Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_7ilTEqNksUL6bZLsjnH2mB7vs.roa
File: d_7ilTEqNksUL6bZLsjnH2mB7vs.roa (raw, json)
Hash identifier: VuQoDiTAU95Qrnm1WH3NlyC49l1Du86wak1oMd0SDO4=
Subject key identifier: 77:FE:E2:95:31:2A:36:4B:14:2F:A6:D9:2E:C8:E7:1F:69:81:EE:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A1A09AA340D88242A4D76F5D8895F75D16
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_7ilTEqNksUL6bZLsjnH2mB7vs.roa
Signing time: Tue 03 Nov 2026 08:50:51 +0000
ROA not before: Tue 03 Nov 2026 08:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 45.88.88.0/24 maxlen: 24
83.219.97.0/24 maxlen: 24
87.121.47.0/24 maxlen: 24
87.121.86.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
176.125.254.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:9a:a3:40:d8:82:42:a4:d7:6f:5d:88:95:f7:5d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 08:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77fee295312a364b142fa6d92ec8e71f6981eefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:9d:75:91:ba:44:20:4a:9b:12:9a:e9:c6:
72:e7:b3:f6:3c:20:4e:93:ca:a6:42:fe:37:b0:59:
80:39:b0:01:02:ed:66:ce:91:60:51:93:6d:5e:cf:
94:62:f7:9f:ac:f3:ff:64:e5:75:3c:c0:58:1d:9c:
2e:d9:7b:33:1d:13:00:76:89:2e:53:88:b1:56:d5:
4c:3b:7a:55:a9:da:d1:e6:90:28:bf:bc:f3:1c:4d:
fd:42:cd:b8:eb:20:c5:93:14:61:06:c9:ca:91:1c:
c7:a4:bd:db:fc:0e:24:9a:31:6b:80:d4:1a:b3:7a:
1d:80:87:2b:ba:0f:38:6f:11:e1:cd:35:39:64:46:
ac:ed:31:ef:f5:ee:2b:83:c6:db:fc:13:11:05:3b:
b0:6a:8d:59:1a:93:4c:6e:bb:6b:28:fb:af:e1:90:
0a:f4:cc:d1:04:25:2a:96:7b:aa:f8:68:ef:d6:8c:
c5:95:bd:33:d2:81:e7:d9:00:78:bb:9a:aa:f6:dc:
23:c4:2e:e0:13:62:e5:78:b3:da:d9:31:88:ee:2b:
23:84:54:1e:45:a5:83:32:05:e0:a9:b7:cc:75:f1:
cc:1a:68:dc:d4:19:f5:38:df:12:e9:33:0a:d1:ac:
75:18:0e:5b:ca:ee:4f:58:e7:67:37:d3:18:dd:fb:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:E2:95:31:2A:36:4B:14:2F:A6:D9:2E:C8:E7:1F:69:81:EE:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d_7ilTEqNksUL6bZLsjnH2mB7vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
83.219.97.0/24
87.121.47.0/24
87.121.86.0/24
87.121.221.0/24
176.125.254.0/24
185.252.177.0/24
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ef:85:d8:27:97:9d:4a:a7:8a:41:93:2a:09:8c:32:a4:7a:
51:49:dc:96:e5:49:14:32:86:75:fc:51:cc:25:15:e0:bd:ce:
e1:f5:c9:4d:0e:53:ac:c4:5f:84:f1:72:1c:82:02:c6:57:46:
7c:85:6c:d0:40:88:38:19:8f:fb:bd:cf:e1:61:5d:03:84:9f:
df:71:8f:a2:f8:3c:97:97:d2:50:6f:40:41:ca:15:42:a4:6f:
44:fc:5a:59:ec:a0:17:32:d7:36:a8:48:9d:85:90:e7:01:3f:
e8:5a:2e:76:b7:22:e5:e0:f3:db:82:42:b0:8b:0e:ec:56:3e:
9b:c6:23:ca:53:7d:54:37:f8:63:bf:a3:d2:5d:7b:bf:40:f6:
63:d6:8c:90:e8:ae:64:a7:dd:ba:88:fb:57:0c:cb:dd:66:dd:
76:43:3f:d6:24:b5:5e:76:cb:42:c9:34:34:dd:bf:c0:f8:a6:
e2:45:6b:e9:b9:01:13:af:3c:95:36:07:90:6e:2a:ed:78:ee:
d9:51:fa:3c:bd:44:40:be:5d:44:ca:ea:d4:3b:96:8e:8b:97:
7c:d9:34:a9:a1:f1:23:97:fd:ce:d3:c3:17:90:c2:2f:50:d9:
af:4d:64:53:11:97:64:23:fe:41:df:e3:39:d8:ad:0f:5e:a2:
ce:c1:c5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:37:48 2026 by rpki-client