Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa
File: rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa (raw, json)
Hash identifier: gCYbQwWeJazWuKam4wgBrsfYsq8VV5PKDsC6OZTN4xA=
Subject key identifier: AE:54:F1:57:DF:C0:64:CB:EF:21:82:1D:3F:86:64:33:D3:B1:3F:34
Certificate issuer: /CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Certificate serial: 019F28080B77316B312509613A64CC91DC5A
Authority key identifier: E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa
Signing time: Fri 03 Jul 2026 12:50:43 +0000
ROA not before: Fri 03 Jul 2026 12:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211919
IP address blocks: 185.235.79.0/24 maxlen: 24
2a07:940::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:08:0b:77:31:6b:31:25:09:61:3a:64:cc:91:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36d594f5fe382bec2ce8e3a31a8f28e6d97c01e
Validity
Not Before: Jul 3 12:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae54f157dfc064cbef21821d3f866433d3b13f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:e9:6a:d9:26:fa:ad:e4:ac:e3:b6:89:39:
8d:c0:0b:b2:45:0e:e1:9a:a2:07:28:67:76:06:40:
d9:22:6e:20:1d:ce:e2:f0:88:1e:43:c2:d3:40:59:
a8:37:e0:bd:32:4a:b4:17:37:9e:2c:0e:d2:e3:92:
87:fb:e6:de:96:e5:f4:c6:f9:fe:d4:1f:a3:af:bd:
01:8b:54:3b:f9:7f:05:4e:4d:56:c0:3d:44:f7:db:
ce:bf:ec:60:e4:c6:7f:c4:38:f2:0a:43:ab:1c:03:
e1:68:74:f5:97:76:7e:80:b1:2c:a5:c4:ed:c6:f5:
4f:47:7f:15:ba:ba:71:83:1f:b8:c6:2d:49:f4:9b:
ef:8b:2e:39:6b:bd:03:da:79:2d:78:d2:e7:56:80:
1d:db:28:39:d8:24:f1:68:f9:c8:1e:2d:cb:b7:00:
b9:fe:27:11:90:16:82:d3:06:d1:4e:35:d7:af:7a:
51:50:96:98:60:cd:1a:9c:43:78:c8:4f:d5:c9:b1:
26:c6:bd:75:ac:5f:1a:a3:65:60:fb:72:7a:50:5f:
68:ee:b1:09:2b:fc:81:fb:ae:32:0a:63:bc:3e:aa:
a4:69:86:27:1d:f1:86:97:48:14:87:ad:0c:a4:d1:
19:0d:b9:40:45:33:e5:21:42:9f:fb:10:3f:62:bc:
1e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:54:F1:57:DF:C0:64:CB:EF:21:82:1D:3F:86:64:33:D3:B1:3F:34
X509v3 Authority Key Identifier:
keyid:E3:6D:59:4F:5F:E3:82:BE:C2:CE:8E:3A:31:A8:F2:8E:6D:97:C0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/421ZT1_jgr7Czo46Majyjm2XwB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/rlTxV9_AZMvvIYIdP4ZkM9OxPzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e5df49-44b8-434e-a811-57194668cea9/1/421ZT1_jgr7Czo46Majyjm2XwB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.79.0/24
IPv6:
2a07:940::/32
Signature Algorithm: sha256WithRSAEncryption
01:98:e6:66:8a:1b:ce:35:89:be:eb:54:bb:b2:6d:30:06:9c:
08:e8:c8:73:71:61:73:ec:03:63:60:4f:09:1b:cc:6d:90:a3:
bc:ae:9b:e3:33:bc:00:c8:cb:59:eb:74:ad:89:ec:36:54:de:
b8:1a:22:0d:44:72:c6:08:3b:91:44:9a:31:15:04:6e:e0:38:
d5:98:3a:d2:08:38:4c:5a:dc:ac:71:2c:89:5f:8b:44:68:37:
eb:85:42:14:43:29:d5:6d:83:d2:39:5c:80:dc:da:f6:42:c3:
68:df:48:4d:df:83:70:b6:e6:4f:4c:87:f9:c6:e2:a9:3d:1f:
52:89:bf:c6:2c:0e:3d:5f:7a:22:b3:11:e8:34:db:7f:cd:46:
15:22:8a:dd:02:a1:dd:2a:c7:b8:ea:16:31:ca:77:94:c4:2b:
58:e9:90:86:45:59:b8:95:f9:bc:6c:ab:b6:3e:2c:f5:d2:61:
30:78:75:a0:10:d9:b1:80:fc:90:5c:b7:34:ba:ba:b2:78:bc:
21:1e:3c:c5:4c:5a:cb:de:90:fc:97:2d:1a:2a:47:06:64:99:
1f:6d:a9:bd:4b:99:67:d9:46:a5:7b:56:19:a6:9d:5a:97:b1:
2e:56:b2:aa:dc:a0:a3:cb:89:f0:5b:79:45:84:a4:4a:cb:7e:
53:ea:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:26 2026 by rpki-client