Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7vOvtQY5StvIiXtpSSoufGOkN5A.roa
File: 7vOvtQY5StvIiXtpSSoufGOkN5A.roa (raw, json)
Hash identifier: iq0PuXHcQRmTVg0M5HcFdcw2g1XWeBWxIVmGQgybLZ8=
Subject key identifier: EE:F3:AF:B5:06:39:4A:DB:C8:89:7B:69:49:2A:2E:7C:63:A4:37:90
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019DCDFC7636F97D32EF6E876837643D2A91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7vOvtQY5StvIiXtpSSoufGOkN5A.roa
Signing time: Mon 27 Apr 2026 08:09:27 +0000
ROA not before: Mon 27 Apr 2026 08:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 45.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:fc:76:36:f9:7d:32:ef:6e:87:68:37:64:3d:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 08:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef3afb506394adbc8897b69492a2e7c63a43790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:7f:4a:75:ec:74:56:8d:5d:27:6b:7a:5a:
fd:69:ff:a7:c0:e9:cb:f3:71:f4:20:fe:6b:4a:97:
10:7f:fb:e5:db:ab:ba:71:70:6a:4e:fd:b8:45:44:
2d:8e:72:e1:b5:8c:db:ec:b8:64:dc:d9:05:f5:26:
5a:ef:4c:1a:cb:59:2c:8d:74:22:9c:30:35:dd:9d:
40:be:22:86:9f:29:70:41:77:28:76:90:ea:6a:54:
ef:de:79:ff:a8:4d:a3:ec:e1:b1:90:af:0a:40:77:
b0:87:51:9b:35:2d:e8:5f:65:a7:f6:e8:dc:a3:79:
9a:2e:de:66:12:d8:a1:89:85:83:72:8c:d8:50:fc:
4c:81:a3:e4:ad:49:63:aa:2d:9a:93:ec:01:9b:51:
95:5a:29:dc:a5:8e:0f:1b:8d:be:f0:ae:1b:40:20:
0b:05:22:d7:d7:bc:82:77:8a:a7:04:cf:3f:c0:9d:
51:7b:b7:20:3e:5a:75:86:78:fc:bf:af:78:c2:b9:
0d:e2:f6:65:c9:56:7c:49:11:1e:01:56:55:dc:df:
d4:50:16:79:41:85:28:64:fa:ec:9c:a4:cb:2b:f3:
f8:12:70:4a:9c:e4:70:a6:ec:a8:33:ae:3a:5b:98:
24:e4:1d:98:c1:6b:6c:20:72:1b:3e:73:dc:8c:a1:
80:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:AF:B5:06:39:4A:DB:C8:89:7B:69:49:2A:2E:7C:63:A4:37:90
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7vOvtQY5StvIiXtpSSoufGOkN5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:25:dd:3d:9f:6d:03:ff:50:e7:60:ec:49:d4:b6:c7:b4:35:
0a:87:5b:cc:06:42:1a:36:65:0b:59:c8:c9:d0:ab:89:39:bd:
60:67:5d:9d:ba:0b:c2:ba:d6:ad:c1:f9:da:59:40:ba:cc:ac:
a2:86:ba:ff:e7:94:67:fd:44:78:76:8c:80:8b:c1:e0:1f:8a:
6f:a9:cb:e8:59:2a:42:af:05:4a:a3:1b:60:fd:06:e6:2c:96:
87:34:f0:9e:d3:65:ad:3d:31:7c:45:38:af:d3:85:75:ef:2b:
16:4c:e4:65:0d:c6:3b:d1:03:84:44:a4:2f:28:78:cc:19:ac:
78:29:b0:1e:f6:c4:fc:4b:d1:c8:6d:d1:5f:f6:51:0e:48:08:
03:56:e6:89:38:9f:bd:60:bd:8f:64:6d:77:10:0c:1f:92:41:
36:9e:1d:67:31:49:45:e6:09:ce:c0:32:d4:6a:9b:57:34:5f:
eb:16:59:c3:e6:f8:e5:51:8c:09:a2:25:c9:9b:b2:f8:95:50:
a7:6b:0f:bf:ca:1a:3f:77:13:41:68:11:56:13:d9:1d:63:89:
b2:93:c9:78:6d:4f:31:e3:a9:13:72:f4:cf:83:75:15:c8:18:
16:76:b4:b0:1c:6d:c3:57:3f:47:fa:27:32:13:54:47:66:02:
f9:a0:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:44:33 2026 by rpki-client