Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/7Nec0zgnRC0mgd2UCiQb57qGoQo.roa
File: 7Nec0zgnRC0mgd2UCiQb57qGoQo.roa (raw, json)
Hash identifier: QAq0HQWlQiRt1izpzv0A0gRL3ce2Gd+6X/bnw4KM3nA=
Subject key identifier: EC:D7:9C:D3:38:27:44:2D:26:81:DD:94:0A:24:1B:E7:BA:86:A1:0A
Certificate issuer: /CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Certificate serial: 019F4B8B3B066196C18EEA7F041C45F95806
Authority key identifier: 31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/7Nec0zgnRC0mgd2UCiQb57qGoQo.roa
Signing time: Fri 10 Jul 2026 10:20:43 +0000
ROA not before: Fri 10 Jul 2026 10:20:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214101
IP address blocks: 158.94.160.0/24 maxlen: 24
2a0f:6b40::/44 maxlen: 44
2a0f:6b41::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4b:8b:3b:06:61:96:c1:8e:ea:7f:04:1c:45:f9:58:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3174ae50711e1ad5f2f82ba20d2f73cab709dab8
Validity
Not Before: Jul 10 10:20:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecd79cd33827442d2681dd940a241be7ba86a10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:54:50:14:ff:3f:9e:de:3e:25:71:fa:01:3a:
f3:e1:59:31:8f:e4:c6:f5:ab:75:ac:94:f3:04:32:
96:15:95:61:b6:76:a5:ff:b6:a0:6d:b2:1f:8f:d2:
63:97:27:b7:05:58:8c:01:3f:9e:d9:03:4e:6d:49:
d5:37:c7:05:80:74:09:ff:4e:c9:bb:ce:16:d9:bf:
ac:90:0c:6e:b5:f8:bf:8b:ce:c1:c6:7d:d6:05:de:
8f:b7:7b:ef:32:27:4b:a0:39:1c:10:c3:ad:fa:10:
e7:df:2f:4b:5f:23:c1:bd:85:26:9d:6c:c9:0c:8d:
27:e5:b7:8e:dc:0b:14:e2:74:71:a3:f4:ca:2d:26:
f6:95:2e:81:2e:8b:82:e6:35:d7:c4:8f:28:a8:82:
69:a7:92:92:6b:7b:51:a1:0c:79:2f:ee:0f:e3:e7:
b7:25:57:3e:b5:7f:e6:86:b6:e7:69:c7:ae:cc:87:
f0:3e:f4:da:3c:a6:87:15:0e:61:e1:33:ac:5b:1a:
20:05:12:d3:45:94:4d:03:dd:c6:35:4b:5b:c2:1c:
80:42:cd:7b:89:e3:9f:89:19:fd:1a:5a:55:c7:44:
a8:6b:99:49:b0:21:05:54:72:20:bd:24:be:7b:bd:
f9:93:21:85:d2:61:c1:f5:51:61:2a:b8:0d:e4:c4:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D7:9C:D3:38:27:44:2D:26:81:DD:94:0A:24:1B:E7:BA:86:A1:0A
X509v3 Authority Key Identifier:
keyid:31:74:AE:50:71:1E:1A:D5:F2:F8:2B:A2:0D:2F:73:CA:B7:09:DA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/7Nec0zgnRC0mgd2UCiQb57qGoQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/7e75fd-865c-4240-be38-9e6822ca8899/1/MXSuUHEeGtXy-CuiDS9zyrcJ2rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.160.0/24
IPv6:
2a0f:6b40::/44
2a0f:6b41::/44
Signature Algorithm: sha256WithRSAEncryption
56:32:f0:13:0b:a3:32:c8:dd:30:28:c0:6f:93:41:89:60:14:
27:ca:58:0d:68:a4:55:ab:56:c9:51:e0:99:a6:87:e5:c1:2f:
4f:06:bc:c6:ec:3f:4b:fb:3a:bc:a5:78:ef:45:d7:37:ec:59:
23:63:7f:d7:64:6c:34:ea:87:75:c3:a3:76:6f:11:f9:94:a9:
29:3f:e2:9d:4d:31:12:0b:12:99:5f:2f:49:c4:a4:79:72:16:
7d:65:f8:ed:4c:7b:0f:c9:44:e8:ca:d5:d0:74:74:ea:9b:cd:
d0:c2:7e:bd:99:8b:b6:eb:78:30:c7:85:3c:bc:43:df:5e:c6:
87:4c:19:cd:83:bd:6b:bb:d9:d6:fc:a8:13:a1:99:1e:84:0b:
bc:fa:ef:74:9c:b0:b5:f7:8e:e7:3f:0b:e8:84:c3:20:ad:4f:
8c:cc:0e:92:e1:8f:4b:bb:1c:ed:3c:0a:80:95:a0:8c:e7:bc:
17:8e:8e:e4:05:4c:9a:17:97:9b:c9:58:07:97:13:df:e0:78:
22:59:e0:6a:d3:11:ce:10:fd:8e:12:52:d5:49:07:3d:08:ec:
7e:41:ba:ba:94:d4:de:da:a9:b2:ec:94:52:00:83:a1:76:46:
a5:80:10:f5:16:0f:7b:bc:34:3c:91:93:b1:9a:36:62:36:3e:
5e:c7:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:26 2026 by rpki-client