Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa
File: pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa (raw, json)
Hash identifier: CJwtXB13zqfWZMwNNbpQuNFzVQMOSfT6be7u6Jwlr8I=
Subject key identifier: A4:8E:EA:49:34:60:CD:46:D2:D8:DB:35:8D:87:92:AA:CD:CA:1D:89
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D6BDDF235C51D3692220CE346E7A0B8DC
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa
Signing time: Wed 08 Apr 2026 06:53:20 +0000
ROA not before: Wed 08 Apr 2026 06:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209104
IP address blocks: 216.236.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:dd:f2:35:c5:1d:36:92:22:0c:e3:46:e7:a0:b8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 8 06:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a48eea493460cd46d2d8db358d8792aacdca1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:03:80:92:08:3b:0b:e6:f1:e9:bb:3c:7b:
a9:8a:fd:5c:b7:e2:11:88:df:81:91:43:26:51:0e:
38:cb:56:fd:3a:62:07:d2:0c:71:91:36:c0:a1:8f:
d0:9a:ea:03:96:97:d6:45:d0:99:4f:37:af:72:13:
05:2c:d6:bd:3f:99:5f:11:6e:73:68:da:af:ce:f5:
cb:81:17:aa:7d:ff:63:d9:f9:7b:0b:58:89:68:fc:
f9:d2:6b:3b:bb:11:07:7a:e1:22:1c:83:e3:72:c9:
b5:dd:c1:35:95:bf:82:f6:ce:1c:c9:b4:e8:e7:0e:
ff:54:de:3b:08:c7:e4:d0:66:62:67:33:d4:0a:4f:
f7:d1:f7:c6:bc:8c:b7:4a:1b:e2:51:d5:78:54:dc:
59:eb:ca:c7:43:f6:3e:66:4b:e7:ff:8b:2c:36:e8:
de:fa:58:40:68:7b:b4:76:0f:29:1e:69:a4:17:6f:
a6:7c:60:33:26:8f:29:ac:34:f0:79:6c:ad:09:e0:
40:8e:bf:93:04:77:84:b7:ed:24:5c:32:3c:14:5b:
d9:89:43:98:b6:2b:b3:d6:6f:87:48:78:29:38:d7:
f6:99:27:f8:85:70:ce:75:54:8d:8b:1a:b7:b9:08:
1a:7f:2d:0e:b0:f7:0c:33:b2:67:17:be:67:2c:49:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:EA:49:34:60:CD:46:D2:D8:DB:35:8D:87:92:AA:CD:CA:1D:89
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/pI7qSTRgzUbS2Ns1jYeSqs3KHYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.54.0/24
Signature Algorithm: sha256WithRSAEncryption
89:bd:b9:b9:db:89:e2:28:65:3d:b9:cf:a4:3b:f2:04:f8:75:
a3:63:8f:70:cc:3b:b5:41:93:5f:a3:1f:90:99:54:dc:7f:51:
be:f7:dc:9e:cd:23:cd:01:fc:c1:38:a0:cf:66:b9:37:91:99:
69:fe:09:ff:31:55:fc:9a:c9:14:29:e3:55:cb:91:04:55:b2:
31:05:94:a5:aa:fa:f2:b4:68:ca:3a:27:f1:6b:5a:95:63:03:
63:2e:01:31:79:da:9e:0c:8e:bc:43:cf:a5:53:7b:3b:45:9b:
05:ce:68:74:76:99:4d:f9:dd:22:17:33:38:e2:1f:af:8d:b5:
56:b3:42:1b:83:ed:33:a4:eb:f7:85:34:d7:56:45:d8:6f:fa:
2d:50:32:0c:20:36:c5:6f:db:3d:cf:d8:87:b6:7c:d2:b7:79:
a6:fa:e3:3a:b2:03:34:52:9e:3e:b1:08:5c:c0:54:42:dd:a9:
7c:30:e8:54:c5:8e:e1:a0:90:72:4c:fb:5b:c0:f4:43:3f:8c:
63:66:40:f6:d8:0e:70:f1:c2:9f:97:d5:22:f9:10:25:25:08:
8c:c4:b5:1c:6c:c7:7b:02:ca:b5:c0:73:b1:af:c5:c5:5e:e5:
3d:eb:29:b1:dc:c0:1e:04:d8:48:ee:2c:0c:b2:25:b0:27:3b:
c0:e8:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:08 2026 by rpki-client