73:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 20 15:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfbb8d233c452fb1314e814d0486b0c341793c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9a:73:0c:4d:9d:49:36:42:17:8f:24:c5:59:
83:5f:1f:09:75:35:33:5a:79:58:68:cf:9f:14:b5:
c7:56:11:6e:22:60:6f:82:42:74:05:58:9b:2a:fe:
27:31:c0:f9:4f:8a:7c:9b:b6:fb:40:1c:7f:a8:ce:
b5:39:f3:5f:49:44:ad:dd:de:ff:f4:d7:73:ba:97:
4e:7f:a1:80:6d:74:41:c6:88:e7:cb:06:14:97:dc:
21:75:96:60:1a:f2:ce:19:70:99:8a:aa:a4:c8:f4:
01:aa:0d:4d:b3:6d:79:82:6d:e5:d5:b8:b5:26:14:
b1:26:4b:5a:bd:ba:d8:7c:26:6c:57:d7:43:fb:75:
e4:1d:62:6e:54:f9:14:a8:28:2d:75:40:df:44:58:
cf:ef:c5:47:42:a4:ae:13:b8:6f:71:81:4e:76:79:
ee:fa:89:31:82:a9:eb:1b:58:d8:f3:7d:39:45:ed:
c9:bd:8e:19:8e:fb:bb:b0:61:6c:1f:a5:ef:68:f1:
e8:a2:0b:d8:28:98:c0:fa:02:ee:91:2c:09:99:5e:
b4:80:b6:34:44:5b:ff:8b:c1:a8:2e:c1:93:2b:79:
ac:46:2e:3a:b7:a1:d7:c2:18:21:a5:c8:6a:34:8e:
a0:52:4f:75:12:d1:54:c2:84:d8:a7:d5:e8:3d:e9:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:8D:23:3C:45:2F:B1:31:4E:81:4D:04:86:B0:C3:41:79:3C:1F
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/v7uNIzxFL7ExToFNBIaww0F5PB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.252.75.0/24
Signature Algorithm: sha256WithRSAEncryption
80:93:55:05:f1:8b:90:13:55:ed:62:c1:d7:30:45:73:41:ed:
44:72:d4:e5:22:f3:0f:9d:ca:ec:58:e3:b3:ed:f7:e6:4e:70:
fa:35:31:34:86:f4:38:1e:76:67:0b:9d:3d:f1:17:db:28:c5:
be:0f:fd:63:d1:76:88:16:db:44:e0:92:46:f8:ba:30:1c:0c:
f3:ce:52:6e:38:51:6f:e3:ef:e2:26:b2:48:a8:cf:b2:9c:eb:
4c:8e:dc:0e:c5:18:9a:93:bb:40:02:39:ff:06:a1:e9:d4:d5:
ea:3a:24:ca:1c:bd:71:c5:ea:b8:e2:a1:33:47:18:d6:4c:ae:
61:0c:99:95:e1:23:50:a6:ab:21:72:28:eb:24:3d:ff:db:34:
c6:2a:48:a1:4d:0a:52:a6:ca:b5:ae:78:cb:9a:d2:34:55:e7:
0f:dc:d4:34:8c:df:9d:30:cb:f1:81:35:a4:70:52:fa:12:37:
18:8d:a2:e9:06:0e:55:65:6a:dd:c3:ae:aa:11:1d:5a:c6:b2:
ff:c1:a8:c6:31:5c:c8:88:e5:ae:1f:e0:36:33:6b:5b:15:08:
e5:2f:71:88:71:f4:08:bc:53:93:c3:d8:4d:fe:ee:16:30:ab:
c5:60:fb:31:cc:e1:68:da:21:40:46:00:c2:bd:5a:75:0b:c7:
cb:13:72:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:44 2026 by rpki-client