Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/7twlBQNrZ6FCrFwtrfIHXMy3l3c.roa
File: 7twlBQNrZ6FCrFwtrfIHXMy3l3c.roa (raw, json)
Hash identifier: eePZ/tFgF04WHH163/PX7/2dODE4iUznTEF+hSYRLTk=
Subject key identifier: EE:DC:25:05:03:6B:67:A1:42:AC:5C:2D:AD:F2:07:5C:CC:B7:97:77
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 01A08AF0BA9211A0E174E827F7FE7FC71E09
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/7twlBQNrZ6FCrFwtrfIHXMy3l3c.roa
Signing time: Thu 10 Sep 2026 10:50:27 +0000
ROA not before: Thu 10 Sep 2026 10:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51377
IP address blocks: 185.210.176.0/22 maxlen: 24
193.193.161.0/24 maxlen: 24
193.221.124.0/24 maxlen: 24
2a0b:b3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:f0:ba:92:11:a0:e1:74:e8:27:f7:fe:7f:c7:1e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Sep 10 10:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eedc2505036b67a142ac5c2dadf2075cccb79777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:ac:64:43:98:06:a2:7e:42:20:d7:83:38:
ad:74:c4:5e:7a:a8:d0:a5:c2:05:17:aa:28:b2:69:
64:fe:9e:9f:98:fd:b3:78:a0:cd:be:4b:f1:fb:9b:
70:f9:7a:97:3b:c6:e4:34:d3:28:0f:83:a5:a2:62:
2d:3e:ba:2b:a8:ed:99:12:49:27:72:ca:81:21:c7:
f3:a3:20:72:3c:20:6e:43:2c:b4:e7:5f:f2:26:ff:
0c:dc:88:f8:b3:a4:b7:5d:e9:03:88:fe:d6:68:18:
01:64:e1:d2:6d:dc:4c:d9:89:ae:cf:75:79:6f:79:
5f:43:71:ce:99:6a:b0:1d:24:8e:31:d3:1e:ba:a4:
15:a8:76:14:62:53:24:95:6c:b7:07:ce:be:4b:1c:
b7:b2:09:36:aa:46:df:bd:9b:c1:0d:6e:ec:28:68:
8e:1e:3d:1a:2b:9c:f5:f6:4d:88:01:e2:a2:06:13:
59:90:e3:b4:8b:5d:ab:7f:d4:ff:a8:f1:94:11:e4:
02:d5:64:e1:ee:89:13:aa:33:48:e4:ca:b5:14:e1:
fe:20:fa:40:86:3d:81:05:dc:51:93:37:93:53:8a:
e6:c1:e9:ab:30:e6:c1:f8:11:a5:59:ad:95:47:be:
b3:47:c9:89:c6:29:27:29:2e:c0:a1:51:45:ef:ad:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DC:25:05:03:6B:67:A1:42:AC:5C:2D:AD:F2:07:5C:CC:B7:97:77
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/7twlBQNrZ6FCrFwtrfIHXMy3l3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.176.0/22
193.193.161.0/24
193.221.124.0/24
IPv6:
2a0b:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:ac:1a:70:36:f0:ee:e8:b5:b5:b3:b2:0b:fc:82:23:d7:5b:
38:2f:55:4b:93:63:a9:61:dc:96:6d:0b:ae:44:d7:86:97:48:
b4:be:01:4b:47:df:a8:ed:7b:a8:fd:1a:b6:11:b8:12:8b:97:
9e:47:7b:02:8d:69:d4:2c:bd:2c:6d:e9:0a:88:d5:66:61:3d:
d2:ec:82:9e:f3:3c:76:73:87:17:86:84:c5:12:96:10:12:b9:
6e:00:fb:75:b6:b5:65:26:d6:9f:fc:a4:83:9e:bc:82:0d:05:
7f:ba:a2:6f:17:31:5a:1e:04:d8:9c:89:7c:9a:73:bc:4c:6c:
6e:c8:c9:41:0f:57:f5:33:87:b3:3a:40:de:15:f8:64:ed:e9:
7f:0b:49:93:de:1f:eb:60:76:5d:41:76:86:0a:bf:3c:ca:6f:
cc:4d:79:16:60:45:77:e7:b6:c5:16:00:0f:30:10:d8:7f:dd:
81:40:ff:72:14:59:20:8e:5e:25:34:79:c1:fa:f7:b4:c0:a1:
97:b8:18:48:b4:28:f4:a3:29:01:54:36:68:c5:e3:30:b8:96:
a6:13:a2:b6:62:9d:b8:34:ef:ff:41:32:be:0a:43:86:62:bf:
67:b2:e4:6d:be:94:a3:5b:6e:55:d2:0f:4c:f1:00:15:fb:37:
c4:3f:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:37 2026 by rpki-client