Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/A7SEMudJ5a-RxrK2Uq7yONbKYeU.roa
File: A7SEMudJ5a-RxrK2Uq7yONbKYeU.roa (raw, json)
Hash identifier: c6z7aq6nqfr5/QhRF0NBAO+wJuLKqiCCbZKtfKmmBqE=
Subject key identifier: 03:B4:84:32:E7:49:E5:AF:91:C6:B2:B6:52:AE:F2:38:D6:CA:61:E5
Certificate issuer: /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial: 019E07333435837BD3DD8EF34AF2B7D16EAF
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/A7SEMudJ5a-RxrK2Uq7yONbKYeU.roa
Signing time: Fri 08 May 2026 10:47:36 +0000
ROA not before: Fri 08 May 2026 10:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215081
IP address blocks: 201.78.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:33:34:35:83:7b:d3:dd:8e:f3:4a:f2:b7:d1:6e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
Validity
Not Before: May 8 10:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03b48432e749e5af91c6b2b652aef238d6ca61e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:2a:a0:b1:f1:d0:f9:ab:3a:d8:c2:05:5b:
b0:70:f9:02:42:60:c7:b4:4e:ec:13:3d:bc:7c:a6:
b2:c0:1e:ef:27:84:fb:bb:5c:e7:10:af:7d:b9:9e:
e4:d2:b8:d9:00:ad:92:c8:9e:ae:ea:79:1d:53:23:
69:3d:89:eb:86:7d:2d:09:33:a6:c8:96:95:11:06:
7b:f4:97:a2:3c:10:f6:27:6d:9a:fb:6e:6a:ab:a3:
71:f9:b2:33:16:66:8f:c3:e6:17:8d:80:56:8c:ab:
ce:6f:75:66:1f:4a:f0:06:61:a0:3c:36:13:6f:dc:
8e:43:e6:4d:b8:f2:09:f0:f4:bf:fe:e7:0c:13:79:
2b:20:a0:ae:9a:f0:4c:0f:c6:6f:e5:df:40:9f:27:
fc:58:cf:41:eb:c5:31:33:30:a8:8d:ff:1e:3a:93:
b0:54:0d:92:77:ce:11:70:df:08:da:11:2b:68:7c:
8b:1b:7d:77:e1:db:75:ef:06:57:ce:fc:9c:50:1a:
e7:71:32:9e:b5:a9:85:15:bd:3d:af:f5:6c:cb:fa:
ab:e2:80:56:71:a4:39:67:96:33:79:4f:bb:65:ed:
3a:21:52:36:ee:c6:4f:0b:ec:ec:2a:e7:20:2a:b2:
b4:c5:92:e5:d5:fb:d2:d0:7d:a0:1d:07:35:9b:cb:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B4:84:32:E7:49:E5:AF:91:C6:B2:B6:52:AE:F2:38:D6:CA:61:E5
X509v3 Authority Key Identifier:
keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/A7SEMudJ5a-RxrK2Uq7yONbKYeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.78.130.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c3:09:80:da:1c:26:74:d8:e6:ae:24:5f:43:15:ff:5c:ec:
e7:61:e8:be:26:c2:ad:04:7c:d4:74:7c:e7:c6:b0:dd:14:98:
41:05:1b:3d:ad:4d:00:e3:21:3c:a2:a1:6b:bb:24:e5:95:2f:
d7:bf:01:95:c5:df:eb:21:76:9f:38:d5:fd:ab:b0:7a:9c:ab:
ab:d3:15:d3:9d:65:8c:fb:11:82:f5:a6:a9:f5:98:ba:1d:e5:
d9:4e:e6:25:fc:b1:26:f4:ec:11:35:87:c7:f9:53:dd:7f:bb:
e0:77:06:2a:c8:6b:24:02:cd:60:7d:6f:1f:5d:f3:0d:99:2a:
52:67:4b:3a:24:12:43:b4:b6:2a:80:f5:a3:96:5f:8b:5a:64:
91:3d:cb:99:58:0e:05:4e:2b:42:8f:57:e5:2d:22:fd:21:b1:
93:f5:9a:4a:9f:1a:62:a2:76:15:e9:a7:7d:e8:f0:bb:78:2a:
a1:88:87:bd:20:67:b7:c1:c3:bd:02:79:ac:ae:a1:c0:55:ea:
85:52:71:85:31:53:55:de:04:7a:03:18:14:2e:40:35:e6:c3:
d3:aa:4e:7a:8f:69:ba:a8:14:f9:37:b8:5d:ad:28:21:63:51:
34:d4:85:1d:20:7e:6a:19:3c:61:82:a4:6d:08:94:72:78:66:
5d:50:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:38:37 2026 by rpki-client