Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7HYjHs-aujo84sLRbCxl5hliyDE.roa
File: 7HYjHs-aujo84sLRbCxl5hliyDE.roa (raw, json)
Hash identifier: lYQ7JKeH8XjZLHrMwJ6lrMMDs1SqoqEYHTudnOQjylM=
Subject key identifier: EC:76:23:1E:CF:9A:BA:3A:3C:E2:C2:D1:6C:2C:65:E6:19:62:C8:31
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A16A66853ABBCD26D8D663823E94C61480
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7HYjHs-aujo84sLRbCxl5hliyDE.roa
Signing time: Fri 23 Oct 2026 20:14:25 +0000
ROA not before: Fri 23 Oct 2026 20:14:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199304
IP address blocks: 186.243.177.0/24 maxlen: 24
186.243.206.0/24 maxlen: 24
186.243.208.0/24 maxlen: 24
186.243.215.0/24 maxlen: 24
186.246.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:66:85:3a:bb:cd:26:d8:d6:63:82:3e:94:c6:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 23 20:14:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec76231ecf9aba3a3ce2c2d16c2c65e61962c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:4b:5d:10:99:90:01:76:88:76:4a:e9:5c:
5e:96:cb:ee:81:70:dc:31:fd:77:9b:5f:cd:bc:1f:
ce:1e:65:18:37:c3:cc:31:4d:a3:3e:f5:16:07:63:
69:4f:04:0c:b1:bb:47:f1:59:65:bb:06:1c:09:a9:
4c:2d:23:a3:a5:d4:fe:ec:a4:f2:c5:80:c5:5d:18:
9c:2f:1d:5c:af:04:85:b4:6f:f6:83:b3:e8:67:99:
5c:93:e6:2e:c1:c9:80:46:8d:2e:d4:c7:69:f5:f3:
79:ad:e1:8d:d2:7b:94:08:b7:e3:4b:09:5c:f6:1b:
ab:6f:f0:74:ed:73:d1:f8:b0:47:26:0e:c5:fe:27:
ed:ab:bb:d7:0e:65:88:80:7f:f8:1f:8a:31:76:50:
b0:dd:50:22:20:77:c5:8b:3d:e9:83:2e:73:75:17:
5f:df:7a:fa:c7:b9:41:bc:8e:b1:f3:67:91:87:06:
05:1b:34:4a:4c:8f:28:8f:61:b8:4b:e4:3c:71:87:
fc:bb:36:ca:c5:c8:1a:d9:49:07:e1:77:ef:97:84:
56:da:f7:9f:c9:c0:81:74:e2:9d:5a:15:83:1e:ce:
c7:67:3f:3c:9e:6e:74:1f:70:24:19:89:20:d5:f0:
6f:2d:9e:c1:aa:48:53:96:dd:4e:d4:9a:bd:3a:40:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:23:1E:CF:9A:BA:3A:3C:E2:C2:D1:6C:2C:65:E6:19:62:C8:31
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7HYjHs-aujo84sLRbCxl5hliyDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.243.177.0/24
186.243.206.0/24
186.243.208.0/24
186.243.215.0/24
186.246.33.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0e:ec:a7:9f:12:62:8a:bc:4f:cb:c6:17:62:b7:3e:86:b0:
05:8f:3c:99:dd:5f:97:7d:28:33:bf:16:22:a5:48:da:cb:39:
a7:9d:18:b5:47:4d:73:d5:ab:fb:73:04:bc:e7:1f:cc:82:28:
82:12:b4:49:7d:ca:3b:82:68:b3:2b:e1:b5:28:31:a4:78:0a:
0e:ed:0c:64:27:26:0a:21:3b:d7:d2:83:77:44:6d:9d:30:5f:
59:a7:57:97:65:80:ce:25:30:9f:9a:f6:8b:3c:41:d9:0a:74:
9f:65:76:2a:47:25:06:8d:e2:63:de:43:17:26:94:d3:14:e1:
0d:ef:64:00:ef:a8:1c:1b:14:d0:4b:00:d4:65:0a:47:f7:43:
1b:a4:28:93:0c:b7:3f:28:bb:7b:46:6f:76:be:ce:bd:82:6b:
6c:b2:1a:f8:cb:df:8e:c0:1e:85:f2:16:94:13:a7:b8:bf:c9:
59:ca:4f:3f:a6:9f:f1:7c:31:37:ed:b2:1b:f6:65:a0:a6:44:
fc:29:62:49:33:9e:d9:01:2c:d0:5a:80:b3:df:a7:bc:da:15:
39:f6:c6:d2:a7:a5:c3:93:9c:72:c0:36:25:90:f1:b3:a6:35:
9c:a9:d3:2b:81:89:fd:d5:86:7d:15:fe:d8:6d:f5:2a:eb:36:
22:97:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:22:33 2026 by rpki-client