Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/97z5LT1W4vZYavKPXg_O49_MY-s.roa
File: 97z5LT1W4vZYavKPXg_O49_MY-s.roa (raw, json)
Hash identifier: gyOyoIXXJi4jWXdpeab8PuMwCqtDwMbIU0Xhxks68Zc=
Subject key identifier: F7:BC:F9:2D:3D:56:E2:F6:58:6A:F2:8F:5E:0F:CE:E3:DF:CC:63:EB
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 019F27B94F0ECEA002D48B182E664452BF33
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/97z5LT1W4vZYavKPXg_O49_MY-s.roa
Signing time: Fri 03 Jul 2026 11:24:43 +0000
ROA not before: Fri 03 Jul 2026 11:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212996
IP address blocks: 69.38.207.0/24 maxlen: 24
176.10.89.0/24 maxlen: 24
2a13:d8c1::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 48
2a13:d8c2:6::/48 maxlen: 48
2a13:d8c3::/32 maxlen: 32
2a13:d8c4:5::/48 maxlen: 48
2a13:d8c4:6::/48 maxlen: 48
2a13:d8c4:8::/48 maxlen: 48
2a13:d8c5::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:b9:4f:0e:ce:a0:02:d4:8b:18:2e:66:44:52:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Jul 3 11:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7bcf92d3d56e2f6586af28f5e0fcee3dfcc63eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:15:ae:3a:80:c9:9a:5b:6f:96:d6:7b:65:
60:25:cd:a7:f6:af:a2:2a:a6:c4:89:82:2e:c6:8d:
e7:af:a7:c1:26:1f:8c:17:d7:22:4d:a9:89:c8:d2:
aa:47:8d:40:3f:29:55:81:f2:2f:da:f1:27:2e:f9:
cc:4e:56:76:8c:47:58:43:b9:44:9c:1c:8a:89:e5:
b4:e5:be:c4:6d:c0:8f:d2:32:e8:65:a9:d6:de:35:
96:6d:df:f9:74:34:68:9c:78:f7:52:e9:a9:2a:a3:
5d:72:d6:ef:e8:a2:15:26:7a:b1:67:b8:49:88:03:
45:ee:d2:de:bd:d8:38:a4:e8:bb:3a:a3:69:c0:22:
3c:48:fc:a4:7b:c7:93:16:e8:e7:05:0e:94:ad:09:
c7:57:64:6f:72:f5:48:f6:7d:bf:93:d6:ed:7c:d9:
09:5e:2d:d4:48:a0:5c:f6:89:2a:ff:0d:bc:3a:fe:
47:95:d3:32:d7:a1:33:e0:53:dd:f1:f2:5b:e7:32:
dd:73:7b:f5:00:11:31:4a:86:c4:ed:59:1a:10:bd:
79:25:ba:3c:a5:5c:d5:3d:9a:6f:25:73:92:f0:b3:
db:b7:b1:eb:c1:6f:c6:aa:39:ba:3e:e5:35:9e:8b:
69:4a:33:be:50:69:be:a3:32:eb:86:ef:36:71:e3:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BC:F9:2D:3D:56:E2:F6:58:6A:F2:8F:5E:0F:CE:E3:DF:CC:63:EB
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/97z5LT1W4vZYavKPXg_O49_MY-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.38.207.0/24
176.10.89.0/24
IPv6:
2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff
2a13:d8c4:5::-2a13:d8c4:6:ffff:ffff:ffff:ffff:ffff
2a13:d8c4:8::/48
2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:6a:e6:58:e4:cc:79:0e:bd:b0:98:02:89:b5:2a:9a:da:15:
ee:95:dc:22:43:08:cc:ff:e4:eb:9c:20:cd:e6:2c:b6:7b:9d:
21:89:c6:4d:12:ae:4a:f3:e2:91:57:ef:ff:de:2a:6f:19:91:
32:df:b7:ce:fb:b7:15:14:51:d5:66:fb:20:12:50:07:3b:51:
b5:e5:18:6f:fa:d5:68:7b:83:09:12:d6:e0:17:16:2b:8a:2a:
dd:f8:af:af:fc:0f:da:fa:0e:d5:c0:40:f6:45:69:f9:a6:c0:
13:08:6c:7c:36:84:93:76:3e:e9:b7:72:e2:4f:4b:9a:eb:34:
6b:61:5d:12:44:6c:ea:15:05:f2:6c:b3:7a:58:8f:da:59:01:
da:59:74:cb:7e:97:72:54:94:4d:e4:83:7c:70:e9:22:b6:6c:
ba:c6:75:28:52:5d:c1:ab:74:72:5f:41:c4:33:68:37:e6:bc:
31:2d:3d:f4:a0:50:c6:93:26:b7:c5:2a:5f:a0:5d:dc:0e:42:
cc:c5:a6:98:63:fc:6b:9c:da:8c:ff:a5:ea:e0:af:7d:42:ed:
6e:0f:9c:f7:25:81:e0:0e:28:89:c0:e1:69:5f:e9:66:42:e9:
e2:43:d9:96:28:88:7d:f0:c7:67:ee:c5:ef:dd:e4:da:2c:0d:
ce:0a:44:13
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZ8nuU8OzqAC1IsYLmZEUr8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj
NjgxMzcwHhcNMjYwNzAzMTEyNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2JjZjkyZDNkNTZlMmY2NTg2YWYyOGY1ZTBmY2VlM2RmY2M2M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdgVrjqAyZpbb5bWe2VgJc2n9q+i
KqbEiYIuxo3nr6fBJh+MF9ciTamJyNKqR41APylVgfIv2vEnLvnMTlZ2jEdYQ7lE
nByKieW05b7EbcCP0jLoZanW3jWWbd/5dDRonHj3UumpKqNdctbv6KIVJnqxZ7hJ
iANF7tLevdg4pOi7OqNpwCI8SPyke8eTFujnBQ6UrQnHV2RvcvVI9n2/k9btfNkJ
Xi3USKBc9okq/w28Ov5HldMy16Ez4FPd8fJb5zLdc3v1ABExSobE7VkaEL15Jbo8
pVzVPZpvJXOS8LPbt7HrwW/Gqjm6PuU1notpSjO+UGm+ozLrhu82ceObbwIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFPe8+S09VuL2WGryj14PzuPfzGPrMB8GA1UdIwQY
MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct
OTBlYTM3MjljNTc0LzEvOTd6NUxUMVc0dlpZYXZLUFhnX080OV9NWS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0
LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTASBAIAATAMAwQARSbPAwQA
sApZMEMEAgACMD0wDgMFACoT2MEDBQIqE9jAMBIDBwAqE9jEAAUDBwAqE9jEAAYD
BwAqE9jEAAgwDgMFACoT2MUDBQMqE9jAMA0GCSqGSIb3DQEBCwUAA4IBAQAuauZY
5Mx5Dr2wmAKJtSqa2hXuldwiQwjM/+TrnCDN5iy2e50hicZNEq5K8+KRV+//3ipv
GZEy37fO+7cVFFHVZvsgElAHO1G15Rhv+tVoe4MJEtbgFxYriird+K+v/A/a+g7V
wED2RWn5psATCGx8NoSTdj7pt3LiT0ua6zRrYV0SRGzqFQXybLN6WI/aWQHaWXTL
fpdyVJRN5IN8cOkitmy6xnUoUl3Bq3RyX0HEM2g35rwxLT30oFDGkya3xSpfoF3c
DkLMxaaYY/xrnNqM/6Xq4K99Qu1uD5z3JYHgDiiJwOFpX+lmQuniQ9mWKIh98Mdn
7sXv3eTaLA3OCkQT
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:20 2026 by rpki-client