Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/P7WwGvvwFXmh4fABYUJ_msVvLKE.roa
File: P7WwGvvwFXmh4fABYUJ_msVvLKE.roa (raw, json)
Hash identifier: kL4yU4YOV5dM2KF8KvUrRfIMnadarcJ9PnrgsHV1qjQ=
Subject key identifier: 3F:B5:B0:1A:FB:F0:15:79:A1:E1:F0:01:61:42:7F:9A:C5:6F:2C:A1
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D46D1F42B90FA46169EE31A3EF6779257
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/P7WwGvvwFXmh4fABYUJ_msVvLKE.roa
Signing time: Wed 01 Apr 2026 02:14:17 +0000
ROA not before: Wed 01 Apr 2026 02:14:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 192.144.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:46:d1:f4:2b:90:fa:46:16:9e:e3:1a:3e:f6:77:92:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 1 02:14:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fb5b01afbf01579a1e1f00161427f9ac56f2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:c0:02:34:f9:c9:3d:bb:3f:5a:ce:96:80:
ad:29:33:1d:51:80:a2:b0:a2:87:6c:c9:9f:e0:b6:
a7:6b:96:e3:2c:3e:95:78:b6:9c:bc:c3:e9:3c:c4:
fd:5b:2b:08:cf:1c:8c:87:7f:56:71:9a:7d:aa:5e:
67:13:d8:17:d9:8c:55:f1:a8:15:cd:19:42:0f:31:
31:cb:eb:37:70:9e:96:cf:84:3c:54:5f:54:4c:3f:
a6:82:95:23:ce:67:80:34:e3:b5:76:11:4a:77:1c:
0b:94:77:4b:55:d0:a7:32:cc:02:cf:d0:a8:3b:f9:
f6:95:02:e1:87:84:a6:13:a1:b9:ec:46:d8:ed:87:
36:51:1d:9f:5d:3a:0c:70:56:e6:59:f3:3d:41:58:
e5:6b:0f:ba:91:ef:66:6f:af:ff:07:8d:8c:53:52:
79:71:c7:3f:ab:a1:96:86:12:05:4a:43:7b:5a:0e:
76:2d:ab:61:2e:ae:f7:8d:d7:92:24:00:cc:05:e6:
cc:70:d3:03:a3:33:d1:b3:70:58:a0:7a:65:10:f1:
0d:4c:2e:06:d3:4f:fb:b4:da:39:32:83:5c:58:53:
37:4d:14:71:23:ef:4b:b1:8c:1d:d1:57:81:1d:72:
e8:08:57:bb:ec:f6:d7:39:9f:1e:1c:a7:b5:cb:9d:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:B0:1A:FB:F0:15:79:A1:E1:F0:01:61:42:7F:9A:C5:6F:2C:A1
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/P7WwGvvwFXmh4fABYUJ_msVvLKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.78.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a9:ea:7f:ca:32:82:12:b1:b8:57:f4:81:47:80:77:29:d1:
ce:8b:9f:b7:19:5b:6d:68:60:57:11:eb:78:30:a1:ad:e2:2e:
4f:ae:b4:c7:78:7e:7d:02:18:37:eb:05:bc:7e:a8:5e:fd:27:
7a:23:19:60:2a:8e:e8:a7:57:0d:11:0b:e6:3e:34:96:9d:6f:
84:9d:0c:c3:87:7e:13:1e:5b:03:1f:a8:4f:fa:31:97:7e:a1:
44:99:cb:72:8b:03:29:96:74:a7:70:22:29:e1:35:33:15:a8:
e2:14:8c:fa:a7:e9:ee:d4:bb:6f:5f:6e:ef:6a:50:48:80:02:
00:5d:99:b0:51:bb:6c:2f:64:2f:46:9a:78:7d:0c:7c:4c:e1:
72:db:fe:1b:8b:87:18:04:67:95:62:53:a6:75:1b:45:88:c5:
8b:bd:36:77:26:2b:78:e0:6f:15:9d:a6:c0:81:fb:d5:23:50:
d7:96:87:10:15:7e:54:32:c7:85:85:f6:81:06:a5:3c:74:cc:
ae:eb:88:f6:a0:b5:94:6c:6f:ec:78:b1:eb:48:16:b2:48:d8:
c2:34:7a:7c:db:c1:f9:89:61:db:68:09:27:b8:52:3c:f3:5c:
0d:b6:7b:cc:d5:eb:40:43:ae:93:7d:5f:ce:84:0f:61:bd:20:
e0:4b:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:03 2026 by rpki-client