Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa
File: fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa (raw, json)
Hash identifier: ZwS002nsxCyO55gY22WEARcRjDqtil9M7noG6u5dJ8Y=
Subject key identifier: 7C:94:FB:65:1E:07:23:08:CC:C7:60:32:04:09:70:CF:97:28:20:79
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D6BDDF1A754695FED03C8C9047572A948
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa
Signing time: Wed 08 Apr 2026 06:53:20 +0000
ROA not before: Wed 08 Apr 2026 06:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208504
IP address blocks: 216.236.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:dd:f1:a7:54:69:5f:ed:03:c8:c9:04:75:72:a9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 8 06:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c94fb651e072308ccc76032040970cf97282079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:5b:90:82:80:b9:88:29:92:8e:b2:00:75:
b9:d6:93:3f:09:c8:18:c4:08:1d:0b:95:66:b6:3a:
1c:0a:b8:ce:d5:30:8f:8a:d0:08:9f:f3:60:88:97:
08:ad:4c:03:bc:07:3d:57:74:1f:f0:98:fe:e6:1f:
50:f9:82:88:1c:a6:27:97:3c:d5:c5:2d:73:04:8c:
9b:b9:92:35:7f:78:a2:05:a4:0b:23:06:b5:9e:24:
6c:55:4d:d0:d0:b2:ad:fa:a1:4a:fa:82:85:8b:b0:
96:1d:22:44:19:4d:b7:f6:4b:c1:9a:3d:26:7a:5b:
6e:f1:97:95:e9:33:f2:a4:5b:e3:f5:11:57:c5:56:
c2:e4:3e:4a:a4:ef:23:d0:63:b3:c7:7c:b4:48:7f:
fe:ec:ad:ed:e4:9d:3b:17:10:c4:e4:64:a1:79:a7:
27:74:62:4d:27:10:09:3b:6b:49:ec:00:9d:cf:cf:
44:f3:01:af:b4:52:7d:b3:1c:87:45:d1:6b:05:45:
35:e7:f1:40:01:da:df:f2:ae:92:06:49:e7:48:09:
77:e3:5f:76:2d:d0:02:13:1f:e9:0d:ba:4f:08:49:
61:04:2b:8c:71:fb:d7:4c:6f:94:5e:3a:00:98:c1:
84:73:65:36:32:97:0e:df:53:35:84:72:cf:5d:7d:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:94:FB:65:1E:07:23:08:CC:C7:60:32:04:09:70:CF:97:28:20:79
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/fJT7ZR4HIwjMx2AyBAlwz5coIHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3e:13:03:c8:3d:ca:5b:de:88:d9:d7:48:93:04:69:06:0a:
c6:78:85:6e:3d:7f:c6:eb:bd:35:e6:af:b0:6a:16:fe:1a:07:
f4:1e:bc:7f:f6:92:10:6b:1c:a5:60:e4:0d:8b:e8:aa:9e:d8:
1c:79:be:7a:18:3b:f0:34:ce:d9:84:0e:4b:22:01:68:6b:88:
7c:ed:56:81:ea:c5:64:80:96:88:d7:91:54:37:8c:5d:56:13:
e9:19:b8:13:27:fd:81:2f:55:76:a9:b6:d1:68:7d:8c:c9:fe:
25:74:e6:cd:4b:a6:83:e5:af:b3:15:2a:2e:db:13:bb:9b:67:
14:8a:b5:de:f9:67:95:c6:9c:92:26:c3:ad:46:97:43:b2:be:
27:f2:5b:15:2c:d7:c8:d2:bf:20:59:fa:99:94:f2:e8:a1:aa:
58:a1:6c:12:bd:64:46:dd:f6:e6:26:94:58:cc:fc:87:ba:b0:
3b:f5:35:f0:36:2e:23:ba:ea:ff:1c:a1:70:88:27:30:f5:b0:
76:0a:51:e9:a9:71:78:2a:9d:fb:84:88:d5:a9:37:0d:51:12:
a0:81:5d:e5:c0:5b:ae:97:bc:7b:4e:7e:84:6c:72:a6:03:70:
b3:cf:ff:57:be:5d:4f:d2:10:46:ea:06:4f:cc:0b:a7:b9:51:
35:82:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:18 2026 by rpki-client