Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/U_7-Nsxzubh0LTFupG4XdsLPtAQ.roa
File: U_7-Nsxzubh0LTFupG4XdsLPtAQ.roa (raw, json)
Hash identifier: SZ17rLJ/J+E1HR7cEsyoBkop6mFZfWSJpG+GEq928Qw=
Subject key identifier: 53:FE:FE:36:CC:73:B9:B8:74:2D:31:6E:A4:6E:17:76:C2:CF:B4:04
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0CC6D8F61125719BFA867FAFCC8B3DCD3
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/U_7-Nsxzubh0LTFupG4XdsLPtAQ.roa
Signing time: Wed 23 Sep 2026 04:02:07 +0000
ROA not before: Wed 23 Sep 2026 04:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.184.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6d:8f:61:12:57:19:bf:a8:67:fa:fc:c8:b3:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 23 04:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fefe36cc73b9b8742d316ea46e1776c2cfb404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:77:f8:f8:5c:8e:6b:fa:45:ab:46:58:22:
3d:33:91:33:b9:3b:03:48:a9:e5:0f:28:45:5b:f6:
a0:85:d9:0e:b5:3d:54:d0:f9:6d:97:ad:30:d6:b9:
24:b7:63:f5:b5:bd:15:d5:9e:20:09:3d:9f:e7:f4:
a5:7f:36:dc:86:ff:e5:c7:92:7c:bc:87:9d:83:62:
bc:af:dc:22:b8:fe:e0:34:67:e7:29:30:94:00:ff:
8c:89:f5:c4:10:71:54:f1:87:d9:c6:e8:d6:11:bc:
9c:51:3f:52:6d:49:25:c6:56:62:db:0a:5d:66:b9:
1b:23:6f:18:05:d2:84:a7:35:65:83:e9:79:19:25:
e7:0e:97:04:1a:6b:36:d7:c4:41:93:20:9f:05:4c:
88:6e:11:ec:a0:87:ab:57:69:90:b2:c3:26:26:0f:
c3:9a:09:f4:ce:1d:d8:b4:dd:f6:93:a5:10:47:4a:
c6:24:8f:6c:fa:9c:f1:5e:7f:8b:6b:82:8f:50:0c:
fc:c0:a2:06:62:61:b1:2f:c0:7e:4d:69:2b:12:00:
8c:dd:c5:dc:16:db:70:e1:b9:90:a5:6b:fe:f8:b5:
46:a4:5f:39:1e:b1:19:75:c7:eb:91:ff:d1:af:36:
8c:76:f5:38:fb:57:51:44:81:63:fb:ca:b8:78:91:
30:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FE:FE:36:CC:73:B9:B8:74:2D:31:6E:A4:6E:17:76:C2:CF:B4:04
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/U_7-Nsxzubh0LTFupG4XdsLPtAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ef:68:72:49:c5:30:e8:e6:e1:b8:df:20:df:40:1c:2f:0c:
44:e9:8b:a0:44:e7:31:4f:3e:59:6e:1c:cb:72:e0:5c:9b:e8:
d9:b7:2a:3a:3b:39:e2:0b:81:24:02:a5:18:89:fd:b3:2f:da:
29:e2:f5:10:b5:c7:c1:16:d7:8b:31:66:44:d3:c7:41:ce:ed:
63:7a:45:71:fc:a3:b1:65:ff:04:57:8d:b8:c4:bf:30:82:a7:
a6:e4:24:fb:36:6a:45:23:8d:de:54:3d:39:ed:7d:e1:84:93:
8d:c2:50:58:49:b0:53:50:88:b9:c8:7b:50:7e:8a:51:d0:f3:
76:c5:46:d7:c8:2a:3d:99:04:63:eb:e9:01:a3:d1:1b:45:9d:
86:55:81:53:d8:83:fd:57:31:67:82:bd:2e:67:4a:83:22:ba:
e6:c4:9f:90:7d:c5:1b:2e:8d:e7:60:ed:0e:92:2c:8a:22:e3:
d1:7c:82:e3:76:8e:40:6c:77:5f:2c:fc:7e:d0:e7:e8:e6:7d:
28:ca:0d:43:66:1e:02:35:d9:1e:b7:56:f2:2d:cb:c5:f0:81:
a6:8b:12:f5:d3:33:9c:c6:5d:b5:30:0a:c5:8b:78:60:55:10:
46:d0:27:ab:6a:21:2b:62:31:54:07:03:ba:41:cf:ea:30:31:
3f:bf:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:03:15 2026 by rpki-client