Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/P7X-TFQrNBUmDTPrSg8Uycv95BA.roa
File: P7X-TFQrNBUmDTPrSg8Uycv95BA.roa (raw, json)
Hash identifier: JWrwg1jchmmpIeyFsH/GcYXJUkYLKUH8jhZQ6YCaBbA=
Subject key identifier: 3F:B5:FE:4C:54:2B:34:15:26:0D:33:EB:4A:0F:14:C9:CB:FD:E4:10
Certificate issuer: /CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Certificate serial: 019F23690E28DA6F9F4600A6BFE2E51B2E75
Authority key identifier: 01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/P7X-TFQrNBUmDTPrSg8Uycv95BA.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212485
IP address blocks: 193.163.12.0/24 maxlen: 24
2a0e:2140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:28:da:6f:9f:46:00:a6:bf:e2:e5:1b:2e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ed6ae7d549e4d26c2327ad53a558f98eb0a1b8
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fb5fe4c542b3415260d33eb4a0f14c9cbfde410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:f6:c3:59:02:9f:ab:6e:23:07:2a:4f:21:
44:51:1a:c9:6e:a8:7e:ec:9b:7b:14:f6:eb:f7:7f:
ad:15:69:c1:83:26:86:59:bf:2b:c2:71:e3:2d:9b:
ba:03:1f:b8:8d:30:15:19:66:b4:0d:0b:36:fb:ed:
4f:87:db:c1:a5:7b:d4:63:4e:91:a0:c9:96:51:56:
b1:a0:04:52:1a:d1:a2:02:bb:8e:dc:ce:6d:f3:9d:
45:c2:7e:b0:f2:34:05:3c:63:c0:14:96:24:c1:19:
45:40:05:bc:15:e8:c7:6b:ca:d8:79:19:31:99:27:
68:4e:01:b9:f5:85:e7:ab:83:2d:c4:00:1b:b5:6e:
5c:89:c4:6c:17:e5:8f:c9:06:c9:91:4d:c9:80:19:
75:e6:d6:a3:ab:2c:6c:85:ee:3d:04:d4:71:5b:7f:
b2:09:8b:b2:7c:83:a4:e4:17:73:d4:9b:b6:02:85:
86:24:51:24:2a:72:df:50:bb:f0:aa:cc:8a:a7:bb:
d0:e6:c1:fb:84:2e:38:3e:e5:b6:e5:4c:57:bd:8d:
21:08:f2:5d:85:d9:05:5f:3f:d8:d4:74:b2:0f:6b:
a1:16:28:83:f7:7a:0c:5c:2b:96:4f:bc:d5:ad:3f:
69:8c:0a:80:ce:37:38:bb:79:99:56:70:7a:a5:57:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:FE:4C:54:2B:34:15:26:0D:33:EB:4A:0F:14:C9:CB:FD:E4:10
X509v3 Authority Key Identifier:
keyid:01:ED:6A:E7:D5:49:E4:D2:6C:23:27:AD:53:A5:58:F9:8E:B0:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ae1q59VJ5NJsIyetU6VY-Y6wobg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/P7X-TFQrNBUmDTPrSg8Uycv95BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/Ae1q59VJ5NJsIyetU6VY-Y6wobg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.12.0/24
IPv6:
2a0e:2140::/29
Signature Algorithm: sha256WithRSAEncryption
2d:8d:e7:d5:a2:74:2f:24:47:ee:6f:32:df:96:20:c2:4d:a3:
d7:d8:2f:f5:4e:4d:04:89:4b:ed:b1:59:26:ee:c3:20:33:a6:
48:03:cd:6a:2a:7e:fc:e7:1c:27:73:41:90:10:6c:d0:86:18:
e9:11:dd:14:ee:06:a0:52:a3:b0:86:fb:16:06:22:dc:e6:2b:
41:74:45:29:35:31:72:77:6e:07:b5:9f:2b:0a:4a:00:02:88:
97:17:24:18:32:c0:75:08:54:66:44:cc:d8:33:46:10:1d:ae:
fa:ba:20:fa:70:ff:96:3f:b8:d6:e0:d0:32:53:b2:33:a3:ee:
e0:e1:c6:14:b2:dd:ec:f7:c1:f6:d0:b0:75:1d:ae:39:17:e6:
c6:eb:25:5e:d8:5d:86:10:d0:2d:05:6d:f1:bb:ec:6e:c7:d8:
fe:ac:59:ac:14:8b:fe:b4:81:cd:c1:e8:0e:46:2b:91:52:c2:
4b:0a:09:51:81:f9:6f:a3:a1:dc:66:c6:1a:89:94:ea:70:5e:
a6:06:b2:29:d5:49:b3:cd:9a:2b:2c:ec:cc:3c:da:17:e4:08:
e9:36:26:00:73:33:70:6d:03:71:9b:dd:bb:19:95:c0:bd:42:
00:b8:d3:64:88:d2:4d:36:95:31:4b:10:29:73:15:cd:ce:aa:
57:ff:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:00 2026 by rpki-client