Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Rljxz94QZplQeuBAwuf9oFlx7r4.roa
File: Rljxz94QZplQeuBAwuf9oFlx7r4.roa (raw, json)
Hash identifier: RKSS2AInFLgVvgo8kRCmVpguBnDnbeAsri/BPhh+zkc=
Subject key identifier: 46:58:F1:CF:DE:10:66:99:50:7A:E0:40:C2:E7:FD:A0:59:71:EE:BE
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 019F41815B1946A2855FCEC6619255AF7D60
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Rljxz94QZplQeuBAwuf9oFlx7r4.roa
Signing time: Wed 08 Jul 2026 11:33:44 +0000
ROA not before: Wed 08 Jul 2026 11:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213541
IP address blocks: 72.56.128.0/18 maxlen: 24
72.56.192.0/20 maxlen: 24
72.56.208.0/21 maxlen: 24
191.218.144.0/20 maxlen: 24
191.223.16.0/20 maxlen: 24
200.96.96.0/20 maxlen: 24
201.2.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:81:5b:19:46:a2:85:5f:ce:c6:61:92:55:af:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Jul 8 11:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4658f1cfde106699507ae040c2e7fda05971eebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:74:27:99:71:17:cf:c0:aa:f7:fe:15:15:
27:17:c8:25:94:81:7f:a1:de:37:48:15:52:20:41:
f1:53:98:30:22:36:6c:c1:c9:b8:42:92:67:58:7e:
6a:ce:cb:0b:78:91:f9:c3:e1:97:7c:b7:04:0b:b3:
f1:d0:64:9b:63:57:40:f2:9d:63:7e:da:00:d4:0b:
0f:99:92:1f:23:4b:c4:ba:cf:a0:48:e3:d8:b9:59:
7f:3c:a2:7b:27:39:6a:a2:e4:5e:db:af:a4:78:c6:
84:e1:33:03:c8:2a:1c:0a:de:d0:6f:aa:b7:25:e6:
36:13:04:a7:8c:32:57:fd:4b:18:a6:6c:cf:2c:df:
8d:0b:3d:4f:db:67:06:4e:52:a9:b3:71:06:a1:3a:
41:60:6d:3c:48:cc:61:13:29:d6:c7:67:23:f6:a1:
0d:16:41:37:29:31:26:b6:ce:85:da:55:8d:36:26:
e5:4d:9e:34:4c:5b:c8:bb:83:94:02:1e:07:26:59:
12:30:86:b1:53:3d:0f:b0:69:9b:bf:40:05:31:ba:
f4:4e:df:93:94:a4:e6:4e:85:94:48:fd:f3:9c:f5:
d3:1c:47:01:62:3d:a9:f6:c3:02:fa:af:d0:e2:fe:
f9:aa:ad:60:04:87:6e:45:59:d7:7f:4a:5b:0c:44:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:F1:CF:DE:10:66:99:50:7A:E0:40:C2:E7:FD:A0:59:71:EE:BE
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/Rljxz94QZplQeuBAwuf9oFlx7r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.128.0-72.56.215.255
191.218.144.0/20
191.223.16.0/20
200.96.96.0/20
201.2.224.0/20
Signature Algorithm: sha256WithRSAEncryption
40:98:85:9b:a3:e7:ce:0c:03:76:33:c8:48:f6:ec:7f:42:30:
5e:77:67:ca:c2:77:19:a2:c3:1f:d2:0d:5d:59:45:54:a0:de:
60:52:3e:0f:ab:71:e9:7a:7b:3c:74:27:b7:37:5f:8c:74:7a:
04:ec:30:9c:36:35:de:23:9d:f0:51:9a:91:e0:95:47:fb:e5:
83:1e:42:1e:36:b0:52:4d:25:ef:6d:b7:1c:69:fb:68:ef:a2:
5b:22:47:cc:04:d5:3a:42:e4:75:ed:45:98:de:ff:a8:31:1e:
62:ec:5d:06:ac:6c:52:86:72:2b:2f:1e:1b:14:dc:6b:33:49:
68:67:b5:b4:5d:23:fc:21:4f:d6:be:8f:49:df:93:13:23:bc:
b8:26:60:bf:1d:6f:70:fa:28:6e:64:1b:60:41:e8:d6:ea:f4:
0b:29:27:7f:9f:d7:38:17:5b:27:ef:e5:92:e5:98:b1:74:c1:
b3:b6:01:dd:fa:08:34:b9:c5:6b:37:16:71:0d:e8:3f:31:3e:
5b:76:07:6e:04:3d:69:b6:52:fc:df:50:11:b5:78:06:b7:cc:
48:ee:55:20:4d:31:1d:e5:df:14:3e:6d:eb:5b:0d:4d:2c:0a:
c6:e6:53:3c:a6:bd:32:f8:1c:30:6b:29:76:3d:dc:db:0c:67:
77:9a:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:19 2026 by rpki-client