Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/7wuJBsTlCvMrXFT2hL5huDS2k5I.roa
File: 7wuJBsTlCvMrXFT2hL5huDS2k5I.roa (raw, json)
Hash identifier: ORzrQnvsufAfber3BkyjXEBdXtY1ExPpP1tmxd/MKAI=
Subject key identifier: EF:0B:89:06:C4:E5:0A:F3:2B:5C:54:F6:84:BE:61:B8:34:B6:93:92
Certificate issuer: /CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Certificate serial: 019F23686CE8D4F2AC6EE1C1C4A1002DB12A
Authority key identifier: 84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/7wuJBsTlCvMrXFT2hL5huDS2k5I.roa
Signing time: Thu 02 Jul 2026 15:17:53 +0000
ROA not before: Thu 02 Jul 2026 15:17:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56971
IP address blocks: 185.31.200.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6c:e8:d4:f2:ac:6e:e1:c1:c4:a1:00:2d:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841fcc6a71f1e118bdc9b1c06bcc8011bd3d30bd
Validity
Not Before: Jul 2 15:17:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef0b8906c4e50af32b5c54f684be61b834b69392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:a6:d0:59:e0:58:48:33:3a:3d:67:f7:f4:
68:a1:6c:8c:d0:9f:97:86:f3:cd:2d:3e:2f:a2:2b:
c6:db:91:ca:b6:b6:51:7a:c1:b1:13:b5:6a:99:6c:
99:6b:1a:43:00:90:cf:a2:5e:55:ad:2f:42:68:05:
85:77:f8:37:c9:9c:0e:31:89:7c:f3:fa:61:f2:db:
e4:d9:95:03:05:a4:1c:d0:19:f9:3b:55:cc:9f:51:
44:80:57:72:92:a3:cc:da:4e:e6:15:6d:58:8c:ca:
1a:71:da:7f:20:1a:19:00:ea:b6:94:fc:1b:7e:78:
13:a0:ec:ad:a7:af:73:ac:b6:4c:64:1b:54:2a:67:
88:50:d7:14:1a:b0:af:81:f0:41:09:fe:23:1a:72:
47:2f:1b:95:3a:08:3e:fc:66:2c:18:d6:eb:e3:20:
d0:84:6d:07:95:bb:ea:8f:28:6c:58:9a:fe:66:c8:
da:1a:db:f2:ef:8e:52:63:45:cd:3b:86:6f:39:85:
2f:51:10:b6:35:c3:7c:e2:df:bc:5a:f5:6b:d6:08:
59:6e:99:c6:1e:a2:18:54:8e:54:e9:7b:07:ca:33:
76:28:58:ed:e5:94:41:ed:be:da:bf:20:20:8e:80:
9b:7a:9a:a0:2c:7d:5c:03:b1:5b:8d:59:82:c1:9f:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0B:89:06:C4:E5:0A:F3:2B:5C:54:F6:84:BE:61:B8:34:B6:93:92
X509v3 Authority Key Identifier:
keyid:84:1F:CC:6A:71:F1:E1:18:BD:C9:B1:C0:6B:CC:80:11:BD:3D:30:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hB_ManHx4Ri9ybHAa8yAEb09ML0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/7wuJBsTlCvMrXFT2hL5huDS2k5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/hB_ManHx4Ri9ybHAa8yAEb09ML0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.200.0/24
Signature Algorithm: sha256WithRSAEncryption
46:09:8f:67:97:e8:37:0c:77:c8:70:4f:bb:2e:53:8f:f3:55:
ea:3c:08:95:aa:c0:eb:ea:a0:cc:17:3d:05:d6:1d:f7:20:e7:
60:71:7a:92:5a:30:d9:84:dd:c2:14:bb:52:cd:c2:67:86:47:
2b:36:c8:7c:e0:63:a5:3c:3f:43:20:0b:58:83:2a:b5:df:f4:
15:b4:ae:4f:74:25:d3:28:e8:ae:13:e4:3e:e0:09:31:04:ac:
f3:52:22:ae:27:bf:22:d3:36:c4:d5:53:d4:77:d5:63:c0:02:
b0:bb:bd:78:93:4a:c8:cc:20:a7:81:b8:52:7d:33:4b:4e:bb:
53:26:88:b4:c5:00:ce:0b:76:15:19:28:dc:f5:71:21:a4:65:
ef:27:e2:16:e0:77:49:9a:21:bc:c7:02:6f:c3:05:49:4b:c8:
95:3c:c7:32:e8:fe:5f:cf:a0:14:48:08:31:47:26:88:a4:ef:
5f:76:38:e1:03:13:04:88:83:65:99:01:1e:62:d3:c6:29:2f:
de:12:c5:83:bb:a4:2c:a4:60:05:b1:e6:74:eb:81:a5:59:30:
02:81:a0:81:fe:44:a8:4b:c9:2e:cf:98:7d:79:9d:6e:83:ed:
59:40:ca:63:a4:c0:de:16:bb:2d:b1:ea:9d:7b:e4:b6:c1:b3:
7f:1b:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:51:01 2026 by rpki-client