Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/j9H05ICBG6NeKqBUo0QOZbr1ebc.roa
File: j9H05ICBG6NeKqBUo0QOZbr1ebc.roa (raw, json)
Hash identifier: COAJnvgwdstpYOrS53924468t7JF7s5mFBTU++mc60A=
Subject key identifier: 8F:D1:F4:E4:80:81:1B:A3:5E:2A:A0:54:A3:44:0E:65:BA:F5:79:B7
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368CA16E0267A1D1B0E5E6C1A0AA884
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/j9H05ICBG6NeKqBUo0QOZbr1ebc.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207910
IP address blocks: 45.67.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ca:16:e0:26:7a:1d:1b:0e:5e:6c:1a:0a:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fd1f4e480811ba35e2aa054a3440e65baf579b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:83:13:70:93:4d:cf:13:45:e7:d3:1a:d4:
3d:8f:3c:72:c5:51:fe:93:bd:db:0a:1f:d8:d7:34:
ea:19:d2:52:16:88:b8:31:ba:5f:8a:35:ab:ac:ce:
47:4f:46:bb:aa:d7:d4:09:0f:0f:f2:93:85:a8:77:
1a:09:66:74:5f:fa:6e:6b:96:a4:8f:97:31:07:6d:
57:21:62:69:97:64:6e:44:01:66:94:ec:0e:96:33:
b6:46:99:54:8f:5f:09:95:63:cf:22:62:24:06:25:
f9:5f:f6:cb:62:50:02:97:20:5f:3c:6f:11:82:3a:
9a:72:b2:5b:d0:4e:7b:c4:be:8a:9a:c0:b1:ee:07:
ad:04:f9:37:e0:14:f6:bb:1d:bd:60:5e:6b:62:b7:
eb:fa:1c:01:7c:78:b4:65:bb:e6:97:ae:b9:ba:dc:
57:98:24:24:e2:54:c5:4a:d0:51:3d:34:21:90:c0:
e3:a0:e6:94:d6:cf:0f:51:d5:d2:2f:8d:88:74:c8:
dc:5c:33:73:42:f8:0f:35:0b:cc:d3:af:ef:33:42:
98:35:c3:6c:5b:b7:f4:ce:57:1d:67:3a:ed:94:ef:
40:a1:76:58:61:0f:f4:f0:44:3d:15:bc:4e:92:28:
e3:64:68:28:ed:ad:6f:10:9a:96:84:06:61:dc:c8:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D1:F4:E4:80:81:1B:A3:5E:2A:A0:54:A3:44:0E:65:BA:F5:79:B7
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/j9H05ICBG6NeKqBUo0QOZbr1ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.83.0/24
Signature Algorithm: sha256WithRSAEncryption
76:23:56:d2:34:ef:40:f0:07:a1:3d:db:ef:ff:23:ab:bb:dd:
2b:5f:7e:8e:83:54:e8:ed:68:43:4d:38:0e:c5:40:36:f6:79:
98:3b:46:1d:17:33:73:24:48:19:40:c0:69:ea:0e:4f:45:88:
ff:a0:98:d1:ad:96:08:54:eb:bb:e6:e5:de:9b:2b:40:47:8a:
39:b2:f3:15:42:27:a5:6b:d1:e9:7e:e6:3c:6e:30:4a:f7:65:
0f:16:a0:36:8d:63:7e:6c:50:f6:ef:26:d0:ad:32:81:fe:7e:
22:1a:c8:ab:da:32:31:95:ae:c4:74:11:f5:ee:fc:f6:2f:76:
3d:5c:30:05:5b:2b:67:23:9c:bb:2f:8f:a1:16:c5:42:3b:44:
ea:da:6d:6b:8b:3b:85:f7:0a:67:b9:8b:59:ac:97:7a:47:20:
89:02:4f:98:6c:71:e1:fc:86:e4:79:be:42:8d:bf:ff:21:bf:
e8:c8:11:29:dc:37:a2:40:ef:24:da:99:b9:ae:70:30:68:0e:
1c:6e:7b:98:df:58:7a:9c:a1:e6:2a:4e:8b:4c:bf:d9:df:a3:
0d:b2:3a:9b:1b:e8:60:37:53:9f:00:07:ef:d3:a2:5d:41:ef:
f5:4f:64:14:43:d1:38:22:e5:01:b4:a0:36:1e:c1:6f:31:2e:
b2:96:83:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaMoW4CZ6HRsOXmwaCqiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Y2VmNmMxYzJkNGQ1ZDdlMjZlYTU5MzRjZTE4M2IyOThm
MjliZmMwHhcNMjYwNzAyMTUxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmQxZjRlNDgwODExYmEzNWUyYWEwNTRhMzQ0MGU2NWJhZjU3OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5ODE3CTTc8TRefTGtQ9jzxyxVH+
k73bCh/Y1zTqGdJSFoi4MbpfijWrrM5HT0a7qtfUCQ8P8pOFqHcaCWZ0X/pua5ak
j5cxB21XIWJpl2RuRAFmlOwOljO2RplUj18JlWPPImIkBiX5X/bLYlAClyBfPG8R
gjqacrJb0E57xL6KmsCx7getBPk34BT2ux29YF5rYrfr+hwBfHi0Zbvml665utxX
mCQk4lTFStBRPTQhkMDjoOaU1s8PUdXSL42IdMjcXDNzQvgPNQvM06/vM0KYNcNs
W7f0zlcdZzrtlO9AoXZYYQ/08EQ9FbxOkijjZGgo7a1vEJqWhAZh3Mh6RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/R9OSAgRujXiqgVKNEDmW69Xm3MB8GA1UdIwQY
MBaAFFnO9sHC1NXX4m6lk0zhg7KY8pv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt
Zjk4OGQ0OGU1MWU4LzEvajlIMDVJQ0JHNk5lS3FCVW8wUU9aYnIxZWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4
LzEvV2M3MndjTFUxZGZpYnFXVFRPR0RzcGp5bV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUNTMA0G
CSqGSIb3DQEBCwUAA4IBAQB2I1bSNO9A8AehPdvv/yOru90rX36Og1To7WhDTTgO
xUA29nmYO0YdFzNzJEgZQMBp6g5PRYj/oJjRrZYIVOu75uXemytAR4o5svMVQiel
a9HpfuY8bjBK92UPFqA2jWN+bFD27ybQrTKB/n4iGsir2jIxla7EdBH17vz2L3Y9
XDAFWytnI5y7L4+hFsVCO0Tq2m1rizuF9wpnuYtZrJd6RyCJAk+YbHHh/Ibkeb5C
jb//Ib/oyBEp3DeiQO8k2pm5rnAwaA4cbnuY31h6nKHmKk6LTL/Z36MNsjqbG+hg
N1OfAAfv06JdQe/1T2QUQ9E4IuUBtKA2HsFvMS6yloOR
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:12 2026 by rpki-client