Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/7YANPaBOudIhma7IYGlIsUfJssM.roa
File: 7YANPaBOudIhma7IYGlIsUfJssM.roa (raw, json)
Hash identifier: fZcCCTn32h40SxZnIf2kzDNVc0kaioy+LsHW2s0itcI=
Subject key identifier: ED:80:0D:3D:A0:4E:B9:D2:21:99:AE:C8:60:69:48:B1:47:C9:B2:C3
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 019B7758F8D8B524520654726FA75054C7D3
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/7YANPaBOudIhma7IYGlIsUfJssM.roa
Signing time: Thu 01 Jan 2026 02:17:58 +0000
ROA not before: Thu 01 Jan 2026 02:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209198
IP address blocks: 2.57.200.0/22 maxlen: 24
2a09:de40::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:f8:d8:b5:24:52:06:54:72:6f:a7:50:54:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Jan 1 02:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed800d3da04eb9d22199aec8606948b147c9b2c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:1d:9a:fe:df:e6:a6:11:57:7a:aa:a4:33:
29:d7:ef:45:b6:e3:6b:2c:41:40:6f:a1:e7:27:dd:
c2:e6:58:e7:8e:8c:bb:74:25:c0:ad:89:e5:5d:bb:
25:93:8c:e6:d2:97:8a:2b:7f:ba:91:75:d8:34:59:
1b:17:e3:e0:25:47:ca:6b:ad:eb:41:f4:f5:c6:06:
23:a2:ef:54:9b:1f:87:66:74:c2:9e:40:9c:d0:dd:
18:1f:53:1e:7c:28:48:fb:e4:39:8e:69:52:79:cf:
97:46:f2:4d:ba:bd:f6:02:6c:46:a0:52:8b:2e:26:
3e:b3:f5:7a:cd:22:51:00:b8:e7:6c:3f:7b:ab:06:
1e:d2:2e:d1:e8:ac:70:27:25:99:b5:dc:6b:18:1d:
f2:b6:61:1f:a9:0c:3e:d1:7a:0c:c0:98:3a:ec:05:
df:1d:46:58:2f:9c:cb:e6:c2:f9:a9:d0:1c:21:de:
3b:9c:12:22:5b:50:04:c3:d4:06:ce:42:e9:0d:cf:
3f:28:df:04:1a:f0:2d:41:87:9a:bd:01:d5:2e:79:
4b:17:93:5a:d4:16:4d:b1:93:a8:7f:7d:7a:36:bb:
95:77:bd:b6:a7:de:ee:f5:ad:19:bd:46:06:71:47:
b6:07:17:95:b2:45:1b:11:21:4d:b1:25:e5:45:61:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:0D:3D:A0:4E:B9:D2:21:99:AE:C8:60:69:48:B1:47:C9:B2:C3
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/7YANPaBOudIhma7IYGlIsUfJssM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.200.0/22
IPv6:
2a09:de40::/32
Signature Algorithm: sha256WithRSAEncryption
2c:fa:65:4b:4f:07:cd:32:41:1b:92:97:f0:93:33:f2:c8:21:
24:b3:16:67:26:ff:16:b3:42:70:37:db:64:f8:15:f2:a2:d0:
0d:39:a7:5f:5b:46:e5:e0:c4:53:7f:82:5c:7d:fd:b1:4f:e5:
4d:b6:c9:b4:cf:be:fa:b0:ab:f5:2e:17:a8:5b:ad:4d:17:6f:
84:2a:34:fe:ea:5c:30:ec:d1:fb:aa:bb:33:2b:f6:fa:02:7e:
58:5f:b0:9a:5b:fe:56:83:1d:66:e8:c2:9c:94:9a:81:60:f7:
17:b7:6f:c2:8a:fd:49:03:8c:6b:32:41:86:11:74:84:24:24:
e9:cc:48:12:58:b7:2d:a1:04:1f:9d:15:ff:67:a5:72:02:53:
e2:6d:08:e4:57:29:f2:66:b5:82:59:cf:ac:b8:c9:7a:4e:67:
f5:52:93:7f:a3:b5:ad:50:89:cf:12:49:b1:1c:8e:33:b8:9f:
63:a7:e6:6a:fd:de:d8:d5:90:12:e0:e2:2b:78:47:b7:97:4e:
53:13:a9:b6:37:54:bd:cd:09:d2:7e:3f:3b:cc:e9:ee:0d:59:
b6:09:a0:a2:a6:c6:65:ff:b1:f9:eb:18:5d:bc:ea:23:6e:21:
07:d3:16:09:2e:92:ea:9b:6f:c2:94:d8:04:c3:c6:80:81:60:
ab:e1:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:59:40 2026 by rpki-client