Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/bHM7HWlokuLAKGZUYW39_tqn2Fk.roa
File: bHM7HWlokuLAKGZUYW39_tqn2Fk.roa (raw, json)
Hash identifier: k5ZFTQBnrO/pZ+ljvAJJsNDjRf0esZ6TDnbCraHVTUQ=
Subject key identifier: 6C:73:3B:1D:69:68:92:E2:C0:28:66:54:61:6D:FD:FE:DA:A7:D8:59
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019F1D74D6365AA5AF709CD4CFA44FF894BC
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/bHM7HWlokuLAKGZUYW39_tqn2Fk.roa
Signing time: Wed 01 Jul 2026 11:33:44 +0000
ROA not before: Wed 01 Jul 2026 11:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204671
IP address blocks: 217.22.5.0/24 maxlen: 24
2001:678:5e0::/48 maxlen: 48
2a14:b680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:74:d6:36:5a:a5:af:70:9c:d4:cf:a4:4f:f8:94:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Jul 1 11:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c733b1d696892e2c0286654616dfdfedaa7d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:ca:c6:66:50:a5:32:57:3c:28:ff:a6:20:
3f:d4:6f:23:d0:0a:08:27:e7:e1:82:01:76:1e:3a:
03:b4:59:94:64:9c:62:e7:48:ca:f0:5c:74:7a:8c:
22:65:95:00:02:de:1b:f9:9d:b6:72:2e:5d:12:1f:
f6:a0:ab:7d:7e:51:e0:b9:ea:88:9f:19:19:6e:10:
47:eb:a5:77:e9:60:21:0f:58:e4:75:36:cb:06:91:
8b:94:6a:54:ec:d2:b9:e5:05:61:67:87:9d:24:4b:
9e:d3:23:84:ad:c2:8c:42:36:0d:d4:00:ef:0e:b8:
dc:0e:58:35:77:a1:06:1f:a5:2a:81:e4:43:9e:01:
ab:2d:09:6c:c1:82:13:56:28:4a:03:97:f4:1f:bc:
93:48:c9:38:e4:32:92:4c:59:1b:8c:f8:22:65:2c:
05:fa:64:82:4a:4d:e5:f4:f5:f1:b2:e9:9d:76:d0:
af:1c:47:7f:4f:ed:fa:6a:3c:a2:86:47:a5:25:cd:
9d:84:28:0d:d2:26:58:b0:2c:0e:cd:32:06:f0:07:
e8:48:9d:d3:f5:28:0b:4b:79:8e:81:ca:d8:c4:e6:
d7:28:9d:b7:95:39:49:e9:af:2d:8d:7a:94:b8:f4:
22:73:15:ff:c0:62:cd:16:67:c3:7a:b1:9d:54:6d:
08:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:3B:1D:69:68:92:E2:C0:28:66:54:61:6D:FD:FE:DA:A7:D8:59
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/bHM7HWlokuLAKGZUYW39_tqn2Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.22.5.0/24
IPv6:
2001:678:5e0::/48
2a14:b680::/48
Signature Algorithm: sha256WithRSAEncryption
64:e6:fa:85:4f:1d:7e:d6:b0:3b:fe:a9:13:5c:7b:db:79:17:
e0:16:8e:40:ba:94:1d:f9:86:99:ea:ab:36:f4:95:0b:ec:4a:
f8:e8:bd:53:de:8b:c9:26:69:7a:ac:0b:3b:e4:1a:08:82:3f:
a7:bc:d9:c5:ec:72:a7:99:0e:64:33:b4:20:1c:f7:c2:05:f3:
9a:c5:3f:89:92:01:25:a5:d6:41:16:bf:2a:12:64:dd:8b:d9:
0e:65:ae:41:ab:25:f3:21:06:ca:b0:90:89:39:43:2a:83:55:
0a:09:f2:75:ef:d1:46:13:c7:6b:09:17:16:c6:2a:46:f2:54:
88:7b:39:ac:bd:d3:56:35:23:98:5d:15:6f:8c:c9:11:51:2a:
a9:4d:7f:45:95:d3:65:23:ad:11:19:a3:72:b1:4b:65:ea:94:
fb:dc:e4:4e:b1:be:62:34:7d:c7:70:fd:4e:b6:ea:a6:45:61:
c7:15:e4:fa:32:36:dc:e0:32:78:de:9b:66:27:9a:c4:31:f4:
53:18:b6:a7:2a:b9:14:84:2f:34:6d:9c:e5:36:3c:c6:4b:89:
9c:96:77:c5:70:31:f7:c5:b3:88:c1:15:52:90:bf:ef:f5:5e:
5c:c0:a1:1f:f4:1a:17:71:06:0a:70:67:f6:d5:d5:c4:16:a7:
e1:c5:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:12 2026 by rpki-client