Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pRLpVv9iIZr5LQ4wsfWykKRldRE.roa
File: pRLpVv9iIZr5LQ4wsfWykKRldRE.roa (raw, json)
Hash identifier: QGMiXjwGlbraV5Ix5vfPBv3PbTgRNOnp4ou8ZJDTZqc=
Subject key identifier: A5:12:E9:56:FF:62:21:9A:F9:2D:0E:30:B1:F5:B2:90:A4:65:75:11
Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Certificate serial: 019F469DA351316B699AD084C73099350FED
Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pRLpVv9iIZr5LQ4wsfWykKRldRE.roa
Signing time: Thu 09 Jul 2026 11:22:43 +0000
ROA not before: Thu 09 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 217.147.166.0/24 maxlen: 24
217.147.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:9d:a3:51:31:6b:69:9a:d0:84:c7:30:99:35:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a
Validity
Not Before: Jul 9 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a512e956ff62219af92d0e30b1f5b290a4657511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ea:c2:7c:62:30:e3:07:0e:e6:ec:ae:10:22:
d5:4f:d9:c0:2a:d4:d5:bd:7d:86:05:f6:d2:ba:47:
4d:02:bb:dd:b1:8f:17:13:93:3c:29:d2:01:1a:b6:
b8:0b:a0:f7:f1:4e:d9:8b:08:48:af:04:08:52:44:
b7:5d:e5:aa:61:7b:2b:c7:69:eb:51:b8:25:7c:7a:
e4:75:5e:9e:e7:ab:8c:05:1b:f8:bf:d4:30:5f:8f:
19:3a:af:2e:8d:aa:51:ef:e4:43:91:fd:3e:77:82:
2b:f2:2d:21:d5:97:b9:c4:45:be:38:7f:84:99:f2:
53:14:27:1a:e4:0a:c1:6f:8c:6d:18:8e:7c:d4:90:
03:56:c6:95:05:78:37:0a:4a:cb:66:0f:62:49:89:
72:f1:38:a4:ed:fd:d9:cb:15:d6:0f:c8:2b:ff:56:
04:58:c3:3b:52:03:75:2c:50:f8:43:9d:77:ea:fe:
81:db:d4:bd:fe:d5:a6:00:43:9c:51:53:67:89:2a:
d9:5f:c0:00:f8:a9:2a:83:00:6c:af:45:86:6f:de:
36:56:6c:b5:a9:6b:91:a1:83:24:69:8d:2b:0f:27:
d3:d1:ae:fb:fd:15:0b:64:d3:c8:5a:eb:c7:5d:56:
92:a8:e0:d9:1d:f2:82:cb:53:71:e8:23:5e:f4:ae:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:E9:56:FF:62:21:9A:F9:2D:0E:30:B1:F5:B2:90:A4:65:75:11
X509v3 Authority Key Identifier:
keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/pRLpVv9iIZr5LQ4wsfWykKRldRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.166.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:15:1a:c9:eb:9f:24:7e:ac:30:7d:d6:65:34:b7:f6:3b:30:
0e:f7:e6:37:fa:f3:f1:8f:09:e5:c1:0d:91:a1:bc:93:8d:a9:
2f:cf:08:35:1a:9b:3e:28:c7:37:49:54:a5:13:04:ed:e1:e8:
62:5f:95:2f:ed:e2:74:fc:c0:3e:20:ea:07:36:50:02:90:ad:
5c:59:62:ae:79:a9:90:80:d7:fe:ab:d1:c0:c1:e0:ff:36:70:
22:a3:e3:aa:cc:e2:74:f2:77:07:37:44:76:56:5d:b8:fd:7a:
6d:22:fe:44:86:e1:0b:93:2c:9b:c0:c0:59:64:0b:87:39:64:
5b:c8:38:a8:c9:f3:ec:c8:c5:f1:4b:9b:f1:a1:19:3d:c2:72:
28:8d:7f:8c:b6:5c:a3:24:1a:92:f9:1b:cd:6c:d0:97:4f:0d:
10:e7:69:63:df:49:3b:98:fd:aa:17:22:8c:c1:f2:7a:90:e5:
2f:ae:20:7a:4f:a8:22:53:68:37:dc:c1:c5:dd:c9:f1:41:e2:
fd:5b:0b:29:e9:2e:58:a5:d7:60:4d:48:1d:ea:71:e9:9a:c7:
b1:a8:a8:5b:69:8b:a4:37:00:3d:02:f5:0a:78:4e:95:fe:23:
ee:8c:15:a8:05:c8:a3:41:1f:f5:15:80:50:c9:a0:c7:e2:5b:
c3:43:a6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:23 2026 by rpki-client