Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r7o7JPpZzxA4cm5n5ThFdA55tek.roa
File: r7o7JPpZzxA4cm5n5ThFdA55tek.roa (raw, json)
Hash identifier: ZjdS+nGhxZPtvoixfy5DScMli+433OnnrWQF9EQjZUs=
Subject key identifier: AF:BA:3B:24:FA:59:CF:10:38:72:6E:67:E5:38:45:74:0E:79:B5:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0EDD64DAB9A1D41A055BDE9FA416E002A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r7o7JPpZzxA4cm5n5ThFdA55tek.roa
Signing time: Tue 29 Sep 2026 15:43:59 +0000
ROA not before: Tue 29 Sep 2026 15:43:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 193.124.205.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:d6:4d:ab:9a:1d:41:a0:55:bd:e9:fa:41:6e:00:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 29 15:43:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afba3b24fa59cf1038726e67e53845740e79b5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:67:c2:a4:b2:22:6f:6a:33:b3:c7:35:fc:
1b:5a:8d:d1:65:75:90:f5:36:d2:9a:38:92:0c:0c:
99:3a:8e:f1:3a:31:b5:c3:1f:cd:58:96:ef:d7:ba:
2d:7c:29:3e:4b:59:aa:64:d4:7e:8c:76:cf:9c:7f:
59:e1:5d:89:6f:c5:74:62:3a:48:1b:a2:b4:4f:7c:
f9:53:4e:95:42:a5:70:18:d0:8a:46:fe:1d:b6:a6:
e7:bb:a6:2e:86:ee:42:ff:d5:1f:0a:d7:18:b0:1e:
c8:58:51:df:5c:b2:4d:b1:91:89:e9:e9:97:46:de:
32:65:23:bf:fb:23:1e:e6:9d:c5:b1:d6:3b:82:98:
c3:17:dc:e7:c6:57:f9:a3:f2:de:ad:df:97:24:fc:
62:10:5a:65:4c:80:7a:c0:3a:3d:41:f1:54:fd:1f:
53:2a:a2:97:8b:ab:76:ca:68:a3:39:5b:ee:94:69:
42:7d:2b:90:53:f8:ea:4f:19:50:8d:42:1d:20:b2:
bd:1c:36:d7:b5:ca:30:39:cb:de:eb:00:1f:97:6e:
90:1c:01:b6:2c:8e:79:57:67:24:aa:25:39:f4:df:
cf:9e:73:26:47:d8:0d:2b:9a:dc:44:7d:43:8a:71:
c5:71:e6:54:be:ce:17:f7:a0:6a:a6:0f:60:70:19:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BA:3B:24:FA:59:CF:10:38:72:6E:67:E5:38:45:74:0E:79:B5:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/r7o7JPpZzxA4cm5n5ThFdA55tek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.87.6.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9c:5d:d4:ca:98:8b:d2:b1:72:ee:2c:4b:d1:20:5a:1c:d8:
c2:ee:69:c9:89:21:37:06:33:95:ce:c1:86:07:21:73:f2:d6:
8b:b1:cf:14:4c:50:8d:c4:0a:76:68:34:06:d5:5e:34:89:05:
cd:01:d1:b2:bd:12:33:db:bf:bf:84:5a:56:15:a7:db:4d:54:
1a:c9:c6:1c:58:57:b4:76:e0:0e:c7:6e:a5:cc:74:75:a1:d7:
3e:8b:6f:89:14:0e:b7:8a:4b:3f:ed:b7:51:e0:89:91:e8:0d:
49:af:c7:1f:60:97:9c:33:ec:b3:45:ec:8a:7a:cf:e4:51:23:
ad:5c:23:47:5d:43:ac:27:16:ee:1f:69:a7:07:5d:1d:5a:43:
85:54:34:6f:ba:ef:0c:a8:0f:57:8e:b0:39:3b:06:01:25:e8:
c9:86:d5:45:5b:30:33:2a:54:38:cf:2e:83:5d:8d:5e:16:21:
40:66:0e:62:b0:7c:68:f5:c9:e3:2a:72:ac:b3:7a:84:36:1e:
bd:9f:76:6f:10:75:17:73:90:78:90:05:6f:7c:f6:60:8b:58:
14:44:64:87:87:2a:65:40:43:2c:e2:d1:ea:19:7e:7b:f5:64:
82:9e:d4:93:32:b8:08:e2:42:de:c8:25:2a:70:89:f2:da:ee:
33:cb:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:31 2026 by rpki-client