Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u1Ah7dJdG8Qr0BnnFbDW_NVsc1U.roa
File: u1Ah7dJdG8Qr0BnnFbDW_NVsc1U.roa (raw, json)
Hash identifier: 2jPTYcQAOQnurunuXEb9Nqci6kRKxB7OygCQ/PLa+ME=
Subject key identifier: BB:50:21:ED:D2:5D:1B:C4:2B:D0:19:E7:15:B0:D6:FC:D5:6C:73:55
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F64A46968EAFE6062C07FC7505B244B20
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u1Ah7dJdG8Qr0BnnFbDW_NVsc1U.roa
Signing time: Wed 15 Jul 2026 07:18:44 +0000
ROA not before: Wed 15 Jul 2026 07:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219227
IP address blocks: 153.76.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:a4:69:68:ea:fe:60:62:c0:7f:c7:50:5b:24:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 15 07:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb5021edd25d1bc42bd019e715b0d6fcd56c7355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:a8:04:f7:a0:33:87:b0:6f:f2:f2:d3:e7:
b1:4c:8d:51:96:0a:24:53:a1:42:08:f1:11:cb:e4:
de:81:a3:ce:9b:71:c4:ca:e5:83:9e:4b:ad:d7:c5:
d1:09:2c:ab:16:72:d9:44:6a:52:0b:40:db:3b:74:
81:57:32:47:9a:34:1c:fe:3d:46:26:9d:cd:2a:52:
bf:79:34:94:c8:13:80:d0:ec:4b:dd:f9:47:12:22:
87:b8:a2:99:5a:bf:15:c9:23:04:cb:73:f6:39:5e:
84:98:62:c7:d7:58:9e:e3:5c:ac:c5:3f:de:d4:b8:
3f:d8:2b:9f:fa:53:6a:9b:9d:d1:d7:53:f7:bf:1b:
ce:7b:40:a5:3e:04:16:1f:8f:d2:0a:e4:98:ac:fb:
ba:49:75:f0:db:65:6d:6b:1e:d6:43:8e:cf:23:14:
62:82:a1:6a:d8:39:b4:8b:c9:a0:11:87:76:9f:f5:
9a:53:46:c2:8e:c7:f3:14:c1:dd:fd:db:37:a0:ca:
36:49:b9:b3:60:b1:59:c1:7b:50:cf:8a:7a:20:96:
d6:bb:ba:50:d3:d1:e3:7a:9b:b5:5d:7d:46:d1:5a:
f9:43:54:32:79:ac:dc:89:8f:7c:08:af:7f:cb:93:
cf:e2:a1:df:a6:d4:e4:26:e6:53:a2:0a:77:79:d9:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:21:ED:D2:5D:1B:C4:2B:D0:19:E7:15:B0:D6:FC:D5:6C:73:55
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/u1Ah7dJdG8Qr0BnnFbDW_NVsc1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.193.0/24
Signature Algorithm: sha256WithRSAEncryption
72:35:43:de:a6:f7:80:8e:a6:31:0c:7c:61:cb:5b:8f:09:b6:
42:a6:c9:fa:33:9a:c9:e2:24:31:e3:71:92:90:e3:79:e4:c4:
b6:2d:9c:f8:ce:dc:67:74:cc:59:cf:b7:ca:65:71:46:d0:88:
9a:54:9c:0c:3a:7c:4f:be:46:d8:05:2a:53:18:d0:f1:0d:4f:
ca:b6:25:80:37:32:fd:bf:b4:17:44:cf:3b:bc:b4:bc:cf:e5:
65:ce:4d:15:db:4b:ee:b9:ca:9c:be:5a:42:3d:8f:fb:20:0b:
c2:71:d1:22:b6:f6:d1:f3:c4:45:1d:51:92:93:c2:6e:76:57:
78:e5:d4:ac:fe:ef:a4:57:d3:19:63:2b:60:81:cb:ff:5a:89:
5b:a3:78:52:60:65:a3:34:7f:86:16:0a:84:c2:7e:47:36:e1:
8d:97:7e:0f:a1:3b:03:88:94:b3:cd:e1:66:5e:06:21:f4:0b:
2d:d7:ee:a5:3e:be:46:58:f5:55:f0:24:16:10:9c:82:08:9a:
54:51:d9:32:da:93:23:da:9b:73:05:58:d9:fa:c0:2f:4a:8d:
91:9a:63:de:e2:0e:e8:a1:3d:75:d3:8e:f6:cf:1f:82:94:0e:
77:bc:ae:e9:2e:85:f8:43:9f:01:3e:c9:f1:90:a0:cf:08:18:
44:b1:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:27 2026 by rpki-client