Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa
File: 0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa (raw, json)
Hash identifier: mtRTQIogdYCGX/FRYcEHTrpW3dJUutGmmUeZceCASwo=
Subject key identifier: D2:7E:C1:8E:CB:94:B4:C2:BD:7A:EC:77:64:F2:11:85:49:8C:58:A5
Certificate issuer: /CN=67ca28c85f53709237557ded6a54db7c43838fdf
Certificate serial: 019F23684AD8198874F07F562CD936FAE62D
Authority key identifier: 67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47910
IP address blocks: 193.42.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:d8:19:88:74:f0:7f:56:2c:d9:36:fa:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ca28c85f53709237557ded6a54db7c43838fdf
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d27ec18ecb94b4c2bd7aec7764f21185498c58a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:36:72:62:bf:a0:a2:3b:af:d7:4b:ed:9d:
f7:2b:b7:e5:f0:d1:15:5a:d5:52:2c:e0:f3:d9:7b:
66:08:70:4c:76:81:12:88:69:d9:e2:3a:a8:1f:14:
ef:57:0f:be:e5:9f:a3:2b:30:e4:aa:1a:f7:65:cb:
55:18:4c:85:cc:b4:b8:82:2f:6e:a8:81:a6:46:73:
f5:09:d7:6e:b5:e3:a7:45:21:da:99:c0:c1:04:37:
d6:56:db:a5:48:cd:f4:a8:3d:bc:45:76:3b:af:f1:
f1:82:5f:8b:15:3f:3d:1b:7c:0b:25:4f:a4:a7:05:
95:46:44:62:1c:65:6f:5f:c7:c9:74:ad:e3:69:b2:
f2:02:64:cb:f5:81:07:1d:82:56:9b:9a:ed:cc:7b:
18:ba:19:5d:67:6d:41:ea:32:a4:6e:b0:21:c4:01:
d7:6c:54:ff:e1:42:5d:2d:6d:8f:e5:2a:47:30:5c:
0b:d0:0d:ca:a7:ec:a6:c7:63:9d:bf:31:54:7d:a8:
1b:4c:ad:99:04:aa:ea:3e:19:2c:54:b8:c3:e5:73:
8d:56:43:b9:ac:43:a2:a2:a1:f4:3d:67:86:cf:fa:
54:c5:6c:9e:a5:de:48:a7:b3:00:78:ff:84:eb:e5:
e0:74:5c:6a:15:10:39:6b:83:eb:3b:02:96:52:fb:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7E:C1:8E:CB:94:B4:C2:BD:7A:EC:77:64:F2:11:85:49:8C:58:A5
X509v3 Authority Key Identifier:
keyid:67:CA:28:C8:5F:53:70:92:37:55:7D:ED:6A:54:DB:7C:43:83:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8ooyF9TcJI3VX3talTbfEODj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/0n7BjsuUtMK9eux3ZPIRhUmMWKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d79fbe-6132-43be-b8c3-3eea51adbd94/1/Z8ooyF9TcJI3VX3talTbfEODj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.142.0/24
Signature Algorithm: sha256WithRSAEncryption
57:da:40:c4:4b:d8:e5:12:2a:ca:78:e5:1c:62:77:ab:72:b2:
67:0c:ea:4a:ba:6e:06:36:a4:ff:e6:74:53:86:9c:d4:2c:79:
74:dd:21:6d:36:b2:66:50:b9:54:29:2d:dc:ef:e4:f1:06:1e:
98:10:eb:3a:5e:9a:ea:43:8d:66:54:c7:65:12:cd:62:74:91:
34:38:e3:36:ab:b8:11:55:d9:f2:29:64:94:c2:56:e8:32:f7:
54:fc:42:1d:ea:15:bb:ca:e9:d1:d3:ac:82:24:60:bc:73:27:
9c:d6:d6:91:1a:8e:95:08:5c:bf:05:e2:fd:58:78:89:44:0e:
32:a7:de:9c:0c:35:58:2a:bb:36:e0:90:23:98:32:af:3a:a0:
e4:80:6e:35:08:94:f8:94:e9:50:bc:26:96:91:ed:70:4e:02:
29:3d:90:d3:1c:b2:ff:b5:03:79:6f:ad:91:33:fb:1f:cb:cd:
84:da:ed:d0:60:62:f3:49:c2:b9:ee:40:32:1c:14:de:61:fd:
72:4a:2c:2d:9a:ee:79:33:ef:3c:87:b6:bd:a8:d5:60:2b:7a:
90:b6:52:d4:bb:ea:f6:e3:0f:97:ab:9e:5b:ab:1f:6f:62:36:
32:8b:70:97:21:e8:c3:5e:de:8c:1c:9f:68:05:6f:0b:9b:26:
2d:fc:92:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:50 2026 by rpki-client