Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa
File: 0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa (raw, json)
Hash identifier: VPIlG57nzf4K1jRvgJYnV75pO4BokyTEgK0DgtYr3dc=
Subject key identifier: D0:AB:7B:2E:23:B2:16:E0:EE:57:63:3F:3B:38:13:44:79:9B:E8:B3
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 019F283FE42AAD89701852337C443323C1C5
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa
Signing time: Fri 03 Jul 2026 13:51:43 +0000
ROA not before: Fri 03 Jul 2026 13:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47160
IP address blocks: 81.201.176.0/22 maxlen: 22
81.201.180.0/24 maxlen: 24
87.236.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:3f:e4:2a:ad:89:70:18:52:33:7c:44:33:23:c1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Jul 3 13:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0ab7b2e23b216e0ee57633f3b381344799be8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:51:19:ce:37:59:27:9e:10:8b:fa:14:17:1b:
22:d4:93:55:d0:48:2e:e8:a5:51:3f:b7:8e:ca:78:
f4:20:50:fb:27:99:e1:1d:0b:7a:01:f4:a5:53:88:
0a:77:c9:0e:06:43:7c:d8:8b:25:8a:1d:36:7e:31:
5a:97:17:fe:f8:d2:e8:b3:56:01:0d:28:b0:54:42:
00:58:6e:ad:ae:6f:ea:62:b2:12:b5:b9:52:13:f1:
e0:c9:0d:7b:5b:bc:d8:da:d6:71:c5:50:2b:50:44:
2b:3f:a3:d5:f9:3e:bb:0d:00:d1:3a:2a:8f:6c:2b:
ec:ef:05:ba:77:ff:40:eb:02:85:3f:9a:df:f2:5f:
63:98:29:ab:ef:7a:cf:7a:a8:f9:9d:cf:4e:ba:6e:
80:27:e4:5e:0f:04:a5:d9:56:cb:76:be:15:ae:e2:
fe:3f:c1:c4:a4:a9:bc:42:ce:7c:bb:63:fa:b2:b2:
e6:f4:31:5f:3f:e9:a7:b9:05:f5:8a:d1:15:87:e7:
2c:bb:e2:cc:3b:95:86:62:90:0e:14:40:9d:be:93:
97:1a:75:10:e2:7f:55:6d:9c:90:e6:73:02:45:72:
78:33:70:30:0a:4b:ae:62:f0:d2:6a:65:f3:ea:40:
10:1c:75:cb:b7:cc:3a:3c:e0:8e:d0:86:b8:11:3a:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:7B:2E:23:B2:16:E0:EE:57:63:3F:3B:38:13:44:79:9B:E8:B3
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/0Kt7LiOyFuDuV2M_OzgTRHmb6LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.176.0-81.201.180.255
87.236.35.0/24
Signature Algorithm: sha256WithRSAEncryption
40:12:b0:8a:3c:ef:ca:a8:49:97:3b:5d:61:b2:e2:ed:77:52:
85:6e:fc:24:a2:cc:fe:1a:2e:b0:c6:c6:e5:f2:a2:73:1c:cc:
28:0f:e6:9d:aa:b6:33:28:9f:ae:8d:e4:f0:8f:a8:25:bc:a8:
92:58:14:9e:e5:2e:0d:f9:c9:16:cb:fe:50:82:f0:c1:e3:51:
3a:2a:de:7d:6c:62:45:63:55:73:18:07:0a:ff:a0:91:f3:a4:
62:96:af:13:f7:31:62:0c:91:1c:9e:bd:ff:4d:80:c1:9a:cb:
3f:85:3f:e2:5d:93:0a:ca:6f:7a:51:be:7d:8f:f8:b1:f7:78:
1f:b0:d1:c5:35:d9:d1:49:9b:64:cd:2a:d7:ac:e4:c9:54:5b:
2c:a7:19:58:8f:81:1c:58:d4:4e:b4:60:86:09:39:43:44:73:
19:42:ae:86:db:36:0d:92:aa:d2:91:8f:e7:a0:37:7f:90:88:
ad:78:13:d7:85:9f:f1:82:dd:50:79:d5:15:a5:85:22:fc:c7:
8d:b9:41:26:28:e0:eb:4b:9a:f5:f4:d4:3f:dc:41:44:83:e4:
9e:9c:63:81:6a:fa:50:1d:fb:97:42:28:97:b2:28:6f:78:81:
50:06:83:f7:10:a7:c6:a4:18:83:c1:7a:81:6b:a6:5f:9e:7d:
c9:5b:6b:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:49 2026 by rpki-client