Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa
File: U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa (raw, json)
Hash identifier: gljBzuHljgAofqghGfm0+QrU01lsOtyBOdrBsukDw8w=
Subject key identifier: 53:6E:33:B5:C7:F0:7B:74:F1:F8:C3:B8:AD:D4:85:23:42:AF:57:D0
Certificate issuer: /CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Certificate serial: 019F236896CE2A33303B85141FB35846E560
Authority key identifier: AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 141.37.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:96:ce:2a:33:30:3b:85:14:1f:b3:58:46:e5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=536e33b5c7f07b74f1f8c3b8add4852342af57d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:ca:91:09:b5:d7:4b:14:59:48:82:92:18:
80:3b:40:c5:a0:16:8d:cf:32:7b:3e:08:b4:28:7f:
6f:62:36:39:51:0b:4b:46:2f:57:75:af:10:74:60:
21:11:1c:9c:4b:36:ab:6f:5f:d6:15:46:cf:70:ab:
83:0f:c7:c1:0a:e6:6e:52:90:66:23:0d:97:92:25:
af:83:ea:3a:bf:ab:43:7c:db:13:f4:22:91:50:ce:
5f:eb:6e:2b:22:4c:f6:b1:19:9e:b7:2f:96:84:67:
0b:6f:b8:5c:73:3e:7a:27:89:6c:f4:5e:6b:56:db:
be:c4:fc:61:96:57:9f:3c:e2:9b:ff:a8:ef:62:f4:
b3:b7:35:96:0b:f7:d2:46:c6:e6:d2:29:b3:6e:a0:
b0:83:e0:9c:eb:e9:96:3b:d1:00:62:9c:0d:ac:10:
63:9d:c6:5e:38:17:3d:a9:6f:9d:04:02:2e:2d:f0:
45:82:bb:13:ae:e8:83:74:55:6c:b7:79:d0:c4:f3:
e1:43:cf:ee:71:0e:e8:9c:97:4a:59:ce:0f:44:64:
8c:92:90:80:d0:b0:e1:27:3f:e7:89:2c:2c:f0:9a:
73:ca:11:ad:0c:f1:32:e2:f6:12:64:34:17:b4:9a:
ef:f4:07:ba:4c:1b:bf:fd:c5:35:1e:ed:f5:24:17:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:33:B5:C7:F0:7B:74:F1:F8:C3:B8:AD:D4:85:23:42:AF:57:D0
X509v3 Authority Key Identifier:
keyid:AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:44:b2:48:a6:b2:73:b5:84:ac:fa:bc:da:a8:ec:9b:a5:d9:
24:f2:52:f0:ca:e0:55:80:fd:b1:7b:bc:9d:63:13:e6:ee:a7:
4b:91:9d:67:25:8d:fd:51:88:13:1e:e2:ae:6b:a0:69:fa:46:
01:a2:68:cb:ed:8b:8d:34:5f:94:b1:7a:dc:73:b6:73:7b:52:
72:b4:10:b8:1b:75:4d:3a:61:e1:80:1f:ff:c4:16:e7:01:32:
84:46:8f:fb:8f:0a:76:7c:1f:09:a6:68:bb:6e:37:53:5e:55:
57:42:5f:73:ce:4e:3e:b4:60:93:af:f3:63:99:c4:63:7e:75:
20:aa:2d:c4:08:2b:c9:08:89:fb:33:0a:f1:47:2d:f6:7a:3f:
87:2a:69:54:60:b6:21:0b:ee:f5:ba:e0:80:e0:6a:26:d5:c0:
d0:83:05:f7:2e:ef:cf:5d:be:7e:7b:d6:12:f6:c1:1a:2e:26:
cd:64:b5:f2:a4:92:f1:7a:72:dd:11:10:05:c0:ef:c8:7a:8e:
00:92:1b:93:55:6a:e5:e4:dc:79:14:2a:9d:01:c0:31:45:4d:
0c:00:39:ad:fe:6c:33:dd:90:c3:24:35:60:35:d8:7e:06:ab:
7a:81:e1:24:cc:5b:67:4c:49:ba:6c:30:09:21:62:23:3c:82:
65:30:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:32:43 2026 by rpki-client