Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7-oT0AkSh3pG6EhZ9rNvss7aH3U.roa
File: 7-oT0AkSh3pG6EhZ9rNvss7aH3U.roa (raw, json)
Hash identifier: cdPmFAv0nM43yTJZJ31SNuMyR8udSPe9a/EWFqSoOcs=
Subject key identifier: EF:EA:13:D0:09:12:87:7A:46:E8:48:59:F6:B3:6F:B2:CE:DA:1F:75
Certificate issuer: /CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Certificate serial: 019F64B6B62A0D60E54A4482C34AF9665F7D
Authority key identifier: ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7-oT0AkSh3pG6EhZ9rNvss7aH3U.roa
Signing time: Wed 15 Jul 2026 07:38:43 +0000
ROA not before: Wed 15 Jul 2026 07:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48075
IP address blocks: 149.134.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:b6:b6:2a:0d:60:e5:4a:44:82:c3:4a:f9:66:5f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed12b5f335fb92e8c32970c44616e01eaf239ab0
Validity
Not Before: Jul 15 07:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efea13d00912877a46e84859f6b36fb2ceda1f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:70:65:86:48:51:26:97:1d:fc:0f:af:0c:
83:1b:22:e6:39:48:80:28:f9:12:f3:5c:98:44:5d:
f5:c0:22:27:0d:23:41:c3:2e:2a:e9:3d:95:f5:41:
64:01:85:16:c0:d2:cd:d7:38:fb:0a:ba:de:5d:7e:
e6:cb:97:04:55:9f:7e:c7:2a:90:32:93:f2:b5:30:
59:59:77:18:b5:48:a7:b5:87:d0:94:cd:db:ca:9f:
4a:e4:96:8a:91:50:ee:a8:eb:14:12:b4:49:08:4a:
47:35:e0:cf:f9:bc:f7:cf:f0:56:14:4a:b3:aa:e2:
c1:29:1f:f6:76:b9:db:08:e6:35:6b:78:91:44:77:
ad:af:da:e4:d2:0e:dc:97:34:31:60:9d:ba:60:a2:
c8:7b:74:14:cd:75:4f:1f:1f:20:62:28:ca:8d:c7:
5f:25:5d:96:2c:b9:1e:8e:c3:11:21:74:f2:7b:ac:
b3:25:c1:56:af:27:0c:fa:99:c4:2b:f3:9f:4d:4c:
f4:fb:6f:f5:08:01:87:ae:b1:10:43:0a:f8:e7:c3:
96:74:b0:1d:55:f1:3a:7a:6c:a8:ae:79:28:51:49:
57:15:54:90:a7:2a:f0:dd:ba:6e:4a:31:e9:4b:48:
0f:a1:f0:ff:2c:93:45:c7:b3:55:cc:b6:cb:25:64:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EA:13:D0:09:12:87:7A:46:E8:48:59:F6:B3:6F:B2:CE:DA:1F:75
X509v3 Authority Key Identifier:
keyid:ED:12:B5:F3:35:FB:92:E8:C3:29:70:C4:46:16:E0:1E:AF:23:9A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7RK18zX7kujDKXDERhbgHq8jmrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7-oT0AkSh3pG6EhZ9rNvss7aH3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/baadc3-c57c-403c-a4de-54b08f27aa77/1/7RK18zX7kujDKXDERhbgHq8jmrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.134.176.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9d:88:1b:3c:af:60:ad:f5:07:3c:ff:1b:33:df:24:e9:c6:
5f:78:d0:21:5b:09:fd:4a:6c:c5:eb:40:66:f6:53:d7:9b:90:
64:02:46:2b:3e:b2:1e:f3:f9:d7:41:94:4f:f1:96:90:55:e1:
db:64:1d:3e:b5:f6:f9:d4:a4:d0:a7:5c:9c:30:00:52:82:73:
87:14:b4:6e:ea:e8:32:97:0b:97:42:58:f4:cc:6e:fe:e4:56:
fb:e5:6c:cd:dc:15:c8:48:6d:1f:b3:3e:e0:57:4a:8e:17:cd:
c5:23:d9:71:ba:95:ef:ba:11:8d:12:bc:8e:00:73:66:eb:16:
ad:bb:f6:53:8e:24:0b:2e:74:c1:ae:46:8b:07:c9:67:40:68:
64:f6:3a:f5:53:2c:07:29:42:ab:e6:18:51:0e:89:3b:3d:b3:
19:ed:94:3f:42:c6:11:4f:44:f7:ec:86:12:82:98:38:fa:7e:
df:aa:91:57:47:e6:b6:c8:0f:d6:db:46:c2:89:a4:17:85:1f:
47:56:5c:f3:ed:1d:a7:8a:ad:b6:12:95:3e:e7:b0:4d:19:a2:
f4:25:cd:0d:92:f0:5d:77:60:e2:6c:4a:4e:7a:e0:af:64:c4:
79:ee:18:c5:25:9d:df:d6:e0:31:56:d8:d0:ef:b4:70:b8:0d:
27:06:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:36:52 2026 by rpki-client