Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/U_kRx4mriKz0wBVYQvlU8Ms7-xg.roa
File: U_kRx4mriKz0wBVYQvlU8Ms7-xg.roa (raw, json)
Hash identifier: bPOAl1necdKvajjqeHPndZ0hEAM24k076WDHjCV7BMk=
Subject key identifier: 53:F9:11:C7:89:AB:88:AC:F4:C0:15:58:42:F9:54:F0:CB:3B:FB:18
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 019F5FC57480340C41CCEEB208764C8213DD
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/U_kRx4mriKz0wBVYQvlU8Ms7-xg.roa
Signing time: Tue 14 Jul 2026 08:36:43 +0000
ROA not before: Tue 14 Jul 2026 08:36:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212377
IP address blocks: 62.36.55.0/24 maxlen: 24
185.247.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:c5:74:80:34:0c:41:cc:ee:b2:08:76:4c:82:13:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Jul 14 08:36:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f911c789ab88acf4c0155842f954f0cb3bfb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:96:6e:9e:76:23:56:d7:36:36:95:62:a7:
24:59:b9:9e:a1:17:35:a1:b2:ce:fc:26:32:6c:be:
d0:9e:95:36:b9:99:83:9e:28:4b:e8:da:0c:72:ac:
c1:c4:f0:cc:d9:00:ec:35:5c:6f:89:2b:d8:1f:66:
d4:10:70:e1:bf:28:27:d4:26:7b:c0:9d:dd:24:03:
fe:14:95:97:24:f8:4e:50:19:a5:ba:3d:55:0e:78:
96:28:52:17:74:89:13:81:52:89:e7:33:f6:9e:4a:
e3:d2:32:d7:86:18:85:25:98:64:9a:ab:4d:6c:37:
8d:f3:69:d3:bf:68:1b:05:11:b2:84:05:d8:44:bd:
92:f7:a1:3c:ec:69:ca:c4:9b:3a:f1:df:49:cb:45:
c9:b7:99:b8:62:1f:83:f4:33:64:d3:fb:5f:81:39:
10:28:8d:fc:c3:d1:3c:70:bb:2b:72:ca:13:c6:09:
f3:5b:99:42:17:34:af:e9:e6:e1:70:50:99:49:23:
d9:21:12:5c:df:69:0d:45:8b:16:f0:92:d8:9d:2e:
f1:04:8c:9c:b5:29:b9:3f:6b:b5:8c:a9:13:58:13:
b9:1c:7d:da:a5:10:0b:34:b9:18:34:d5:8a:37:7e:
e4:e2:16:b8:ef:09:c8:b7:bc:64:b4:e3:4f:99:c7:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F9:11:C7:89:AB:88:AC:F4:C0:15:58:42:F9:54:F0:CB:3B:FB:18
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/U_kRx4mriKz0wBVYQvlU8Ms7-xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.36.55.0/24
185.247.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:98:9a:aa:f8:db:31:9c:38:35:4a:d2:84:35:4f:33:13:25:
d7:8c:6f:72:cb:7d:e6:c2:54:46:a3:89:2c:81:ea:6a:a6:62:
86:24:e3:d5:aa:bb:96:d5:7c:4a:11:ba:c3:63:f4:e1:aa:ad:
d2:f9:49:ef:5f:ad:8c:0f:1b:c5:4a:f6:55:e2:0f:f9:ab:79:
4a:6a:b8:b2:90:98:0d:1b:81:e8:b2:20:27:5f:34:8e:14:2a:
00:22:43:63:0a:6d:ce:87:60:ef:f6:9c:45:38:59:0c:c0:66:
34:90:c1:cb:a8:f2:d2:4d:b5:44:cb:b2:97:11:72:bb:9f:88:
a9:72:d2:dd:43:2b:ee:20:a7:fb:5c:12:7a:38:10:89:60:7a:
19:22:c4:1a:86:cd:cd:6e:64:44:d5:1c:46:8a:96:b2:ed:b9:
f8:52:7a:6c:c9:2d:28:ea:20:59:57:d9:7c:25:54:c3:96:26:
cd:8a:ab:d4:ec:4a:26:2f:f4:c3:c6:ff:e6:c4:3e:4a:70:70:
b4:40:f1:3e:95:c0:bc:d3:3f:68:6f:75:01:9b:2d:be:c8:e7:
64:06:10:b0:2d:cf:80:2a:0d:8f:e7:03:24:04:2f:0d:d6:d6:
90:6d:96:a3:2b:71:94:7f:3e:6c:ba:68:54:f0:57:91:f6:a7:
d9:2d:3e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:15 2026 by rpki-client