Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/s0p7Y6pGqPdt2tufWzBhfFS3MmY.roa
File: s0p7Y6pGqPdt2tufWzBhfFS3MmY.roa (raw, json)
Hash identifier: BT5yZkRVyMvTAaEMWYw5Q+8d8MIYZp0RYHawdgCEBmQ=
Subject key identifier: B3:4A:7B:63:AA:46:A8:F7:6D:DA:DB:9F:5B:30:61:7C:54:B7:32:66
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019C418F4209798D59D0D7E8FE25FB61293B
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/s0p7Y6pGqPdt2tufWzBhfFS3MmY.roa
Signing time: Mon 09 Feb 2026 08:40:33 +0000
ROA not before: Mon 09 Feb 2026 08:40:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201444
IP address blocks: 5.172.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:8f:42:09:79:8d:59:d0:d7:e8:fe:25:fb:61:29:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Feb 9 08:40:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b34a7b63aa46a8f76ddadb9f5b30617c54b73266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:f6:80:0f:64:d7:92:f9:85:10:a9:05:24:
df:35:92:e2:ca:5c:db:91:58:17:71:19:5e:c9:8d:
65:04:2b:8b:ff:75:c3:99:e0:d6:c9:f6:d7:81:4b:
12:3a:e6:0c:96:16:93:91:56:25:13:f0:b4:04:30:
03:51:e3:34:8a:fa:1f:21:5f:d0:43:ba:50:56:2a:
8f:83:87:1e:c8:00:d2:5a:7e:19:70:47:b0:5e:c0:
7f:b8:d9:77:c1:d6:5e:00:96:ee:9b:d7:50:8e:d7:
7b:45:46:5f:f0:e5:cf:d6:71:d0:5f:eb:4c:6e:f2:
1f:6f:6f:19:86:4c:80:99:90:90:7d:f7:1c:38:da:
1e:c3:e6:3e:0b:a6:17:81:ff:4e:66:71:de:93:ec:
85:a4:65:74:4e:c6:38:e8:c2:7e:a8:a0:d8:0c:98:
81:fb:33:8f:44:83:b7:da:80:f9:0b:d8:13:51:40:
ea:c8:f8:0c:91:9f:01:d6:85:da:ff:97:b6:38:34:
3c:47:1a:e5:5e:c2:7e:5e:27:18:a0:d7:9b:92:3d:
61:c1:c9:7b:24:bd:8c:1a:32:76:82:40:c8:a9:00:
81:97:59:f6:ab:70:f2:94:5e:32:b9:af:50:d8:db:
3a:db:98:35:ce:50:83:e5:a2:8a:da:7b:7f:c6:85:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:7B:63:AA:46:A8:F7:6D:DA:DB:9F:5B:30:61:7C:54:B7:32:66
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/s0p7Y6pGqPdt2tufWzBhfFS3MmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ce:06:2a:03:22:28:a5:b6:03:9c:1e:68:f7:66:e8:55:11:
e7:a4:77:f0:df:36:93:ec:ae:85:99:d3:1d:c0:c9:75:6e:6f:
17:cc:cb:30:8c:cf:fd:b8:a7:c1:ba:c6:84:c8:41:9f:10:36:
5c:6b:60:33:2d:9b:35:63:90:9d:6a:08:e0:c9:a8:50:42:78:
92:2d:94:c7:03:52:76:a2:a5:a2:7b:a4:57:0b:05:72:f2:80:
ec:1d:7e:43:0d:7d:93:8b:4f:91:95:6f:3f:a0:e9:a5:4f:2c:
0f:4b:65:c0:59:e3:62:1d:f9:13:a5:db:5d:3c:f0:2b:7b:43:
20:0e:30:b7:d5:fd:ee:f0:d6:bf:c3:94:98:34:52:2e:1a:64:
f2:5a:67:74:ed:ed:04:31:bd:fd:a1:ed:e3:5c:9f:f4:b9:d4:
19:52:6c:19:f7:49:e5:87:b4:f7:f1:b2:70:44:08:55:d6:ae:
54:87:3f:e8:5f:b4:ed:7b:65:af:f6:49:37:8b:d6:1c:cf:c7:
c7:6f:bd:c8:c1:24:89:0d:92:79:25:f2:9c:a6:3a:c0:a4:3c:
12:bc:ac:c3:53:9e:8c:71:77:48:f4:98:86:81:6b:40:e3:69:
20:c0:07:01:2b:44:0b:83:e3:40:ab:f7:fd:df:64:85:6e:c4:
c0:62:e5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:16 2026 by rpki-client