Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa
File: 7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa (raw, json)
Hash identifier: 5sz1u1bzF1UGMTJq4Lxgn8XO6YmGX618edjqYJ+pTDo=
Subject key identifier: ED:56:88:34:54:8F:AA:DD:E6:5C:61:EA:3B:66:45:C0:43:D6:11:F1
Certificate issuer: /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial: 019F46118F0B746B75965EDC7AB85FBC94EF
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa
Signing time: Thu 09 Jul 2026 08:49:43 +0000
ROA not before: Thu 09 Jul 2026 08:49:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 91.146.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:11:8f:0b:74:6b:75:96:5e:dc:7a:b8:5f:bc:94:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Validity
Not Before: Jul 9 08:49:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed568834548faadde65c61ea3b6645c043d611f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:43:af:be:ee:34:f2:3a:c8:c7:17:28:c6:
7a:bb:5c:3f:31:14:1a:a6:1a:72:9b:2c:e2:02:fa:
6a:84:e1:5e:d1:59:c0:49:95:8a:82:83:f6:20:e2:
f5:e4:48:2b:f2:21:1d:8f:b5:dd:f9:8a:0e:0b:da:
90:44:14:33:cf:dc:d9:11:f0:c2:fa:d9:f7:4b:94:
31:d7:66:cf:04:1a:e5:49:d5:e5:4c:e7:7b:e3:c0:
c9:dc:84:37:87:29:14:bf:dd:bd:6e:c3:4c:99:75:
8d:5a:38:02:ac:dd:4e:71:eb:5d:2d:51:49:f8:fa:
dd:58:51:1b:36:bb:29:ab:1f:ef:14:42:6e:5a:5f:
1a:c7:06:61:61:5f:af:52:b8:06:18:19:30:55:76:
8c:a2:63:39:32:5f:d7:0c:9b:d1:bd:d0:34:3d:ab:
e9:20:0c:72:4f:c8:b3:40:0c:55:13:5a:c8:fa:4e:
4e:24:eb:b3:65:0d:f1:b3:c6:21:5e:48:10:81:80:
95:d4:54:3a:83:62:dd:c2:45:9a:7c:56:f8:fb:03:
b5:bf:0a:07:40:80:cd:08:1b:33:65:e6:35:89:76:
7f:6a:88:c2:56:a1:13:71:d8:28:f2:e1:09:60:e3:
bd:80:ef:a8:bb:65:73:0b:53:8e:9c:a1:52:37:8c:
4a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:56:88:34:54:8F:AA:DD:E6:5C:61:EA:3B:66:45:C0:43:D6:11:F1
X509v3 Authority Key Identifier:
keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/7VaINFSPqt3mXGHqO2ZFwEPWEfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.146.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2a:e3:ee:35:db:15:ca:7d:ef:3b:34:06:ea:d3:09:33:57:
32:1f:ec:89:bc:83:6a:85:bf:d3:28:b7:a3:12:d0:b9:62:57:
5c:e5:cb:a7:69:de:87:64:75:6a:bd:ff:6b:b1:d3:a5:af:91:
d5:48:61:ec:bf:b3:2e:cb:eb:e4:8e:e6:09:16:66:03:c8:36:
1a:0e:1d:9e:b0:cc:39:3f:9a:24:24:4b:fc:73:42:72:cf:0c:
40:17:df:57:ee:46:72:62:bf:2f:3c:98:7a:8a:e9:b7:44:73:
5c:a6:4d:05:ff:0d:3e:b1:0e:0a:ef:98:c2:a5:8d:a0:7f:80:
fa:b6:12:0d:e6:41:bd:f6:ba:d3:4a:1b:53:45:b9:ae:7e:20:
4e:2e:b2:7f:ba:7d:ef:aa:d4:c1:cb:9c:88:3c:0e:e1:0e:57:
b9:1d:44:e0:be:8f:4c:53:c4:42:f8:a9:5c:31:7e:82:36:8c:
3c:0a:04:6f:5e:ba:12:74:ce:57:19:69:fe:59:5d:dc:57:e4:
56:95:c8:e4:82:34:cd:db:72:e1:3a:75:6d:f6:b6:6c:bf:a9:
5b:85:25:30:8a:cc:ce:60:6b:10:3d:ef:7b:54:e8:43:f4:7c:
6a:79:61:91:4f:4d:31:48:98:82:7a:64:31:25:6f:63:29:1c:
a7:ba:11:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:32 2026 by rpki-client