Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7NA2LegCljPM-6ilz2F5cnaoBJw.roa
File: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (raw, json)
Hash identifier: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=
Subject key identifier: EC:D0:36:2D:E8:02:96:33:CC:FB:A8:A5:CF:61:79:72:76:A8:04:9C
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01A01AFC28E395A22BFE32FF9558269BC2EC
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7NA2LegCljPM-6ilz2F5cnaoBJw.roa
Signing time: Wed 19 Aug 2026 17:05:28 +0000
ROA not before: Wed 19 Aug 2026 17:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42007
IP address blocks: 5.252.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:fc:28:e3:95:a2:2b:fe:32:ff:95:58:26:9b:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Aug 19 17:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecd0362de8029633ccfba8a5cf61797276a8049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:f6:e8:49:c6:0f:60:25:3b:ff:8d:0f:2d:
32:78:ad:23:d2:42:ce:0c:6d:26:35:72:9f:ad:1a:
ad:fd:73:17:12:7e:ea:2f:ec:44:56:f9:54:9a:9a:
ad:db:0f:dd:a9:25:5e:5e:f5:bd:bc:72:1b:c2:e7:
1a:24:9c:2c:fc:cd:cc:ae:d2:e9:c8:6c:98:7b:65:
c6:99:e9:59:f7:8a:97:00:15:6b:a6:e2:46:1d:49:
6a:39:22:00:58:c9:e5:75:64:4f:44:99:b6:0a:cd:
a8:fa:24:f2:7c:32:49:f8:11:07:af:7a:8e:6b:2f:
81:3a:c3:4d:f6:0a:6f:41:b4:37:36:25:86:60:27:
08:30:22:ae:a3:bd:7b:64:85:f2:87:fe:7c:6a:96:
12:1d:90:c1:1c:1b:77:9f:28:1d:5c:6c:cb:55:28:
46:0d:9c:dc:28:ba:b3:65:23:9f:8f:3e:1c:4b:5a:
51:75:81:15:34:39:54:a4:9c:e3:e2:d0:c1:19:8d:
8f:6a:06:f9:47:9d:73:bf:bf:44:9e:a7:bc:92:bb:
92:59:f3:f8:a7:57:dd:b4:64:ba:db:03:b6:50:c3:
9d:7d:6d:8a:07:56:46:07:59:6f:b4:61:08:88:3d:
11:fc:73:90:c5:d8:39:10:40:a6:76:1a:f1:cd:f0:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D0:36:2D:E8:02:96:33:CC:FB:A8:A5:CF:61:79:72:76:A8:04:9C
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/7NA2LegCljPM-6ilz2F5cnaoBJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.21.0/24
Signature Algorithm: sha256WithRSAEncryption
55:4c:ed:2b:5c:56:02:42:3d:01:ba:e2:16:f1:ab:7a:94:61:
4a:4e:6b:9b:79:ae:1b:38:20:f1:f3:37:24:da:2a:a5:5c:73:
22:b7:7a:dd:1d:53:d1:ae:3c:14:54:ce:16:3f:fa:71:46:f2:
55:90:3c:c0:77:0c:2c:fc:4d:f7:c7:9f:a6:e0:1b:5b:da:70:
1e:9d:5d:a3:10:8a:de:ee:a8:5b:b5:1f:1a:09:36:f1:07:89:
dc:d4:62:05:b9:38:ae:82:a4:0b:56:7e:2b:27:ca:8b:89:27:
31:32:61:5e:93:57:0f:c1:4b:10:1a:d8:0e:30:7b:98:34:71:
8d:12:00:72:44:c9:7d:8c:ee:a0:31:09:c0:4e:12:99:50:f8:
96:c3:76:e6:ed:27:9b:82:eb:8d:2a:1d:b4:43:f5:6b:4a:d5:
0b:93:42:e1:57:9c:81:58:cf:17:29:0a:9d:b1:38:c9:1d:52:
fd:19:de:d1:ed:61:28:00:f0:e4:19:13:35:ff:14:96:d4:7e:
a8:1f:0a:36:b4:35:70:72:ec:e7:e1:9e:5d:14:c7:12:5d:f5:
4f:0c:aa:00:77:d6:37:2b:2d:95:3f:e1:af:2a:61:6a:64:c7:
fc:95:78:67:73:c1:a7:4f:45:09:37:5c:98:b3:07:eb:a1:e2:
d0:77:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:22 2026 by rpki-client