Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7qAUS6k2PWPhkCchOevdbttPWvA.roa
File: 7qAUS6k2PWPhkCchOevdbttPWvA.roa (raw, json)
Hash identifier: HKXJM9o0576UilH1nstpEO36yDxWCBl2yiBb5CsptY8=
Subject key identifier: EE:A0:14:4B:A9:36:3D:63:E1:90:27:21:39:EB:DD:6E:DB:4F:5A:F0
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01A1D4C6623B054743091CF1AFC39FDEF76C
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7qAUS6k2PWPhkCchOevdbttPWvA.roa
Signing time: Fri 13 Nov 2026 11:58:53 +0000
ROA not before: Fri 13 Nov 2026 11:58:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 31.171.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:c6:62:3b:05:47:43:09:1c:f1:af:c3:9f:de:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Nov 13 11:58:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eea0144ba9363d63e190272139ebdd6edb4f5af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:05:b8:17:0e:ff:0f:f6:90:e5:f0:59:a4:
05:2e:e9:f3:1e:c8:e7:b7:5a:27:8b:aa:1a:63:32:
f3:7e:e9:c2:66:a9:78:bd:62:c8:92:1c:a6:ca:03:
fd:84:ce:02:b6:98:2b:50:4f:fa:55:af:d6:1f:37:
5d:e1:65:09:64:ee:60:46:fe:62:01:d9:e3:c5:42:
d7:e1:f7:0b:64:26:c7:03:02:a7:15:18:a0:00:43:
66:f4:5e:26:b6:0d:94:c6:5e:05:62:02:67:3b:58:
52:d7:bc:07:72:8a:78:e1:af:4c:3d:75:92:1f:40:
5c:ef:34:b4:25:d9:a0:3a:46:ef:f2:f5:f4:cd:a8:
bf:7f:f6:54:53:a3:f1:1a:16:8d:1f:ec:1a:9a:b5:
8c:a3:c7:ad:a2:88:d2:8f:a3:d9:43:e7:00:58:06:
64:5c:0e:ae:02:be:6f:a5:c8:58:e9:af:2e:8f:fd:
0b:3f:7a:aa:0e:b6:0e:df:80:d8:d8:86:ba:b7:43:
05:04:3d:55:26:0b:dc:29:5a:40:9e:df:8b:83:27:
7a:5e:e2:56:26:e3:25:45:b1:b3:95:8a:36:99:1a:
89:a3:1a:94:3d:7d:80:18:54:2e:d9:a7:e3:2d:36:
b7:a4:f8:e7:70:e4:94:40:09:6c:54:a9:93:2f:c2:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:14:4B:A9:36:3D:63:E1:90:27:21:39:EB:DD:6E:DB:4F:5A:F0
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/7qAUS6k2PWPhkCchOevdbttPWvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:df:a7:dc:7e:e6:11:92:f5:2d:bb:7d:3f:26:5d:cb:b4:d9:
d2:9c:b2:4f:ff:16:6f:1e:9b:66:73:1d:e2:57:25:6e:79:13:
13:e5:fa:26:48:11:79:ac:14:9e:e0:af:dc:1b:c6:58:d7:61:
62:8c:53:6a:4a:41:83:d8:f6:9c:b0:75:a3:3c:0e:60:af:51:
aa:cc:d3:77:6e:05:f2:d7:65:78:9e:7e:27:c0:67:88:d7:8d:
71:77:f6:9e:86:e7:06:9b:c8:44:63:67:bc:fe:e9:67:5b:d2:
58:a9:04:e1:7e:17:94:f1:ab:f9:0f:e3:5c:4b:3e:ae:b0:04:
e0:31:e3:05:91:d5:b3:d7:f6:71:cb:2d:1a:6a:e6:25:99:ee:
bf:39:3b:10:e3:79:c7:d9:68:2d:d5:8c:56:cc:ba:f1:aa:83:
45:8c:81:6b:4d:ec:ef:07:8e:83:c3:00:35:02:79:e6:e3:b9:
80:0c:e8:01:81:20:6e:61:ed:4e:c3:fc:16:5d:b2:4c:2b:29:
0e:22:a0:cc:b5:3b:58:cb:2f:8f:63:a4:b1:c1:ce:17:0e:cb:
60:38:ef:d2:31:61:f5:83:d9:0b:a8:e9:c9:a0:97:78:c1:22:
e0:16:18:ec:a6:90:b1:f4:da:de:fc:f8:f5:1e:32:bd:f8:92:
fe:51:eb:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHUxmI7BUdDCRzxr8Of3vdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4
YWJmZDIwHhcNMjYxMTEzMTE1ODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWEwMTQ0YmE5MzYzZDYzZTE5MDI3MjEzOWViZGQ2ZWRiNGY1YWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV4FuBcO/w/2kOXwWaQFLunzHsjn
t1oni6oaYzLzfunCZql4vWLIkhymygP9hM4CtpgrUE/6Va/WHzdd4WUJZO5gRv5i
AdnjxULX4fcLZCbHAwKnFRigAENm9F4mtg2Uxl4FYgJnO1hS17wHcop44a9MPXWS
H0Bc7zS0JdmgOkbv8vX0zai/f/ZUU6PxGhaNH+wamrWMo8etoojSj6PZQ+cAWAZk
XA6uAr5vpchY6a8uj/0LP3qqDrYO34DY2Ia6t0MFBD1VJgvcKVpAnt+Lgyd6XuJW
JuMlRbGzlYo2mRqJoxqUPX2AGFQu2afjLTa3pPjncOSUQAlsVKmTL8JpbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO6gFEupNj1j4ZAnITnr3W7bT1rwMB8GA1UdIwQY
MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt
NTJmOTdiMjc3ZDFmLzEvN3FBVVM2azJQV1Boa0NjaE9ldmRidHRQV3ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm
LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH6uAMA0G
CSqGSIb3DQEBCwUAA4IBAQCW36fcfuYRkvUtu30/Jl3LtNnSnLJP/xZvHptmcx3i
VyVueRMT5fomSBF5rBSe4K/cG8ZY12FijFNqSkGD2PacsHWjPA5gr1GqzNN3bgXy
12V4nn4nwGeI141xd/aehucGm8hEY2e8/ulnW9JYqQThfheU8av5D+NcSz6usATg
MeMFkdWz1/Zxyy0aauYlme6/OTsQ43nH2Wgt1YxWzLrxqoNFjIFrTezvB46DwwA1
Annm47mADOgBgSBuYe1Ow/wWXbJMKykOIqDMtTtYyy+PY6Sxwc4XDstgOO/SMWH1
g9kLqOnJoJd4wSLgFhjsppCx9Nre/Pj1HjK9+JL+UetZ
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:55 2026 by rpki-client