Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/7dSSSkuW8aq6dQKlirCwMKP82TA.roa
File: 7dSSSkuW8aq6dQKlirCwMKP82TA.roa (raw, json)
Hash identifier: rjQpnNOLKIPNmxcB/Sfg/cpNvCaHg3nD/gDd49nmaf8=
Subject key identifier: ED:D4:92:4A:4B:96:F1:AA:BA:75:02:A5:8A:B0:B0:30:A3:FC:D9:30
Certificate issuer: /CN=11e39c58202f5a435d326356c6eb05d9943c3817
Certificate serial: 019F23684526EE318163F2C04DBF21CC448E
Authority key identifier: 11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/7dSSSkuW8aq6dQKlirCwMKP82TA.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31727
IP address blocks: 46.175.50.0/24 maxlen: 24
46.175.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:26:ee:31:81:63:f2:c0:4d:bf:21:cc:44:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e39c58202f5a435d326356c6eb05d9943c3817
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edd4924a4b96f1aaba7502a58ab0b030a3fcd930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:06:b8:7e:51:4f:f0:5c:f7:34:3e:4b:32:
22:4e:ba:97:b2:51:0e:b3:fa:3b:f2:cc:99:af:ef:
e5:4c:32:c2:9b:51:fa:31:b2:a7:3d:b8:d4:0e:ce:
9c:b0:27:9d:97:11:9e:f2:08:e1:2a:6c:fc:30:52:
06:5d:9d:6b:d0:f1:78:cb:c0:0d:5d:fa:a8:02:41:
b7:88:de:9b:11:67:71:b8:48:1c:84:bb:5f:04:07:
cb:18:af:ff:6c:9f:3f:de:46:88:4e:9d:f3:2f:70:
af:65:b3:8c:e5:06:4c:a2:e1:82:ea:da:d3:62:62:
46:49:db:0c:83:9e:4c:11:83:df:90:db:90:0e:9d:
14:33:50:29:47:c3:4e:82:b2:37:65:fc:62:a9:2f:
5f:7c:19:a1:54:f5:95:35:f4:17:ec:a3:53:22:63:
66:74:1d:3d:70:e8:3d:9b:14:a9:2b:ab:a7:3c:43:
89:e1:9c:32:db:c7:96:09:3f:ee:d7:68:6f:53:8b:
8b:86:77:81:60:6b:45:08:e3:76:18:a4:52:ed:20:
fc:9f:60:24:6a:b9:ac:ea:4f:9b:f8:d9:80:77:7f:
ef:92:da:af:19:d5:30:9c:4d:68:c1:cc:b9:e4:c0:
3e:4f:80:6b:81:16:76:14:9c:3d:ed:82:17:82:77:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:92:4A:4B:96:F1:AA:BA:75:02:A5:8A:B0:B0:30:A3:FC:D9:30
X509v3 Authority Key Identifier:
keyid:11:E3:9C:58:20:2F:5A:43:5D:32:63:56:C6:EB:05:D9:94:3C:38:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/7dSSSkuW8aq6dQKlirCwMKP82TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/EeOcWCAvWkNdMmNWxusF2ZQ8OBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.50.0/23
Signature Algorithm: sha256WithRSAEncryption
26:ef:fc:ad:8a:2a:c4:33:6e:3c:22:1b:12:a6:05:bd:70:24:
28:b2:db:7f:50:d6:89:ff:5e:04:82:45:ac:bc:12:18:58:04:
3f:82:f5:1a:65:ec:11:6c:0a:ed:4b:21:33:60:bd:9e:68:27:
aa:89:ce:4e:ab:51:7c:1d:f7:6c:f0:57:c2:14:d1:29:b3:71:
90:0d:c2:2a:b8:cb:eb:8e:93:33:d3:80:23:24:ea:47:e3:fb:
e5:07:71:fb:80:d7:ca:e1:61:06:5b:db:e7:b3:68:39:ef:31:
62:0c:4b:9f:02:13:3e:48:aa:14:5b:30:ae:41:84:0b:25:45:
cc:8f:3e:6c:c4:d9:41:c6:99:c8:8f:68:f4:32:b0:d3:74:01:
9e:6c:6d:fd:f0:a9:8a:c5:6c:28:67:ed:29:98:9c:c6:df:02:
9a:95:78:d9:18:2f:2b:34:f3:92:f8:db:21:d2:ac:60:0d:9f:
19:4a:3d:ca:a3:62:5d:14:8f:6d:1d:77:51:3f:c0:1c:08:81:
86:24:67:ed:35:13:ca:23:af:dc:06:fa:dd:43:b6:21:a0:88:
d4:fe:35:ea:c3:49:38:34:62:f6:10:f7:04:13:b6:7d:ed:68:
f5:ab:e7:5c:77:be:d5:38:2c:3f:aa:39:af:e6:0a:4c:03:7e:
3c:7c:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:59:00 2026 by rpki-client