Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa
File: jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa (raw, json)
Hash identifier: LOg/Dt0W3pYHYeSmEl6aami7s1ai7PjIohxmCU72EI4=
Subject key identifier: 8C:BE:D0:75:68:C3:5C:1F:49:5B:A7:FD:F9:0F:59:B2:D4:B1:A7:A5
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 019F4AF256C82C7AB64761B4302BF8D60999
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa
Signing time: Fri 10 Jul 2026 07:33:43 +0000
ROA not before: Fri 10 Jul 2026 07:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196976
IP address blocks: 91.133.32.0/19 maxlen: 19
2a04:3100::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:f2:56:c8:2c:7a:b6:47:61:b4:30:2b:f8:d6:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jul 10 07:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cbed07568c35c1f495ba7fdf90f59b2d4b1a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:26:09:f9:95:99:59:70:36:8f:42:23:d5:
f7:09:36:a0:47:bb:4c:96:3d:81:ae:c2:04:36:05:
5d:6f:44:67:81:fa:5b:40:1d:74:d7:7c:06:0d:31:
38:ed:2c:7d:d0:65:50:31:3e:e2:2c:02:ba:c1:83:
29:44:6e:b1:5e:e4:e6:a2:16:33:51:21:31:03:10:
5f:0a:84:6e:7f:5c:52:a4:ea:ed:c5:6d:e8:7a:03:
64:cd:65:b1:fd:62:b3:80:ef:71:5e:c2:41:5b:01:
7a:c9:ff:c4:85:55:a1:8a:9d:47:66:0f:97:cc:e1:
d9:ee:82:e1:e8:d6:bf:9e:49:f7:82:47:78:8d:3f:
ad:69:2f:a6:e4:fa:06:08:18:09:57:91:1b:64:1f:
69:dc:f1:07:75:36:e4:80:2e:60:b9:25:4d:98:82:
8c:c9:bb:f5:5a:04:20:46:c6:04:52:ba:85:a8:63:
ae:1a:fb:cf:36:83:10:ca:1c:73:2a:d1:65:85:fd:
35:63:62:6f:4f:c6:70:c5:87:87:ca:c7:0f:f9:7a:
a6:dd:15:e9:0d:bb:b1:76:1f:de:03:e1:5b:0a:12:
82:65:77:75:1f:c2:5d:77:0b:2a:f9:59:f6:a2:11:
80:e4:17:d5:1c:49:1a:3e:f0:55:e4:4f:83:ec:f7:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BE:D0:75:68:C3:5C:1F:49:5B:A7:FD:F9:0F:59:B2:D4:B1:A7:A5
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.133.32.0/19
IPv6:
2a04:3100::/29
Signature Algorithm: sha256WithRSAEncryption
02:37:3e:54:ea:b3:2a:6f:c0:fe:45:10:08:88:d1:09:a4:ea:
b6:b4:67:eb:ab:1f:a4:84:ea:6b:e5:0b:a2:d7:84:e7:d1:81:
6e:86:e1:c4:1e:bb:db:fc:5d:d8:e4:5f:54:22:f3:1c:34:b4:
eb:9b:c2:f0:09:0d:29:ed:ac:72:54:8c:19:10:ba:bc:a6:d2:
36:74:d4:3c:2c:6a:fe:24:81:87:0a:79:5c:5f:02:08:17:fc:
01:7c:7c:b7:a2:bc:9c:f2:02:d7:c5:bf:0e:14:25:60:cf:1c:
f4:74:f6:25:69:53:6f:7a:73:01:65:88:96:09:04:20:f1:f7:
12:98:90:85:2f:95:07:d8:9a:ad:ee:cd:81:dd:19:b0:da:58:
bf:f1:fc:2b:ff:a7:95:91:82:32:17:06:ef:ab:d5:ac:33:3e:
5e:6c:cd:48:d2:d7:af:2d:72:36:f5:07:71:02:a3:2d:ca:22:
bc:cc:05:02:c8:c0:28:34:9c:1b:61:23:7a:6e:55:0d:e1:50:
13:4f:81:c2:34:07:28:e0:e1:fd:bc:75:72:4f:be:87:d0:ce:
8e:91:b7:a3:39:f9:dd:22:a1:40:a5:01:61:5a:91:27:79:7b:
1a:df:2b:a7:24:cc:78:3e:3b:50:fe:43:00:d5:3f:3a:fc:ff:
51:47:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:19 2026 by rpki-client