Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7cCwYHdzzuR2CGRNQYcQ2ssar0k.roa
File: 7cCwYHdzzuR2CGRNQYcQ2ssar0k.roa (raw, json)
Hash identifier: ZP7+Gp5oDZ48t3jdUCz1jb0J2XFfocmTMlX3Rzt/XMY=
Subject key identifier: ED:C0:B0:60:77:73:CE:E4:76:08:64:4D:41:87:10:DA:CB:1A:AF:49
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A09E1B0D4FEFD81AAE7D6655F49DD2C1F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7cCwYHdzzuR2CGRNQYcQ2ssar0k.roa
Signing time: Mon 14 Sep 2026 04:09:27 +0000
ROA not before: Mon 14 Sep 2026 04:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 192.124.178.0/24 maxlen: 24
194.87.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:1b:0d:4f:ef:d8:1a:ae:7d:66:55:f4:9d:d2:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 14 04:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edc0b0607773cee47608644d418710dacb1aaf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:3a:93:d0:f8:9b:3f:26:0a:5a:94:bb:61:
b5:44:51:d0:65:96:0b:39:13:72:fb:d8:72:5b:b7:
e3:04:83:fd:ac:6f:f0:e6:f0:10:f7:70:f9:b1:79:
fc:41:31:a9:1c:b5:5c:d4:aa:e5:0c:28:05:9a:65:
5a:ea:63:3e:f1:ae:2d:7b:2e:d4:6b:ef:6a:91:0d:
68:9a:43:3e:d6:72:0a:da:a5:b3:69:da:ca:21:11:
75:ef:b4:60:29:03:c3:2a:19:5e:df:87:1c:2e:e1:
1a:d3:c5:31:51:71:55:43:92:3c:b3:24:02:b2:3d:
cd:47:17:c4:56:21:63:4e:ce:6f:fe:b5:43:b3:b1:
64:ad:ab:41:3d:05:a0:21:5a:57:be:4d:37:c0:38:
7c:00:69:e6:39:bd:ba:b5:f6:c2:58:a0:06:0b:16:
e5:77:07:44:b7:b1:3d:5b:d6:3c:79:38:cb:1e:bb:
bb:65:4b:af:17:33:04:4c:e8:93:10:ad:a7:21:23:
7f:43:dd:af:84:18:7f:e4:99:9c:69:2d:ac:2d:8f:
34:b3:c8:b5:0b:bc:e4:98:d1:c2:b2:96:1f:ee:a2:
ea:c5:98:d5:43:12:6b:7a:d3:fa:f2:b0:5c:8e:d3:
97:6a:15:25:74:0b:13:dc:e5:a6:1c:c3:67:45:74:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C0:B0:60:77:73:CE:E4:76:08:64:4D:41:87:10:DA:CB:1A:AF:49
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7cCwYHdzzuR2CGRNQYcQ2ssar0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
194.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:cb:c3:9a:47:fb:aa:e5:d2:62:bb:08:0b:6a:a5:22:6c:b6:
1f:c9:2c:8e:ed:91:e7:74:f9:c7:8d:eb:e7:2b:36:85:dd:02:
36:b2:fc:e5:46:b4:42:2a:01:a3:a4:3f:e9:80:6a:81:f9:7f:
84:8b:64:3a:49:8c:e2:ee:0c:d3:6e:33:1a:5c:f4:36:dc:54:
3c:74:21:3b:71:ef:18:e6:3d:86:97:eb:96:69:01:1d:a6:f3:
d1:0d:86:1f:60:2c:04:71:ca:b7:f7:dc:86:00:14:1c:b3:55:
1e:29:65:bc:c8:c9:44:4d:37:a0:27:b9:d5:44:4b:7c:d8:e2:
ab:c4:a7:86:17:c7:86:cd:c7:f2:52:bb:cb:bc:46:bd:b3:0d:
93:6c:2c:b9:38:2e:6e:fd:60:a7:d3:90:6b:34:4a:62:f6:e6:
c0:50:9c:a6:32:bc:b5:31:82:54:b7:cc:2a:01:f3:29:48:30:
81:60:2f:b1:86:af:3f:43:e5:9e:fa:de:38:8a:21:56:05:46:
ca:bb:6b:d1:2b:17:5a:29:10:85:04:1f:53:7d:7a:d5:4d:c6:
e6:00:ed:ee:68:d7:92:f8:e5:dd:fa:b2:b2:ee:a4:6f:2b:6b:
e0:a6:62:53:49:a5:8a:03:f6:1f:57:b0:33:90:86:80:0c:d7:
73:9a:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:43 2026 by rpki-client