Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/7bTTYk_Oq_ZApCkkIYsewzN1n20.roa
File: 7bTTYk_Oq_ZApCkkIYsewzN1n20.roa (raw, json)
Hash identifier: WwMfICexdyPcR8HhkOfl7+rmvQQnanKC9rFr0nbj7UI=
Subject key identifier: ED:B4:D3:62:4F:CE:AB:F6:40:A4:29:24:21:8B:1E:C3:33:75:9F:6D
Certificate issuer: /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial: 019D90149164FC0294BABF70DF3A4817CE6A
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/7bTTYk_Oq_ZApCkkIYsewzN1n20.roa
Signing time: Wed 15 Apr 2026 07:39:20 +0000
ROA not before: Wed 15 Apr 2026 07:39:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205888
IP address blocks: 109.234.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:14:91:64:fc:02:94:ba:bf:70:df:3a:48:17:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Validity
Not Before: Apr 15 07:39:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edb4d3624fceabf640a42924218b1ec333759f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:7e:fa:b6:8a:d9:aa:f6:1f:60:1f:a8:b8:
15:ab:43:c1:1e:ea:90:21:6b:af:b7:6b:6b:2c:e1:
ff:d6:c3:e8:04:ba:30:3f:81:3b:40:65:f8:69:f2:
54:0b:45:8a:58:57:6c:04:15:12:0c:7a:89:50:17:
0e:1d:ca:6b:21:69:96:11:49:fb:22:4a:52:8c:23:
bb:3a:da:57:87:11:2e:e8:7c:e6:8a:df:f8:55:00:
c1:88:ea:5f:ac:dd:ff:f5:e8:a5:d9:41:42:19:81:
75:76:fc:c5:69:60:ad:72:ee:20:1c:3c:a5:ce:c8:
b7:b7:d4:0c:06:64:ff:7d:f6:f9:48:7c:8c:fc:9d:
f8:3c:16:8c:55:7a:74:41:d8:52:1c:eb:cc:09:d7:
b0:7d:33:06:25:84:dd:87:a7:47:dc:51:03:91:bf:
f8:9e:92:b4:07:d4:aa:09:96:2f:b6:27:8b:6a:b8:
9b:27:c1:14:3b:c0:bb:ab:2d:c6:f0:f1:ec:df:fc:
c3:39:04:c7:01:ee:08:99:6e:64:34:01:42:f1:f0:
b5:fa:f6:68:e5:9e:45:02:6c:87:07:e1:8b:58:bf:
9a:72:0b:8e:3e:50:2c:99:75:3c:1c:b5:e2:6b:0e:
c1:34:27:cf:06:d4:18:22:85:4a:9a:2b:ec:65:48:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:D3:62:4F:CE:AB:F6:40:A4:29:24:21:8B:1E:C3:33:75:9F:6D
X509v3 Authority Key Identifier:
keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/7bTTYk_Oq_ZApCkkIYsewzN1n20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.234.72.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e6:22:21:01:53:52:ab:90:f4:a0:1e:73:3e:22:a4:90:44:
96:70:31:5d:c1:c9:2f:4a:d6:a4:71:9b:15:04:6e:d7:46:8f:
77:11:7e:17:5e:63:e4:01:1b:ce:5e:48:00:1d:e4:99:5d:3e:
7d:19:41:e0:95:a6:ed:e0:c6:2e:e4:09:4e:a2:ec:45:69:b4:
62:b4:f0:ec:b2:d6:1f:51:21:27:68:a4:3f:02:a8:a3:df:c3:
f1:43:ef:98:43:07:26:d6:2b:58:d1:1b:e5:e7:47:5e:42:02:
68:e2:61:63:9f:d8:d6:58:2f:3d:34:23:cf:61:21:21:b4:0f:
62:59:44:88:4e:46:3f:68:f8:4e:af:8b:d6:97:5d:e9:d4:fc:
bd:80:16:ec:45:f2:1d:ee:3b:81:a6:4f:bc:1c:e0:a3:b8:68:
6c:6f:e4:3e:25:71:24:e7:46:2d:aa:6f:a3:4d:dc:9a:47:87:
5e:aa:63:07:a5:46:a7:30:31:93:a6:a4:bf:b0:c0:d2:e4:54:
48:e0:ba:0b:b4:74:af:15:9e:ad:f5:50:70:cd:fd:11:fd:a8:
a4:af:28:a1:db:12:71:41:fe:90:01:f8:27:ff:25:b5:33:b2:
b8:ca:51:e2:44:4d:d3:ce:8d:86:08:bf:be:81:48:f6:93:d6:
97:eb:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:50 2026 by rpki-client