Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/sK7vRxYyJ65XJVAysYweH-WYEks.roa
File: sK7vRxYyJ65XJVAysYweH-WYEks.roa (raw, json)
Hash identifier: UJhW79Q11d1shT3/cfF0A99JiqhdJFGVzi2YicBUfXw=
Subject key identifier: B0:AE:EF:47:16:32:27:AE:57:25:50:32:B1:8C:1E:1F:E5:98:12:4B
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F83F6253769ED0EAFA3F29847885B24A9
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/sK7vRxYyJ65XJVAysYweH-WYEks.roa
Signing time: Tue 21 Jul 2026 09:16:14 +0000
ROA not before: Tue 21 Jul 2026 09:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 201.3.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:f6:25:37:69:ed:0e:af:a3:f2:98:47:88:5b:24:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 21 09:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0aeef47163227ae57255032b18c1e1fe598124b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:3f:c2:aa:e9:c8:2e:6a:85:0a:59:85:19:
bc:31:41:5b:c3:ff:98:f2:e4:1b:c8:0c:2b:8f:81:
9e:81:45:4d:32:1c:85:93:5c:4f:50:fe:62:c1:95:
18:70:8f:dd:a7:57:80:93:6e:70:5a:ce:bd:e9:6c:
0e:5f:4d:bf:e7:c9:80:64:4a:35:fa:a5:cc:69:24:
70:bf:2c:55:2f:40:38:91:12:d3:00:58:77:99:2a:
18:39:70:75:38:d6:64:44:7e:c3:32:79:78:4d:1f:
a6:31:00:3a:1d:b3:b4:b1:05:ae:4f:7a:3d:e7:e8:
11:5c:3f:2c:fe:bf:36:ca:81:42:2c:14:f7:26:44:
a9:1e:dd:da:bf:b3:b8:91:ee:44:48:60:4b:66:7a:
57:c4:e7:76:34:fc:ee:3a:f3:4d:70:12:30:d2:43:
69:e2:8c:30:3f:ff:4d:ff:b6:be:cb:7b:6a:51:48:
73:46:be:65:18:64:a4:d9:df:9b:8e:bd:5f:c0:22:
da:00:ca:2a:a6:15:46:21:ae:0b:4c:86:a6:cb:0a:
fa:a2:bc:1c:aa:8f:de:42:36:16:a4:d7:4f:9c:72:
6e:f3:52:83:4b:f6:8a:02:e9:13:81:f8:7f:e9:ea:
43:0a:be:b5:3c:3b:5e:ba:1c:0b:bf:72:b8:47:94:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:EF:47:16:32:27:AE:57:25:50:32:B1:8C:1E:1F:E5:98:12:4B
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/sK7vRxYyJ65XJVAysYweH-WYEks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.225.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b2:34:d7:0c:66:a9:a5:4b:8c:9f:a9:26:7c:99:2a:73:9f:
a6:0d:d7:8e:f4:2d:44:e5:54:22:5b:33:1f:4c:1c:9f:74:93:
c4:5e:ce:4a:71:c5:31:b9:35:cc:0d:6b:78:1f:7d:ae:3d:84:
37:2c:ab:4b:3d:d8:32:41:13:28:34:ea:8c:21:a8:01:b9:38:
bf:05:cd:b9:ef:fb:93:ea:96:72:bb:ed:cf:0f:07:2e:d9:0e:
e5:61:8e:9d:23:c1:fe:bc:8e:cb:cf:86:21:42:b3:2f:2a:cf:
61:69:cd:8b:50:71:07:3a:a5:fd:be:43:1b:c9:94:b3:55:89:
a5:42:e4:46:f4:87:40:a3:d8:48:be:07:2d:d2:c0:5d:dc:27:
5b:c8:4e:e4:3e:ac:da:af:fa:29:c7:63:fa:92:05:cc:62:e7:
08:e9:02:9e:70:fc:64:76:80:e3:d4:fe:6d:c2:5b:50:d2:4b:
b3:c6:b9:03:76:be:bf:20:2c:70:d6:e2:62:ae:c4:f5:98:8a:
50:dc:6b:af:a0:54:c9:cc:8a:61:96:a0:4c:e5:25:2e:5d:7a:
8c:32:c5:21:25:50:c3:bf:a5:24:4c:30:11:b2:3e:e7:ac:d7:
f5:4d:88:ff:ca:a2:34:0a:a0:07:b6:f4:d3:d7:99:65:77:cd:
52:3c:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:06 2026 by rpki-client