Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/a7oEZXRPMRrFRbmlSe_UadUlmsM.roa
File: a7oEZXRPMRrFRbmlSe_UadUlmsM.roa (raw, json)
Hash identifier: HaaNwz+goojKrZUIe2KTvp7CtBcwMtupi4I3fyS+Xww=
Subject key identifier: 6B:BA:04:65:74:4F:31:1A:C5:45:B9:A5:49:EF:D4:69:D5:25:9A:C3
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 019F45C96526B6AA208B3D6BB1F98D59CFFB
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/a7oEZXRPMRrFRbmlSe_UadUlmsM.roa
Signing time: Thu 09 Jul 2026 07:30:54 +0000
ROA not before: Thu 09 Jul 2026 07:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44957
IP address blocks: 93.179.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:c9:65:26:b6:aa:20:8b:3d:6b:b1:f9:8d:59:cf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Jul 9 07:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bba0465744f311ac545b9a549efd469d5259ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:3d:aa:20:55:64:b8:55:2f:69:f3:73:0c:
c0:5e:f9:34:74:6f:bb:b9:73:61:ca:a2:d7:d7:20:
33:ad:28:c2:a0:b0:12:ab:aa:7e:a3:f9:e3:4e:98:
fb:ef:5b:84:43:90:8b:be:b0:a3:b9:b6:b4:fa:3d:
50:af:46:18:a0:54:be:31:01:35:dc:80:1e:18:23:
f4:52:b4:87:92:0b:7d:50:90:15:7d:7b:19:e9:93:
29:6e:3f:d4:4e:a8:29:47:52:60:c3:c0:19:9c:90:
74:bb:3c:65:da:ac:e1:f6:46:c8:6b:7b:c4:d8:83:
7e:d1:ca:b1:f8:86:2b:31:93:96:4c:02:60:3c:64:
85:45:fd:66:e8:82:73:fd:ed:53:8f:9e:2d:72:93:
a6:97:89:c5:03:44:84:47:fa:11:dd:b2:e8:0c:2d:
89:7c:1a:4f:bb:fb:da:81:f2:da:ec:f1:15:7a:0c:
a6:a5:42:db:d9:bf:35:21:c3:b2:6c:b1:32:64:4f:
2c:65:ce:d8:79:13:b6:01:77:ce:d2:66:ab:7e:76:
bb:00:ea:f2:5a:4a:7d:ef:34:3d:15:e4:1c:cb:f4:
82:95:1f:5d:ce:fa:32:02:c5:d4:ad:69:6e:13:61:
99:0f:43:5d:69:76:68:71:cd:fd:fd:2f:d3:b4:86:
76:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BA:04:65:74:4F:31:1A:C5:45:B9:A5:49:EF:D4:69:D5:25:9A:C3
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/a7oEZXRPMRrFRbmlSe_UadUlmsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:c0:0d:72:f2:c4:8f:3f:da:87:df:0b:c2:8c:4a:f4:78:ef:
39:25:32:04:f0:dd:0d:dc:b8:36:5a:b4:19:23:58:d0:80:b0:
32:a2:60:0d:e1:49:9f:15:83:c6:2b:b1:68:1c:b9:81:18:36:
5b:f0:52:c4:25:be:81:e6:eb:04:cf:56:3b:fd:39:2b:37:00:
5e:22:47:41:7d:83:8d:7e:38:36:47:e2:a2:57:8e:3c:c3:76:
d3:71:29:77:b2:4a:c0:a0:02:ff:a1:ac:99:6b:c6:0d:5f:fe:
89:c9:03:b8:f9:e6:89:b1:90:4c:c2:eb:15:e0:fe:c0:bf:88:
c2:5a:b1:ab:1e:2b:e5:d9:b4:9d:04:d6:05:ea:1e:8c:41:fe:
e3:c2:98:bb:d8:48:83:6a:4f:04:38:48:f0:ac:39:f4:d2:f6:
25:8b:0f:ab:ac:e6:bf:7e:42:21:52:51:b9:3e:89:56:80:9b:
d4:93:50:c2:df:3a:a2:82:c1:15:5a:dd:4b:ae:35:ce:a0:8d:
b9:ac:f7:33:94:7f:d8:f9:ea:db:69:08:75:12:49:78:22:a6:
da:93:d0:c9:a4:78:e5:62:81:fc:c5:98:e4:d6:97:da:1c:23:
3b:c7:3d:a8:ed:16:bd:f3:8d:54:26:e8:dd:3b:4e:8f:32:82:
86:fa:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:26 2026 by rpki-client