Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa
File: x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa (raw, json)
Hash identifier: GPNAfFQEjLKrrucTFOdHZ7Ip0tuQh5HgYW5wL908rIM=
Subject key identifier: C7:FD:70:A3:3E:1E:26:1A:AD:3D:83:27:20:41:48:45:7F:58:84:84
Certificate issuer: /CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Certificate serial: 019F236871A6572819DAE2522D8E51A6849C
Authority key identifier: DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62000
IP address blocks: 185.140.44.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.mft
rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:71:a6:57:28:19:da:e2:52:2d:8e:51:a6:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3f6c3534a20b04eb88aa7158e56a4aa7537a88
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7fd70a33e1e261aad3d8327204148457f588484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:af:ac:81:f1:57:84:5d:89:ed:c2:0a:c8:
52:fa:15:1e:30:0f:86:9b:21:3f:5b:30:d3:b9:83:
99:5b:85:f1:8d:f0:45:db:4e:7f:cb:ce:fd:d0:c5:
ab:2c:13:c3:a0:8c:3f:4c:b5:c5:a8:f3:8d:be:1e:
5a:c9:c2:fc:fe:a4:9e:a7:98:51:c8:3f:b4:95:74:
fb:66:e7:f7:02:9f:b8:e2:68:68:98:b0:32:8d:ef:
ce:f1:cb:7d:df:8a:f1:75:be:30:db:d0:23:3b:b5:
ab:3f:cc:c2:42:76:86:7c:98:54:87:67:bd:9a:f3:
39:94:11:6c:7e:02:19:61:5a:16:65:90:81:54:a1:
87:d4:9a:d9:dd:04:85:e3:7f:72:cd:89:32:ac:b9:
ea:0e:13:cf:a8:ba:86:66:0a:be:82:49:7a:4a:18:
fe:8b:b7:09:0b:d8:9c:64:79:3f:88:75:97:8e:19:
14:03:ad:f7:15:ec:9c:fc:4e:de:b9:bd:78:8b:80:
0e:bf:3d:3a:67:97:43:6b:48:a7:13:56:9c:4d:89:
64:69:08:b0:1d:cb:de:f1:fd:22:6b:1a:c7:67:d7:
d2:ce:2a:64:4b:c3:d7:84:48:87:a6:94:55:3e:74:
18:39:d2:29:23:71:aa:8a:3d:3d:76:c3:21:a1:52:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:70:A3:3E:1E:26:1A:AD:3D:83:27:20:41:48:45:7F:58:84:84
X509v3 Authority Key Identifier:
keyid:DA:3F:6C:35:34:A2:0B:04:EB:88:AA:71:58:E5:6A:4A:A7:53:7A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2j9sNTSiCwTriKpxWOVqSqdTeog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/x_1woz4eJhqtPYMnIEFIRX9YhIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/2j9sNTSiCwTriKpxWOVqSqdTeog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.44.0/22
Signature Algorithm: sha256WithRSAEncryption
19:e3:59:fd:c7:11:65:5d:66:7e:fd:ca:b3:79:8b:d8:11:09:
8a:a3:52:3b:09:f9:4d:57:ad:6e:c2:fe:fc:43:53:e3:c7:10:
61:18:56:f4:13:27:83:3d:55:62:c8:bb:23:27:8a:69:4a:43:
66:c0:c1:f5:9c:e9:51:4f:2f:2b:2a:be:40:23:ea:4a:44:5a:
f0:94:0b:db:b3:47:99:1c:0a:fd:47:6d:20:4d:35:9c:99:d9:
13:20:01:ca:f2:f7:8d:d1:a3:dd:48:f0:81:bd:d7:0a:a6:e8:
e8:fc:7b:1e:db:db:ea:b2:1c:49:8c:1c:95:df:24:4e:05:26:
5e:0c:b9:e8:c9:f8:d1:77:68:4e:b5:b2:b1:ae:5b:00:56:90:
2e:7c:2e:fd:de:de:8d:eb:e0:b6:9e:36:f7:c4:db:c5:0a:4c:
18:18:51:ed:e0:43:7c:22:79:cf:a1:6d:5b:fd:6d:39:8a:b4:
62:62:a9:e7:15:d9:85:c2:05:a5:b2:46:c5:f6:9e:2f:3e:83:
9c:e9:d4:fe:6e:54:84:56:70:bf:57:91:ce:f8:ad:77:fa:f5:
b0:ea:34:65:00:92:7d:67:ad:9c:e3:c6:1b:b8:07:27:9b:99:
eb:8b:9e:2d:fb:df:18:19:3c:aa:aa:af:d9:35:e2:c2:02:1c:
2f:e6:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:14 2026 by rpki-client