Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa
File: S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa (raw, json)
Hash identifier: mX6+SayjpKMIocVqlVrM4qpi0n+3CKCDO1ooCblBO5Y=
Subject key identifier: 4B:B5:97:2F:E3:71:F4:C9:40:DF:38:38:69:D6:11:2C:FC:6B:A4:1A
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 019F8942F3B18A2C680D4BDE2F2B45575D79
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa
Signing time: Wed 22 Jul 2026 09:58:14 +0000
ROA not before: Wed 22 Jul 2026 09:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219484
IP address blocks: 185.67.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:42:f3:b1:8a:2c:68:0d:4b:de:2f:2b:45:57:5d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Jul 22 09:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bb5972fe371f4c940df383869d6112cfc6ba41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:59:0f:a0:63:6a:9a:66:d9:b7:7b:55:76:
d3:1b:58:45:85:c5:c1:d2:47:a7:7d:1b:5d:8f:2e:
13:ea:ff:1c:74:29:b5:25:e1:0f:19:22:cb:b8:52:
94:9c:3b:75:12:f0:b4:eb:d5:e0:dd:b7:fb:95:d2:
c1:d4:c4:52:a4:24:39:17:cf:e0:05:ed:ab:4f:35:
9c:ed:aa:78:d5:b7:4e:a0:ee:da:3b:93:f9:59:e4:
27:32:68:b6:ed:4a:9f:e4:c9:b4:9d:96:67:cf:8c:
15:6c:cf:99:cb:d3:16:b1:6b:8c:54:2e:7f:f2:dd:
c0:22:4e:df:36:6d:4d:46:68:fd:6d:6a:3b:16:7e:
36:87:46:d5:24:22:29:5b:21:7a:62:e2:41:2c:5a:
90:c4:1e:ab:41:b2:f0:36:9b:3c:4b:40:0c:1b:82:
0d:90:43:f8:ac:8f:99:e5:46:c3:e7:60:b9:00:31:
ce:c7:c9:55:97:e9:22:cf:c1:4c:4f:2f:36:07:a5:
bb:ce:c0:9c:7d:4c:f9:73:cd:d7:60:ee:0a:06:6a:
db:b2:44:d8:bf:31:40:de:24:6b:54:89:40:81:28:
96:ba:a2:8b:fc:f1:d1:9b:8e:2e:0c:e6:e7:69:fe:
72:be:d1:86:1e:97:e0:75:d0:de:3b:df:27:88:2e:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B5:97:2F:E3:71:F4:C9:40:DF:38:38:69:D6:11:2C:FC:6B:A4:1A
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/S7WXL-Nx9MlA3zg4adYRLPxrpBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.21.0/24
Signature Algorithm: sha256WithRSAEncryption
61:3f:08:fc:a4:e3:9a:51:15:52:56:59:7a:8d:0f:0f:17:5e:
bf:7d:7c:2b:4d:0f:35:fe:83:9b:6b:6e:e7:7c:ce:50:2c:f4:
c3:56:52:78:55:6e:e4:c0:be:2a:03:83:39:38:02:eb:96:7e:
f3:44:6e:ed:43:7b:27:29:3b:8b:3a:0f:60:87:af:e6:ec:b6:
5a:e7:88:1e:db:f3:cd:1d:33:c1:47:8a:26:8a:dd:79:ca:2e:
f2:0a:19:40:6c:c6:7e:a4:4a:e3:7e:d4:a2:fb:fd:a0:42:38:
b6:61:73:4c:70:c5:00:ef:4b:5c:e6:2f:b9:73:00:26:fb:b7:
21:be:8c:e5:46:0f:f1:f3:61:a4:74:a3:9d:9b:13:6d:b6:e0:
dc:9b:1b:33:4d:63:db:d1:cb:8d:9e:2b:a3:b3:5a:d8:3b:4e:
e4:7d:29:3a:a3:2f:40:3f:15:f4:44:63:28:6b:0e:35:d9:0e:
22:07:5d:54:e3:49:ea:f9:0f:9c:b3:e2:50:dc:44:73:6c:0d:
b2:b5:2c:32:ce:54:a6:df:b9:4e:2c:bd:4b:4d:49:c0:03:7c:
08:ba:9a:5b:59:89:ab:af:21:30:02:4a:a6:e3:e9:0b:cc:f7:
97:f5:06:84:18:82:7f:0e:d4:f9:7e:e3:88:d1:3c:0e:ab:0b:
37:14:c6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:50:48 2026 by rpki-client