Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/7iV8Im81eBthIsfk2nHn7mrcL0I.roa
File: 7iV8Im81eBthIsfk2nHn7mrcL0I.roa (raw, json)
Hash identifier: DMePp37AdPaqIdkG+BXAwHKQ/GhPpo+29tJyj4JJmcA=
Subject key identifier: EE:25:7C:22:6F:35:78:1B:61:22:C7:E4:DA:71:E7:EE:6A:DC:2F:42
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 01A0C469DCAB6737DDD254F1CC5C77878937
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/7iV8Im81eBthIsfk2nHn7mrcL0I.roa
Signing time: Mon 21 Sep 2026 14:41:07 +0000
ROA not before: Mon 21 Sep 2026 14:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.54.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:69:dc:ab:67:37:dd:d2:54:f1:cc:5c:77:87:89:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Sep 21 14:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee257c226f35781b6122c7e4da71e7ee6adc2f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:49:dd:dc:a2:67:e4:09:3e:e5:91:64:22:
2c:9f:40:18:74:12:72:fb:19:84:44:a0:33:92:6b:
d2:89:1f:04:d6:68:5a:30:74:e8:ef:48:e1:26:5f:
40:0a:1e:d6:52:f0:9f:e4:0f:95:61:91:db:cd:b3:
d3:89:be:d8:7a:dc:2c:dd:1f:6f:35:1f:95:a7:51:
c9:b7:7b:0d:22:ae:ef:86:c5:b2:fc:e5:bb:62:5b:
e9:c7:08:4d:ca:ad:fd:ba:85:05:9f:bd:d9:77:44:
88:4d:a0:0f:12:ca:87:b2:fc:7d:bc:c7:da:54:ea:
d8:b4:5a:6f:f8:74:65:87:0d:99:69:15:cb:18:6f:
c0:2c:a2:5f:3c:c1:06:47:58:f1:2c:a7:08:89:17:
39:02:59:48:6b:94:7d:57:bb:4d:fa:cd:4c:6c:ea:
92:c4:23:df:c8:26:d7:5d:0b:09:65:4e:06:f3:f7:
17:b6:0c:25:b7:7d:2b:7d:a4:e9:17:c3:fd:b9:4c:
13:40:87:2b:15:e3:cd:5e:7b:b4:7e:3f:d5:60:54:
12:a9:41:47:ea:31:ea:3d:3b:c2:d9:be:ea:01:36:
a7:63:db:04:d6:81:38:44:ec:fc:67:c7:a8:ba:dd:
49:8e:69:5a:c8:c2:b4:85:e3:41:2c:f3:f3:bf:52:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:7C:22:6F:35:78:1B:61:22:C7:E4:DA:71:E7:EE:6A:DC:2F:42
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/7iV8Im81eBthIsfk2nHn7mrcL0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.12.0/23
Signature Algorithm: sha256WithRSAEncryption
87:1d:c8:0f:13:33:dc:14:9b:4b:e3:49:55:c0:e6:fc:e8:09:
5b:bb:c0:d4:c3:13:e4:f2:f1:3f:47:91:7d:dc:b5:85:a7:22:
db:8c:7f:8d:27:0a:44:dc:93:33:0f:a9:46:18:df:69:16:29:
f8:c3:b3:db:86:f7:2c:90:1b:c5:f5:60:70:e8:45:75:51:d4:
c6:e0:10:14:3d:ac:ec:87:38:40:a4:41:6a:64:0e:f6:7a:47:
7a:04:8c:a1:35:3b:2f:03:42:18:88:21:8b:53:a4:78:70:18:
81:42:1a:ab:d6:c0:2d:ee:1a:39:ce:44:73:c8:9a:7c:84:25:
29:7a:22:ee:77:df:fb:ca:65:21:cc:40:9c:a9:dc:e0:93:fa:
c8:bd:1a:37:5a:3b:18:e2:c4:bf:03:8a:a2:4a:8a:4f:61:1e:
5d:16:8b:d0:15:cf:ab:ac:a2:ac:7a:84:14:2b:1b:79:ed:16:
65:54:e9:a4:c8:e0:04:ad:5d:09:82:33:da:32:e6:ee:74:ea:
40:ed:46:e4:46:26:b4:e1:3c:6a:e0:f4:69:f4:3c:24:de:72:
71:e9:ea:21:ae:99:0c:bf:4d:41:6b:0a:b0:4f:9c:54:b8:a6:
0f:a9:8d:68:ce:10:3b:fe:32:11:64:fe:e7:ed:10:4a:ed:fe:
dc:be:85:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:38:09 2026 by rpki-client