Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa
File: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (raw, json)
Hash identifier: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=
Subject key identifier: EB:B3:4F:36:7B:C4:43:91:C1:F2:C2:47:EF:3D:1D:51:EE:86:C3:8D
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019DDD3C99A3D6E6C7707F1E61B747AAA085
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa
Signing time: Thu 30 Apr 2026 07:13:49 +0000
ROA not before: Thu 30 Apr 2026 07:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201813
IP address blocks: 109.160.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:3c:99:a3:d6:e6:c7:70:7f:1e:61:b7:47:aa:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 30 07:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebb34f367bc44391c1f2c247ef3d1d51ee86c38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:89:58:41:c7:88:a7:c8:6d:dc:6f:34:d5:
74:4e:d1:e7:6f:45:60:2a:3f:bf:95:74:84:d6:3d:
c4:95:a5:5c:f1:ea:ac:d7:69:fd:11:62:ad:ae:f3:
b1:4b:29:38:87:49:b9:dd:ec:e3:5d:e6:70:d4:fd:
47:55:8e:4e:f9:da:9d:40:93:4d:1f:35:41:fb:0b:
ec:40:d7:7a:b6:13:8e:e7:f6:79:50:b9:9f:7b:ba:
6c:4d:a0:be:58:82:f1:e0:a8:d3:20:b6:b3:c3:27:
bd:73:e3:7a:30:2c:56:d8:81:74:bc:e7:12:90:9d:
6a:f7:57:ae:60:11:30:8d:38:4f:86:e3:77:56:59:
c6:9b:f8:70:93:9f:8f:ae:46:62:46:8a:d4:80:c5:
f5:d0:b9:9a:82:65:fc:26:c5:28:f7:d1:d8:52:43:
7a:c5:af:44:33:51:08:4b:05:d5:8c:56:2e:ed:b6:
41:92:58:3b:43:94:37:49:0a:98:13:28:bc:fd:26:
6e:94:dc:fb:d7:ba:84:26:91:8f:ff:c2:ba:5f:7e:
d5:e8:7a:92:a5:7d:be:e9:19:1a:24:d1:e5:66:85:
3b:96:10:11:2a:a9:9c:30:d8:8a:b1:38:23:5a:c6:
c0:54:57:6f:f0:b7:33:93:e9:4e:8c:c2:74:41:e4:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B3:4F:36:7B:C4:43:91:C1:F2:C2:47:EF:3D:1D:51:EE:86:C3:8D
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.40.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2d:a5:04:31:d0:fb:ef:b9:82:8e:1f:80:d1:3e:1f:ea:f7:
35:0a:53:bf:48:1b:3d:ce:2c:82:ef:4d:c1:68:08:e1:28:3e:
56:4d:c4:1a:06:ac:90:ca:f2:3f:dc:3d:45:a8:de:39:66:78:
93:50:1b:fc:40:0a:c9:6d:a5:30:d3:db:e3:ec:8b:84:68:aa:
10:e3:8c:58:63:b4:17:4e:0a:40:f2:71:3d:63:4c:fc:64:d9:
07:b0:79:0e:57:38:04:d1:0e:28:26:5b:c5:72:84:fc:50:da:
7d:05:b4:51:11:cc:58:fc:14:97:37:56:77:62:65:84:86:55:
b3:26:3f:86:fa:c5:94:4c:53:b6:43:13:95:6f:b8:03:d5:54:
27:49:70:0d:63:88:fb:4a:2b:d6:39:6a:dc:6e:84:e6:3e:02:
f3:29:3f:86:cd:b6:cd:0a:d7:c3:12:ca:e0:bf:f3:0e:d8:75:
46:6f:34:e8:c8:bc:12:6d:f4:79:02:13:aa:7c:c2:c3:09:60:
45:50:ad:4b:0c:87:3b:46:79:91:03:5c:82:db:08:9c:0d:8c:
1e:59:94:ee:96:47:ff:97:54:37:9f:83:ec:14:6a:e4:aa:f3:
74:1e:4f:a5:6a:a9:94:aa:97:c7:bd:fc:b2:16:a3:69:cb:e2:
a2:3e:dd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:40 2026 by rpki-client