Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/7boJT0nuElkdZvUtVY1uM9FDXLw.roa
File: 7boJT0nuElkdZvUtVY1uM9FDXLw.roa (raw, json)
Hash identifier: +v4R3QQYqLg7mY1n3ak0UrRVoJyVuf0Wn/D/5q5sqHY=
Subject key identifier: ED:BA:09:4F:49:EE:12:59:1D:66:F5:2D:55:8D:6E:33:D1:43:5C:BC
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 019F2368A6080676FDDFB46F1AE0B22FC910
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/7boJT0nuElkdZvUtVY1uM9FDXLw.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202856
IP address blocks: 62.218.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:08:06:76:fd:df:b4:6f:1a:e0:b2:2f:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edba094f49ee12591d66f52d558d6e33d1435cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:50:c4:6f:39:c0:c3:61:89:66:78:20:f9:
0a:cd:43:a1:ca:89:f1:5d:f4:72:60:2d:77:d6:6a:
3a:d9:83:9d:10:65:31:cf:76:92:a4:35:5f:51:d2:
8a:f9:00:de:3d:07:74:97:56:58:53:00:db:d2:7d:
26:d8:4c:a7:a3:c5:4b:f9:10:12:43:0a:e5:6e:06:
0f:f2:ee:8a:b0:3c:6b:e3:5f:e1:b8:df:27:1d:da:
f9:dd:8c:32:c8:ef:fc:8e:4e:8a:d4:dd:14:93:94:
8a:6f:f6:38:58:b7:ae:37:94:85:a6:66:4e:eb:39:
6d:c1:84:16:5d:3d:ef:96:f7:75:78:fb:16:36:53:
01:82:5f:6a:86:09:b8:be:02:fc:11:91:cb:58:ec:
96:13:d2:bf:2d:24:ca:9e:54:1c:b0:c1:cc:fe:91:
96:cb:08:6a:d6:99:e5:0e:a0:f4:d5:4a:ce:1d:36:
a7:97:f0:c8:50:98:17:8a:a0:71:13:56:86:4f:da:
34:b8:a5:d7:04:7f:f7:5f:0d:d1:4e:90:f5:35:b2:
70:3f:34:77:6f:b5:2e:dc:b6:79:7c:3b:d0:2a:d4:
45:35:25:55:76:1b:58:59:8b:50:ea:e6:c2:60:4a:
2d:5b:89:5f:d0:03:4c:fc:ad:3e:f9:2c:b1:af:46:
2f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:09:4F:49:EE:12:59:1D:66:F5:2D:55:8D:6E:33:D1:43:5C:BC
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/7boJT0nuElkdZvUtVY1uM9FDXLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.218.173.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:13:09:d2:eb:46:91:98:0b:b0:31:9c:e5:df:d7:bc:d2:d6:
46:a9:7f:d4:9f:8b:af:5c:c3:c6:1f:f3:18:6b:5b:52:15:85:
27:70:4f:c2:ac:7d:c4:91:db:ca:78:78:41:88:6c:2e:b3:40:
df:d1:3f:03:b7:e7:7e:1b:fa:e4:ca:c1:6e:10:26:94:45:ca:
9c:18:43:f1:1b:a2:8c:30:01:15:7d:7b:b6:bc:ef:79:9c:a5:
57:97:f6:f4:62:0e:04:86:b4:f1:cb:e5:c0:5c:bb:37:c0:e5:
66:d1:ea:4f:0d:aa:95:c7:e1:98:e2:92:88:62:31:ec:3f:47:
d9:8d:4f:f0:5b:6d:3e:79:06:d1:eb:9e:1e:83:b1:4f:f8:45:
2f:ea:70:f1:d3:02:b3:00:c2:d0:9d:af:f0:73:1b:86:ee:b9:
62:37:dc:a1:d9:44:8c:56:ab:46:fc:59:2b:f1:5a:cc:41:8b:
89:41:58:1a:5d:14:29:42:04:c5:69:fa:70:56:c1:57:9c:97:
8c:c6:e7:c1:1a:b0:ea:fd:3c:59:f6:78:27:a9:04:3b:d4:c8:
5a:56:dc:37:14:31:99:cf:6a:2b:4f:e6:04:1d:d1:3b:a1:14:
b6:f7:0e:49:a5:0e:45:c6:02:67:a4:9f:2a:1c:2f:e4:37:5c:
e2:f1:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:41 2026 by rpki-client