Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/c1WDXH7cj-6qCsY0Y3p4x0Xys8o.roa
File: c1WDXH7cj-6qCsY0Y3p4x0Xys8o.roa (raw, json)
Hash identifier: XUgCu0xwPLWlumdjoIU1qSht2Ls2LE57SUofe2H2o3Q=
Subject key identifier: 73:55:83:5C:7E:DC:8F:EE:AA:0A:C6:34:63:7A:78:C7:45:F2:B3:CA
Certificate issuer: /CN=7bcb0a0a25a8cf9e38e0caeac06f1c6cb6dfd3df
Certificate serial: 01A168DE7DCD517094E87839B8B6AC2DAC6E
Authority key identifier: 7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/c1WDXH7cj-6qCsY0Y3p4x0Xys8o.roa
Signing time: Fri 23 Oct 2026 13:06:13 +0000
ROA not before: Fri 23 Oct 2026 13:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1715
IP address blocks: 147.127.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:de:7d:cd:51:70:94:e8:78:39:b8:b6:ac:2d:ac:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb0a0a25a8cf9e38e0caeac06f1c6cb6dfd3df
Validity
Not Before: Oct 23 13:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7355835c7edc8feeaa0ac634637a78c745f2b3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:21:5d:1f:26:46:12:d0:56:ee:48:8f:0a:0d:
b2:c5:eb:45:e9:5d:dd:a2:46:f6:9d:44:db:a1:72:
f2:2a:4f:57:3a:de:82:0f:42:85:47:7c:01:7d:91:
aa:e7:fe:0d:64:8a:27:fa:d4:82:81:c0:91:1a:1e:
76:2e:43:a6:cc:ab:fa:7c:57:af:d4:5e:da:43:56:
7c:1c:b8:89:d8:fb:01:f5:2c:d9:96:0c:02:0f:6c:
c7:92:ff:a1:84:44:6f:e5:60:69:1a:6d:a6:0e:9a:
6a:b6:7c:03:3a:e0:b4:57:0f:5a:04:41:2d:e4:ce:
a5:f3:c1:8f:fc:25:c9:95:c0:ae:f6:41:aa:92:71:
13:77:dc:9e:59:89:5c:05:ea:0a:25:c4:42:f0:bf:
d4:4f:f0:f4:4b:35:37:03:6b:3d:fe:66:96:ff:18:
17:67:d3:9a:ec:a7:59:3d:59:66:b3:58:6a:8a:f6:
3b:d9:70:9b:f1:0a:50:cf:0f:17:50:f0:01:e5:48:
a1:a5:c2:66:ff:2e:1b:cb:cd:c9:5b:05:0e:90:31:
b0:da:65:e7:d9:ce:b3:6d:64:eb:18:90:0d:6b:78:
ef:52:52:7e:33:5b:b6:fb:5f:da:24:37:9c:a1:20:
16:3c:ef:92:59:5a:5c:96:78:0a:35:0e:c0:b8:80:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:83:5C:7E:DC:8F:EE:AA:0A:C6:34:63:7A:78:C7:45:F2:B3:CA
X509v3 Authority Key Identifier:
keyid:7B:CB:0A:0A:25:A8:CF:9E:38:E0:CA:EA:C0:6F:1C:6C:B6:DF:D3:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sKCiWoz5444MrqwG8cbLbf098.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/c1WDXH7cj-6qCsY0Y3p4x0Xys8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2a51f2-c028-4cb7-bbb3-1f5a510f1b21/1/e8sKCiWoz5444MrqwG8cbLbf098.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.127.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:71:de:a5:5f:bf:66:00:ca:70:3d:82:1a:24:d4:eb:f4:c5:
8a:37:4b:22:ca:e0:3c:72:ae:94:a3:b4:01:be:ee:3e:cd:c2:
38:21:bb:38:e0:49:92:9d:02:ba:ca:92:12:6d:d6:38:43:14:
83:26:ac:a4:97:9c:b8:6c:46:19:97:17:e5:1b:52:10:09:14:
80:2e:32:ab:a8:fe:d3:fc:31:93:89:9c:82:1f:6f:fb:b7:b1:
08:14:3e:0a:98:3e:3e:d9:a3:5f:77:0d:9e:59:af:26:2c:43:
bb:7a:4b:68:b9:89:49:6d:6e:8c:2f:aa:c7:10:ad:b1:f9:71:
b4:89:bb:a2:12:e4:a1:6c:8b:d7:66:fe:cf:90:36:0b:4c:65:
50:48:45:30:7f:66:92:20:8b:85:1b:08:c3:66:92:fe:80:55:
ec:f1:44:85:79:a5:df:39:a2:d7:2e:87:4b:a1:ef:b6:5c:60:
1c:13:43:f5:a5:70:3e:b1:d2:14:72:67:0a:3b:f7:6d:ea:5e:
bd:30:f3:54:49:63:6b:cd:b3:12:b4:6d:28:d4:2d:2c:83:06:
96:9e:b6:61:79:dd:bf:e9:84:6b:53:71:9d:bb:9d:54:7c:c7:
70:03:52:af:77:3b:7c:1f:ce:5e:ea:33:d7:ba:d1:da:2f:52:
c5:98:d3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:21 2026 by rpki-client