Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dLf7bpl4ryLSXwS-dDNy9Xar3VA.roa
File: dLf7bpl4ryLSXwS-dDNy9Xar3VA.roa (raw, json)
Hash identifier: 0EIlJCDEWvOR151iJev4fJKQ5wDlxkHe4uoTlBnDFZc=
Subject key identifier: 74:B7:FB:6E:99:78:AF:22:D2:5F:04:BE:74:33:72:F5:76:AB:DD:50
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A07DA5EBCEAC531AC98E6DD5A85FE6885B
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dLf7bpl4ryLSXwS-dDNy9Xar3VA.roa
Signing time: Mon 07 Sep 2026 20:53:40 +0000
ROA not before: Mon 07 Sep 2026 20:53:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201064
IP address blocks: 193.17.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7d:a5:eb:ce:ac:53:1a:c9:8e:6d:d5:a8:5f:e6:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Sep 7 20:53:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74b7fb6e9978af22d25f04be743372f576abdd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:64:c9:d9:7d:a4:2a:79:36:2a:49:4b:e2:
b7:75:dd:b9:73:31:c0:50:60:cf:b1:82:10:9e:ce:
1e:5d:20:45:58:bc:be:36:00:a8:a6:68:2d:ef:6f:
18:66:42:98:76:85:65:50:c5:58:b3:94:4f:16:58:
65:5e:9d:2c:f2:de:3b:a1:b8:72:d1:5b:67:28:40:
a8:58:d0:21:91:7a:fa:2e:2f:3f:6d:ea:ff:7c:92:
cd:a6:6f:9f:6c:22:b0:6c:90:89:39:4c:5e:bf:1d:
1f:a1:68:ef:80:e0:d3:bd:45:04:f6:2d:3e:5f:51:
2e:79:2f:72:b0:8a:e2:e5:1c:9b:d8:d9:c0:6c:f2:
14:ae:82:0c:55:a5:dd:07:bf:94:66:20:10:61:5f:
f1:ef:a2:64:5b:6c:b7:8e:25:b2:54:aa:92:a8:ea:
de:c0:59:63:50:fa:17:9a:76:18:ef:74:b4:61:be:
bb:e4:2c:52:ee:da:df:22:cc:90:46:29:12:9e:a8:
15:7a:84:97:29:93:d9:51:bd:de:7b:ab:2d:1d:64:
be:a2:1d:d0:29:76:37:51:b8:ec:2b:50:12:85:c6:
ce:b0:b6:e6:25:18:c4:6d:61:38:f4:51:5d:9a:22:
4b:ed:b0:fd:e6:7b:16:2f:68:80:06:d7:46:7b:d8:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:FB:6E:99:78:AF:22:D2:5F:04:BE:74:33:72:F5:76:AB:DD:50
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/dLf7bpl4ryLSXwS-dDNy9Xar3VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.4.0/24
Signature Algorithm: sha256WithRSAEncryption
68:f7:8f:9d:1b:7e:42:bf:44:8a:0a:56:41:74:7e:e3:73:1d:
d0:03:d1:07:95:8b:ee:48:20:64:c4:bd:74:93:e3:a2:62:72:
ff:66:17:6d:e6:7d:55:91:97:b2:3e:9f:b3:45:88:74:dc:1d:
5e:58:6a:bc:64:0d:88:8f:4e:4e:15:d9:d5:72:34:7b:46:97:
56:fe:dd:ae:9c:09:c6:98:61:b9:87:3f:f6:85:94:a8:d8:a7:
7a:e7:2f:82:50:6a:93:4c:6d:78:78:1b:ec:f8:be:29:65:b1:
ec:38:8c:3f:39:9b:65:e0:ea:d8:ca:db:9a:4e:49:aa:4f:78:
42:61:4b:6b:f1:e6:94:5c:22:9d:76:5a:55:de:a7:61:67:63:
cd:04:e5:93:2a:83:6f:1f:2f:08:59:00:75:5a:1e:58:9e:ba:
8d:a0:88:5b:7b:62:b9:ff:9e:a0:3d:db:8b:ca:6b:7e:fd:0a:
6c:3f:69:78:3a:c3:5a:60:a6:74:f8:a1:58:f9:95:fc:ee:b2:
bc:1a:5b:ae:52:ff:87:0e:f8:32:2d:a5:5f:37:88:10:28:8f:
91:a0:f7:4b:42:e9:06:ca:d8:95:76:45:c8:c5:41:0c:48:86:
05:cb:e8:e5:1b:ca:d4:e2:44:b6:81:e5:0e:53:a2:3a:12:ac:
5f:f4:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:39 2026 by rpki-client