Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/lj1ffwjXwh7WORUNiNsfKctjupU.roa
File: lj1ffwjXwh7WORUNiNsfKctjupU.roa (raw, json)
Hash identifier: P094pOYDmE+5wi1DhajKZaTB8J1E2F0Ql3tkEBOTrqI=
Subject key identifier: 96:3D:5F:7F:08:D7:C2:1E:D6:39:15:0D:88:DB:1F:29:CB:63:BA:95
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019F87FFC6D2A71C827295B5F54172C402CD
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/lj1ffwjXwh7WORUNiNsfKctjupU.roa
Signing time: Wed 22 Jul 2026 04:05:14 +0000
ROA not before: Wed 22 Jul 2026 04:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402310
IP address blocks: 216.236.8.0/21 maxlen: 24
216.236.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:ff:c6:d2:a7:1c:82:72:95:b5:f5:41:72:c4:02:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jul 22 04:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=963d5f7f08d7c21ed639150d88db1f29cb63ba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:6c:42:cc:25:d5:8a:36:8e:63:05:41:6b:
62:d7:7e:5b:dc:7b:0f:7c:5a:4e:21:0b:53:bd:f9:
f0:7e:cc:bc:f5:39:b2:38:d8:4f:7d:00:34:64:3a:
45:f8:b7:29:9f:0a:a8:77:13:fe:2a:e6:1b:80:75:
13:3b:d1:e4:da:68:08:10:98:c7:64:c2:3f:4b:f7:
d8:9d:97:56:7b:6c:f2:8d:84:34:5a:68:6e:08:47:
a9:6a:91:88:bc:43:e7:83:8a:8d:c9:37:c3:48:42:
2b:6c:32:a9:58:1f:77:11:fd:d7:c8:87:d9:0d:32:
6b:b1:e2:be:78:64:f9:fd:35:a1:ee:04:42:5b:e1:
ba:40:10:91:69:e5:f3:be:b1:45:f3:53:22:e6:55:
71:6d:36:64:85:d5:e3:08:15:87:c5:c6:12:68:42:
d7:2a:ae:1e:bc:d5:a4:42:77:25:31:ea:99:40:0c:
9d:5a:91:16:37:2f:7d:39:6a:0f:a9:7b:69:bc:07:
cf:8c:1c:b0:5e:55:9a:df:60:da:74:16:a9:d9:a0:
33:fe:a3:84:e2:5e:35:8f:21:c3:aa:62:17:19:b3:
d1:18:4e:16:62:4a:82:6b:00:e4:6f:be:a1:b3:a7:
05:f0:26:7c:56:60:89:ba:65:12:34:50:ef:b9:20:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3D:5F:7F:08:D7:C2:1E:D6:39:15:0D:88:DB:1F:29:CB:63:BA:95
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/lj1ffwjXwh7WORUNiNsfKctjupU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.8.0-216.236.23.255
Signature Algorithm: sha256WithRSAEncryption
30:ed:61:2e:f4:25:aa:51:8d:c3:1c:bd:13:53:a6:bc:d0:50:
c4:41:1c:32:80:b0:21:70:26:ed:14:98:47:66:8c:cd:25:eb:
8b:3a:85:ef:e8:0c:96:4d:ed:51:ef:10:ea:d0:86:29:5a:ed:
49:a3:78:33:4a:b3:aa:d4:42:92:14:4b:93:52:f7:b0:c9:ff:
dd:71:e5:84:72:9d:75:b9:5d:09:f2:d3:dc:31:26:54:f1:47:
a9:a1:df:83:9c:1f:17:e8:ed:bc:86:76:48:1a:ad:3b:5c:41:
ad:21:5c:7d:84:cf:72:ea:4e:6c:04:66:9d:2c:56:ef:c4:ab:
19:e8:da:8c:b8:18:36:43:98:f2:89:b4:6c:53:25:19:9a:a6:
55:17:49:92:e8:0d:00:f4:54:e3:b5:d5:b8:f9:e3:87:d8:0d:
51:6c:ff:46:81:bd:e3:4c:7c:fc:52:3b:84:21:99:53:ab:f7:
82:bb:67:55:67:5c:25:8c:70:0d:0e:9f:ce:19:df:0b:34:ce:
df:ca:c4:bf:21:75:a0:68:1f:b0:b1:65:3c:43:09:a0:4f:9f:
be:ca:6a:03:b9:07:85:e1:34:6f:86:1d:d2:1a:99:9c:de:c6:
d1:e2:e6:89:4f:ec:06:96:1d:d2:ff:a9:03:44:4b:48:56:ff:
96:6e:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:13 2026 by rpki-client