Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa
File: 7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa (raw, json)
Hash identifier: d671EV+8befUt7H9mtE7TvXmuS59ieHNf29NMiVD7IQ=
Subject key identifier: EC:36:68:0D:7D:95:13:07:E6:FE:1C:89:96:9F:10:A3:79:6B:D1:A7
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D9CAFCF1437157C97F31C5874641ED23A
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa
Signing time: Fri 17 Apr 2026 18:24:20 +0000
ROA not before: Fri 17 Apr 2026 18:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22884
IP address blocks: 158.173.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:af:cf:14:37:15:7c:97:f3:1c:58:74:64:1e:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Apr 17 18:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec36680d7d951307e6fe1c89969f10a3796bd1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:f7:ec:e8:b8:35:6c:ee:0c:18:6b:6b:60:
b1:bc:4a:5a:cc:a6:97:4a:80:32:79:87:5d:51:a6:
25:be:0d:76:4f:8f:f9:76:b0:0e:3b:1a:b5:eb:4a:
5b:d4:4c:80:3a:d4:51:02:06:df:65:91:9d:30:4a:
34:cd:f5:e0:03:4a:3e:7e:67:10:b3:ed:70:11:ae:
84:7c:b1:9b:02:d7:fc:a7:13:7a:ba:d6:42:90:fb:
2e:16:2f:13:b1:9c:7a:a1:a9:4f:54:ee:e3:8d:14:
43:0e:e6:03:b8:30:e5:08:fb:c0:a6:9b:af:3f:37:
e9:72:db:b2:70:7d:fa:92:61:15:65:37:3a:ab:da:
51:d4:2d:c7:f1:75:f3:73:1d:78:4f:75:01:6d:f5:
57:8a:ca:72:6e:5b:0b:25:82:fb:7f:13:be:b0:e1:
6b:00:63:dd:e4:ea:c9:00:f1:2b:49:47:b1:6e:24:
45:8a:c8:35:e3:3a:ef:78:72:b1:28:b5:64:71:31:
ee:d3:75:bb:2d:86:cc:63:57:ab:32:9a:3b:64:b1:
09:cc:98:72:99:56:e5:1b:a4:07:d7:29:19:43:b3:
eb:79:7c:b6:ee:9f:4c:62:76:48:96:91:0c:ef:bd:
32:76:f1:f5:ab:3e:b9:64:2d:c0:7d:30:99:1d:ec:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:36:68:0D:7D:95:13:07:E6:FE:1C:89:96:9F:10:A3:79:6B:D1:A7
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/7DZoDX2VEwfm_hyJlp8Qo3lr0ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:30:b7:82:4f:1c:19:2b:9d:fb:ea:58:f3:d3:64:66:2d:b4:
6b:bd:3a:5e:a1:7c:f6:aa:88:49:f7:e4:0b:10:de:4d:ef:f9:
34:a4:40:58:fc:58:2d:a8:23:a7:54:9d:48:ad:d1:09:02:e2:
ed:b4:18:c5:70:f5:5e:64:ab:e6:3e:3e:7a:43:a2:17:63:1f:
3b:e3:78:1d:fd:60:ba:44:94:e7:d9:cf:87:3b:e3:ae:65:6e:
00:dd:1d:02:33:3b:33:e7:eb:5e:e9:53:fa:e0:df:06:a1:a0:
10:b5:c0:5a:03:eb:a0:12:54:a5:e3:3e:a7:a4:4a:20:da:33:
d3:6c:1b:1c:3e:16:80:46:90:ff:d4:70:bb:a6:05:dd:2e:48:
4b:19:3f:5d:1d:06:ac:de:de:f7:ae:b9:e2:02:b5:46:7f:2a:
df:e2:cf:f2:64:3b:ee:0b:e9:d0:2c:e7:01:c5:cd:4e:e5:96:
ef:19:4e:46:fc:16:f3:a0:cb:dd:55:2a:46:9a:53:da:60:75:
c9:39:76:cd:ba:74:42:7d:4f:2d:96:9d:c0:d2:06:b1:03:e1:
fa:23:1f:39:2f:1f:f4:9e:7c:7a:8b:30:ac:bd:56:2d:4c:26:
4a:c9:68:bc:01:d7:de:b6:3d:c0:a2:8e:e2:9d:b8:16:a2:9d:
9b:11:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 13:41:20 2026 by rpki-client