Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/7ep11URRzlb8xvD8K-ry5mEEgcc.roa
File: 7ep11URRzlb8xvD8K-ry5mEEgcc.roa (raw, json)
Hash identifier: lgNEH8bHyYuS5XP+LbseWrEanDAWFw2xr2vM00xw7a8=
Subject key identifier: ED:EA:75:D5:44:51:CE:56:FC:C6:F0:FC:2B:EA:F2:E6:61:04:81:C7
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A17F1ACE41CB75B5AF55196E3D8EE7464B
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/7ep11URRzlb8xvD8K-ry5mEEgcc.roa
Signing time: Tue 27 Oct 2026 20:43:45 +0000
ROA not before: Tue 27 Oct 2026 20:43:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218276
IP address blocks: 200.96.109.0/24 maxlen: 24
200.96.109.10/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:1a:ce:41:cb:75:b5:af:55:19:6e:3d:8e:e7:46:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 27 20:43:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edea75d54451ce56fcc6f0fc2beaf2e6610481c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:27:75:9c:d8:53:2a:76:b3:9e:91:34:39:
a4:7b:17:d3:9e:f6:a1:26:e9:72:e5:b9:65:1b:01:
af:96:ba:24:df:e2:5f:e1:ba:8e:f8:45:a0:5a:4f:
be:04:16:15:c6:12:66:73:59:b3:46:da:cd:40:e1:
f1:a9:52:28:70:0f:e7:e3:04:cb:90:a9:cb:f9:36:
ae:4b:4d:13:c6:78:31:27:7d:a7:09:31:3d:22:15:
f5:24:66:92:e1:b3:89:2e:45:fb:c8:15:9e:16:57:
f9:77:ac:16:e0:58:42:a9:13:47:94:94:c6:1a:4a:
fd:32:b5:37:cd:64:52:74:74:a3:3b:00:df:d6:d0:
81:8b:ab:6c:5e:d5:7b:1e:e1:96:37:cd:fe:2a:6a:
30:63:b1:5f:2d:ce:33:30:46:10:a5:c5:c8:4d:22:
b4:7b:77:c3:b8:28:fe:9f:06:f7:43:71:19:6c:30:
ad:03:0e:eb:2e:89:b4:95:f7:8f:05:0c:ba:7e:63:
94:37:6a:1d:d8:a5:92:e9:71:47:77:12:02:a8:87:
7b:09:30:74:ce:84:93:72:69:f4:27:38:23:1b:75:
49:4b:79:20:0c:dc:a4:e1:f5:ce:06:3a:08:0b:4a:
08:a2:b7:27:d7:74:11:fa:eb:3b:a2:c6:91:8b:d6:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:75:D5:44:51:CE:56:FC:C6:F0:FC:2B:EA:F2:E6:61:04:81:C7
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/7ep11URRzlb8xvD8K-ry5mEEgcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.96.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:03:fa:b8:f8:44:9b:43:f6:33:6f:7f:96:9b:2a:ff:38:46:
c1:24:0c:56:95:ad:a2:13:50:98:25:d3:62:a4:4c:9c:30:fb:
1b:56:cd:25:92:6d:9d:dc:bb:48:d9:ba:af:82:01:53:d6:1e:
45:d6:11:4f:d8:3e:fe:75:da:2f:ce:d1:f5:f9:52:64:b2:0e:
00:58:71:ae:af:ea:d0:b7:50:ba:06:79:c1:1f:d8:9e:fa:c7:
fb:c7:05:ce:4a:cb:6c:4b:c0:43:6c:0a:dc:e2:23:2f:21:47:
34:9d:a6:25:4b:46:18:62:28:c6:df:9f:c5:e5:1b:84:e8:dc:
cc:b6:7f:44:cc:c2:d8:5a:f6:6a:28:32:c3:2f:09:23:87:21:
a5:c4:a0:47:a2:eb:7e:dd:15:61:de:2c:2e:ac:e0:01:ec:ee:
7d:b1:42:2a:df:18:6f:5f:67:69:f3:52:76:9c:5a:31:01:19:
1d:b5:e3:7e:5c:aa:8c:40:d0:c5:1d:9e:88:23:9f:6e:e8:dd:
3b:d9:0d:38:e8:c1:e5:31:20:35:14:98:c9:44:61:fc:2e:53:
2c:1a:13:0c:b6:08:c2:c8:03:33:65:fd:25:ca:18:43:1e:81:
e9:c7:7a:2e:20:8b:1a:e8:0f:b1:a2:0d:8c:02:30:0f:8c:e6:
21:05:2c:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF/Gs5By3W1r1UZbj2O50ZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0
MjVjYWQwHhcNMjYxMDI3MjA0MzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGVhNzVkNTQ0NTFjZTU2ZmNjNmYwZmMyYmVhZjJlNjYxMDQ4MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1UndZzYUyp2s56RNDmkexfTnvah
July5bllGwGvlrok3+Jf4bqO+EWgWk++BBYVxhJmc1mzRtrNQOHxqVIocA/n4wTL
kKnL+TauS00TxngxJ32nCTE9IhX1JGaS4bOJLkX7yBWeFlf5d6wW4FhCqRNHlJTG
Gkr9MrU3zWRSdHSjOwDf1tCBi6tsXtV7HuGWN83+KmowY7FfLc4zMEYQpcXITSK0
e3fDuCj+nwb3Q3EZbDCtAw7rLom0lfePBQy6fmOUN2od2KWS6XFHdxICqId7CTB0
zoSTcmn0JzgjG3VJS3kgDNyk4fXOBjoIC0oIorcn13QR+us7osaRi9ZpVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3qddVEUc5W/Mbw/Cvq8uZhBIHHMB8GA1UdIwQY
MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt
ZTg3MWIyMTc5MGRlLzEvN2VwMTFVUlJ6bGI4eHZEOEstcnk1bUVFZ2NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl
LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyGBtMA0G
CSqGSIb3DQEBCwUAA4IBAQDVA/q4+ESbQ/Yzb3+Wmyr/OEbBJAxWla2iE1CYJdNi
pEycMPsbVs0lkm2d3LtI2bqvggFT1h5F1hFP2D7+ddovztH1+VJksg4AWHGur+rQ
t1C6BnnBH9ie+sf7xwXOSstsS8BDbArc4iMvIUc0naYlS0YYYijG35/F5RuE6NzM
tn9EzMLYWvZqKDLDLwkjhyGlxKBHout+3RVh3iwurOAB7O59sUIq3xhvX2dp81J2
nFoxARkdteN+XKqMQNDFHZ6II59u6N072Q046MHlMSA1FJjJRGH8LlMsGhMMtgjC
yAMzZf0lyhhDHoHpx3ouIIsa6A+xog2MAjAPjOYhBSy6
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:55 2026 by rpki-client