Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/EXBOejTPK4oYMBYA5dFFi3BGv94.roa
File: EXBOejTPK4oYMBYA5dFFi3BGv94.roa (raw, json)
Hash identifier: NV6BotO9i5587Odz24Tukkp0kivWjLM2mwA0TF1Da3E=
Subject key identifier: 11:70:4E:7A:34:CF:2B:8A:18:30:16:00:E5:D1:45:8B:70:46:BF:DE
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 019F64FFF449C3DF2A8B10DDCCE8C13FDF52
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/EXBOejTPK4oYMBYA5dFFi3BGv94.roa
Signing time: Wed 15 Jul 2026 08:58:43 +0000
ROA not before: Wed 15 Jul 2026 08:58:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21320
IP address blocks: 83.97.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:ff:f4:49:c3:df:2a:8b:10:dd:cc:e8:c1:3f:df:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jul 15 08:58:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11704e7a34cf2b8a18301600e5d1458b7046bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:8b:e6:47:f8:c7:92:e1:3f:1a:c8:13:20:
38:a3:ef:0b:91:8e:70:11:a6:1f:ea:7d:0b:d7:74:
fa:ef:bc:bf:9b:4f:5e:c0:8b:c4:2e:cd:0a:40:ef:
bc:2b:33:1a:f9:36:c8:dc:5c:ba:30:9a:75:b1:82:
cb:2c:6f:73:63:bd:2a:4a:8a:ff:31:b2:6a:c4:6c:
2a:ec:80:6d:25:ff:7b:1a:6d:56:4f:3d:12:fb:c2:
d4:97:22:60:9f:4d:65:77:08:55:c7:f7:09:0e:c9:
42:8e:bd:3f:e9:1b:c4:a3:0a:92:67:0d:28:80:9e:
e9:05:74:f8:14:ef:f7:55:42:b2:0f:54:af:2a:4b:
a9:6c:3b:2b:b4:f9:82:c9:81:92:ad:8a:75:d4:22:
50:58:8c:4c:c1:4b:0e:5d:25:1d:f2:9e:2b:0d:00:
6a:bc:35:c7:e3:7f:e3:ce:e9:4b:ca:87:03:09:35:
fb:1a:27:0a:88:37:cb:be:fa:72:f8:b6:1a:89:72:
fd:31:ee:a5:dc:43:db:c4:e2:90:0f:6d:22:bb:ab:
f3:8a:88:ea:57:03:f9:40:c8:ff:5f:97:4f:90:b6:
af:db:b5:a6:1c:4a:ce:87:a3:31:8b:80:ed:d7:14:
c4:4e:c4:d9:b2:2f:a3:2d:cd:0f:dd:17:9a:73:ea:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:4E:7A:34:CF:2B:8A:18:30:16:00:E5:D1:45:8B:70:46:BF:DE
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/EXBOejTPK4oYMBYA5dFFi3BGv94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.88.0/21
Signature Algorithm: sha256WithRSAEncryption
10:5e:67:69:4d:71:38:71:13:d5:80:bb:fd:46:6a:7f:aa:db:
16:cd:71:4a:b0:47:63:e6:b2:ed:e2:9a:30:9b:7b:2f:04:53:
24:72:9b:22:9c:3d:d6:5f:1b:af:71:61:91:73:bc:e4:19:6e:
87:5d:d5:3b:38:8f:cc:53:ca:5e:2a:85:53:53:da:4c:a4:6f:
35:24:08:a5:0d:5e:f3:8b:1c:85:d1:9d:7e:e1:3c:53:50:b3:
20:33:65:5a:1f:d5:20:ba:6b:14:0a:6b:5a:91:76:46:5a:e9:
3d:79:a2:f0:1e:87:56:9e:e8:9a:52:d1:16:15:cd:d0:67:24:
dd:27:8f:dc:83:6c:12:29:84:74:9f:8c:15:d4:c5:d5:28:d1:
dc:1e:46:40:25:0a:84:ad:c9:d0:d9:98:5d:87:68:2d:8b:7e:
1e:f1:60:73:26:60:56:14:91:20:1e:df:21:6b:d5:ab:15:ee:
3e:1e:c8:5d:58:59:4f:f7:18:16:d6:61:07:0f:b7:cb:0f:e3:
cf:b3:d2:48:4c:a4:c5:8c:e7:a2:5d:82:a2:fe:e2:e9:49:a1:
e4:28:5a:d1:7f:7f:9f:11:df:4d:b1:4f:81:87:69:7b:ef:2f:
bc:e1:e3:89:84:16:af:1c:ba:c0:be:7d:f4:d1:bf:dd:ad:0b:
ee:74:7b:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9k//RJw98qixDdzOjBP99SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk
OTRmNjEwHhcNMjYwNzE1MDg1ODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTcwNGU3YTM0Y2YyYjhhMTgzMDE2MDBlNWQxNDU4YjcwNDZiZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsKL5kf4x5LhPxrIEyA4o+8LkY5w
EaYf6n0L13T677y/m09ewIvELs0KQO+8KzMa+TbI3Fy6MJp1sYLLLG9zY70qSor/
MbJqxGwq7IBtJf97Gm1WTz0S+8LUlyJgn01ldwhVx/cJDslCjr0/6RvEowqSZw0o
gJ7pBXT4FO/3VUKyD1SvKkupbDsrtPmCyYGSrYp11CJQWIxMwUsOXSUd8p4rDQBq
vDXH43/jzulLyocDCTX7GicKiDfLvvpy+LYaiXL9Me6l3EPbxOKQD20iu6vziojq
VwP5QMj/X5dPkLav27WmHErOh6Mxi4Dt1xTETsTZsi+jLc0P3Reac+pfTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFwTno0zyuKGDAWAOXRRYtwRr/eMB8GA1UdIwQY
MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt
ZWY0YjY1OWVmZjhkLzEvRVhCT2VqVFBLNG9ZTUJZQTVkRkZpM0JHdjk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk
LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU2FYMA0G
CSqGSIb3DQEBCwUAA4IBAQAQXmdpTXE4cRPVgLv9Rmp/qtsWzXFKsEdj5rLt4pow
m3svBFMkcpsinD3WXxuvcWGRc7zkGW6HXdU7OI/MU8peKoVTU9pMpG81JAilDV7z
ixyF0Z1+4TxTULMgM2VaH9UgumsUCmtakXZGWuk9eaLwHodWnuiaUtEWFc3QZyTd
J4/cg2wSKYR0n4wV1MXVKNHcHkZAJQqErcnQ2Zhdh2gti34e8WBzJmBWFJEgHt8h
a9WrFe4+HshdWFlP9xgW1mEHD7fLD+PPs9JITKTFjOeiXYKi/uLpSaHkKFrRf3+f
Ed9NsU+Bh2l77y+84eOJhBavHLrAvn300b/drQvudHsS
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:37 2026 by rpki-client