Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/7n0wkQwarTtnYv8PrRiMrWmkikg.roa
File: 7n0wkQwarTtnYv8PrRiMrWmkikg.roa (raw, json)
Hash identifier: dsJKZ1TCZYVerK75Wiv1ffLxPP075w9GEHIB+oUlOx0=
Subject key identifier: EE:7D:30:91:0C:1A:AD:3B:67:62:FF:0F:AD:18:8C:AD:69:A4:8A:48
Certificate issuer: /CN=93e272611139f15d037d7a4be545696cd2853867
Certificate serial: 019EBADA57F913E6EE63ED19E0CF7F043EA2
Authority key identifier: 93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/7n0wkQwarTtnYv8PrRiMrWmkikg.roa
Signing time: Fri 12 Jun 2026 08:02:11 +0000
ROA not before: Fri 12 Jun 2026 08:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153663
IP address blocks: 209.248.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:da:57:f9:13:e6:ee:63:ed:19:e0:cf:7f:04:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e272611139f15d037d7a4be545696cd2853867
Validity
Not Before: Jun 12 08:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7d30910c1aad3b6762ff0fad188cad69a48a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:95:d5:0d:57:32:dc:52:46:ba:dc:e5:fa:
dc:ee:4c:a8:20:f8:70:e6:22:d3:31:92:bb:39:9d:
85:a7:c7:92:be:d0:18:c0:6c:44:90:68:77:f7:8a:
5a:fe:49:31:32:8b:34:76:cb:b8:64:81:a5:bc:3b:
4c:2d:e1:e2:cb:5c:e7:6b:cf:8a:24:c9:e8:82:3d:
f1:f2:bc:3e:29:13:03:fa:58:1e:7f:61:94:7f:fb:
cf:c3:1d:99:65:f1:f1:1a:13:22:ff:9e:cd:86:2e:
a1:77:05:1c:35:ec:1b:dd:89:04:5f:46:76:01:ff:
74:d9:dd:66:90:e0:44:22:3f:d6:78:80:65:e7:88:
98:4b:4d:41:ed:1b:7f:39:9f:04:d3:67:91:e2:52:
ee:79:ca:e3:af:69:d0:88:71:27:72:2f:99:7b:fd:
a1:95:69:93:51:c1:6f:d8:38:7a:bb:c7:da:4e:64:
60:3c:22:96:47:a8:92:e5:0a:81:8c:4e:3d:21:32:
c0:77:cc:48:05:f6:19:94:a4:38:9e:24:d8:62:e7:
c9:46:65:d9:60:fc:17:17:d8:f5:5d:30:1d:cb:a8:
9b:78:31:dc:41:95:7c:80:77:fd:77:f3:c4:9a:38:
57:38:0b:2a:1c:5e:28:b4:b5:03:65:35:14:2f:7b:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:30:91:0C:1A:AD:3B:67:62:FF:0F:AD:18:8C:AD:69:A4:8A:48
X509v3 Authority Key Identifier:
keyid:93:E2:72:61:11:39:F1:5D:03:7D:7A:4B:E5:45:69:6C:D2:85:38:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-JyYRE58V0DfXpL5UVpbNKFOGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/7n0wkQwarTtnYv8PrRiMrWmkikg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/db42ab-49cc-427d-86ca-47a2c250e5aa/1/k-JyYRE58V0DfXpL5UVpbNKFOGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.248.32.0/19
Signature Algorithm: sha256WithRSAEncryption
84:3d:54:7f:47:73:5a:b4:df:58:a4:fc:c0:4f:84:84:34:09:
16:09:80:06:e5:94:cf:0c:ee:cf:41:2c:73:2a:4a:37:c6:1a:
d2:a1:15:70:f8:42:e9:42:52:00:a7:34:3a:bc:d8:94:89:67:
13:78:13:96:6a:80:27:bb:1b:30:49:09:df:5d:81:e9:42:0a:
fc:6b:8c:ac:68:ea:9a:d8:ba:b3:8e:ca:bf:80:f1:5b:fe:94:
ac:f9:7b:0a:81:4c:2b:fe:d6:23:db:2e:b3:ad:27:fa:b0:de:
04:07:e0:43:cd:3a:22:23:bc:c9:13:78:81:29:a1:e4:69:1a:
be:cc:42:cd:25:98:b6:16:3a:94:65:bf:5d:70:71:7f:c8:f7:
fd:33:ae:a9:11:d0:b1:4f:a6:40:2e:0f:78:24:21:22:17:05:
5e:ba:d7:35:0c:01:2c:b2:70:ef:14:bc:5e:2c:fe:af:62:a1:
7d:4d:88:0b:59:87:72:fe:66:18:74:33:a6:30:38:63:13:37:
ea:7a:00:d7:f9:2c:79:30:b9:6d:23:aa:d5:a5:b7:c9:22:39:
90:d6:68:a2:1b:34:97:82:84:0b:05:da:04:fc:2f:26:60:ab:
01:da:4e:79:a6:f4:c0:eb:92:1e:0a:96:8f:ac:6b:5e:da:79:
b3:31:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:16 2026 by rpki-client