Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/9Hex18TBKBueDomTw4vvvqZLwVk.roa
File: 9Hex18TBKBueDomTw4vvvqZLwVk.roa (raw, json)
Hash identifier: AvD4BYdpz590SrzArOTz39pFBwhxq164wDsdMrG1gDA=
Subject key identifier: F4:77:B1:D7:C4:C1:28:1B:9E:0E:89:93:C3:8B:EF:BE:A6:4B:C1:59
Certificate issuer: /CN=5177b45dbe49582983871498e928aee77607e4d2
Certificate serial: 019F2368DDD7A9C268F90A15FAFDA66D68B8
Authority key identifier: 51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/9Hex18TBKBueDomTw4vvvqZLwVk.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20794
IP address blocks: 217.12.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:d7:a9:c2:68:f9:0a:15:fa:fd:a6:6d:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5177b45dbe49582983871498e928aee77607e4d2
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f477b1d7c4c1281b9e0e8993c38befbea64bc159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:45:d9:2f:d9:bc:f2:99:7f:db:f6:68:c4:
4a:f9:02:fe:b1:85:05:de:72:cd:56:66:19:e2:87:
b2:72:14:82:8d:79:0f:01:ef:ee:76:fa:a4:27:cd:
bd:6d:9b:91:b7:26:a1:ec:b5:d7:91:61:9c:9a:08:
eb:c1:51:0a:78:ce:eb:4c:03:e3:60:3f:67:d4:1f:
f3:91:2f:15:c0:01:e6:fb:1f:38:a5:62:dc:a1:cf:
98:88:3c:44:aa:e4:07:6d:f9:7d:6c:49:2b:7b:ca:
dd:f4:3d:69:8a:df:78:85:5b:0c:0b:92:a8:0d:1c:
8b:86:06:8d:fb:bd:8b:4c:87:74:fd:6b:28:c2:cf:
90:4f:5f:40:0a:e4:75:d3:9b:80:04:78:af:72:33:
e9:ad:f1:f5:d2:5f:0e:5d:61:39:72:e0:92:b9:e5:
07:ea:ab:ea:8c:7c:af:32:22:bc:06:16:0a:9e:8b:
81:f6:44:4d:16:9f:70:8e:d0:d9:e5:a8:1b:e0:6e:
c3:e1:0f:a4:d1:1f:0c:46:ce:f4:2e:95:af:9d:82:
69:9d:1d:9f:a0:c4:b5:49:80:64:5a:0f:bd:96:d6:
c9:05:f1:b3:28:d4:7a:97:74:c7:3c:64:65:cc:d5:
7d:e2:c8:b1:eb:f9:3d:b2:c8:a9:f5:5e:f6:4e:a7:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:77:B1:D7:C4:C1:28:1B:9E:0E:89:93:C3:8B:EF:BE:A6:4B:C1:59
X509v3 Authority Key Identifier:
keyid:51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/9Hex18TBKBueDomTw4vvvqZLwVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.12.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:dd:4c:01:28:ed:99:b7:00:63:9e:9a:c2:2c:19:ec:ef:1c:
eb:34:c2:ac:0a:2c:9b:88:30:f5:ee:d3:9c:1b:1d:6e:c9:ea:
4f:13:53:19:a1:3c:dd:d2:33:a3:cb:6b:87:f6:e3:61:69:6c:
58:d4:aa:01:7b:a6:7f:d7:b3:38:ca:54:84:0d:16:f4:f8:3e:
d9:2c:bc:02:c8:a0:8b:a9:74:5d:63:40:f8:4d:08:52:ae:24:
74:ab:5c:0e:05:9d:57:47:ba:ad:65:58:1f:15:fb:b5:1b:39:
f5:32:03:a6:1a:8b:50:96:e7:9e:90:15:1c:26:61:80:22:e2:
eb:07:6f:0d:87:29:e0:60:7d:b5:a7:81:79:73:0f:e6:81:6e:
04:07:c6:2a:45:fb:17:e1:f7:b9:24:93:3d:45:85:96:ba:7b:
df:8c:ed:0e:47:cb:b9:e6:70:9a:81:c9:27:a1:97:74:9d:11:
4a:31:30:fe:67:8c:da:e5:d0:49:1a:0f:27:fb:ae:a1:f1:25:
b6:53:e3:7f:bd:ce:fb:1a:79:4d:fc:59:d9:4c:8d:3c:5c:71:
c1:58:26:ad:2b:0e:20:d4:60:a9:f0:09:e6:e6:de:cd:54:a5:
8f:b7:72:f1:a7:e4:c3:ee:ee:d9:39:41:7a:90:91:81:78:57:
4f:10:88:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:24:12 2026 by rpki-client