Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/7B8O0Mnyyh2qZkey3_nlrdE6F1I.roa
File: 7B8O0Mnyyh2qZkey3_nlrdE6F1I.roa (raw, json)
Hash identifier: uMXq6RM9bsi7csBoXXzVYWtOjoiaJPfzZD+xorWCev0=
Subject key identifier: EC:1F:0E:D0:C9:F2:CA:1D:AA:66:47:B2:DF:F9:E5:AD:D1:3A:17:52
Certificate issuer: /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial: 01A0C36A6EFBDC1749044F9F9D1EEF51717C
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/7B8O0Mnyyh2qZkey3_nlrdE6F1I.roa
Signing time: Mon 21 Sep 2026 10:02:07 +0000
ROA not before: Mon 21 Sep 2026 10:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.133.28.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:6a:6e:fb:dc:17:49:04:4f:9f:9d:1e:ef:51:71:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Validity
Not Before: Sep 21 10:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec1f0ed0c9f2ca1daa6647b2dff9e5add13a1752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:b0:76:e7:ce:9e:eb:f6:03:7b:1e:3a:f7:
49:22:3a:63:05:80:71:b2:2f:59:de:46:0b:8a:65:
e3:f4:cb:b6:f6:e2:ba:c1:1d:c5:2c:58:af:ee:66:
0a:b5:c1:43:1d:e1:4f:d9:c7:67:f0:5a:ad:5b:64:
bf:08:e3:a3:62:00:2a:a4:5f:55:3d:e7:5b:f0:5d:
4f:72:59:81:b2:51:a6:a5:22:47:2f:c9:a1:3b:ac:
40:4c:b3:33:f1:2d:50:04:d9:5f:e9:5f:ae:e9:e8:
7a:84:c8:63:9a:21:84:f9:d2:aa:18:f3:5e:8e:34:
7e:73:8c:18:0b:8d:06:fe:57:d3:1e:2d:f6:bd:53:
bb:5e:52:f5:82:10:b6:44:3f:32:d3:1f:a9:a6:69:
c1:06:e6:c4:22:0d:68:80:92:94:e1:13:13:07:f1:
39:54:33:ee:e2:9f:b2:02:c5:f9:dc:2f:ac:a2:f2:
de:ad:15:fd:ba:85:51:79:cb:27:8e:87:20:1a:ab:
e3:89:29:44:d2:0e:5c:6d:38:03:66:cd:18:6d:d0:
2c:05:9d:a0:2d:c4:a7:63:1d:f1:a3:01:f3:cb:fb:
cf:5e:8b:0e:5f:3f:84:ce:3e:8b:61:2d:30:b4:c4:
2e:d6:79:85:73:98:27:a2:69:3d:93:b7:5a:42:6c:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1F:0E:D0:C9:F2:CA:1D:AA:66:47:B2:DF:F9:E5:AD:D1:3A:17:52
X509v3 Authority Key Identifier:
keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/7B8O0Mnyyh2qZkey3_nlrdE6F1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.133.28.0/23
Signature Algorithm: sha256WithRSAEncryption
84:25:de:40:a3:75:aa:73:a3:70:a4:10:89:5d:54:4c:be:91:
dc:2a:fb:af:18:d4:ef:dd:c5:db:53:cc:80:6a:a1:09:0f:1e:
7d:03:6c:37:b0:95:4b:32:f4:f8:e9:53:4e:c4:82:4f:5f:08:
ce:60:12:19:c2:fa:34:ef:55:b6:da:45:f6:b8:25:51:04:d0:
5e:7d:2a:08:f8:e4:08:ab:94:7d:0d:fb:da:1e:22:8e:ad:fb:
09:02:b7:0c:67:69:06:df:6b:ec:50:7f:3b:8f:e4:3c:82:02:
bb:73:47:71:19:0a:d8:47:61:5c:44:5f:ec:1a:ec:30:7f:22:
5a:00:8f:63:12:6d:39:10:bf:f1:b0:18:f7:12:85:16:a7:05:
b1:b8:6d:36:f4:ce:83:f1:17:a0:9a:6c:1b:dd:d8:7d:47:4e:
0b:80:53:9b:88:88:21:86:7a:e2:b0:ed:36:d7:34:fa:86:6b:
47:ec:7d:b1:67:e7:20:6d:11:6a:27:ce:a4:41:b5:4b:e4:0d:
0f:46:4d:3a:c5:01:89:fa:30:46:fd:73:27:df:f3:ce:b4:c5:
50:9a:fe:00:60:d6:d5:0a:c9:17:86:49:f6:3b:ec:96:a4:4a:
14:30:14:74:b0:45:2f:6d:21:bd:54:99:43:37:c2:8c:b7:a3:
39:a8:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:52 2026 by rpki-client