Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/dt41VRR0PimlyEtWKgjp_m1sl-g.roa
File: dt41VRR0PimlyEtWKgjp_m1sl-g.roa (raw, json)
Hash identifier: 16MrU0DSxLQHXUU2OJhLiN+r8bslnZH9TQbw0Ga0zUI=
Subject key identifier: 76:DE:35:55:14:74:3E:29:A5:C8:4B:56:2A:08:E9:FE:6D:6C:97:E8
Certificate issuer: /CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Certificate serial: 019F236936BFEDED54666CA7E7981A55010C
Authority key identifier: 7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/dt41VRR0PimlyEtWKgjp_m1sl-g.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2386
IP address blocks: 193.38.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:36:bf:ed:ed:54:66:6c:a7:e7:98:1a:55:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76de355514743e29a5c84b562a08e9fe6d6c97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:f7:b8:e0:22:b6:06:dc:b3:51:fa:44:45:
5b:3f:6d:94:13:86:be:4e:ae:7d:04:f0:83:87:03:
62:db:34:fc:e5:5d:f1:0b:8f:ec:2c:00:4b:c3:d6:
d1:80:dc:59:a2:81:83:51:70:79:d5:2f:7e:77:e5:
3a:e4:a2:71:d9:be:b8:cf:ad:45:16:bf:5b:4e:10:
f5:e3:0f:0e:15:72:51:a2:2c:a6:4a:31:0b:75:1f:
61:45:21:f6:b7:5e:c3:1b:66:d2:0f:17:4c:f3:d9:
92:77:ba:bf:28:16:40:2d:f7:28:b8:6d:ca:20:93:
93:ec:43:49:cd:7f:f8:d4:42:7f:e3:e1:51:17:18:
00:93:22:ed:db:eb:8b:31:72:5c:f2:8a:84:1b:7a:
7c:f1:0e:57:ab:60:95:8c:de:f4:eb:35:76:b9:60:
0e:94:bc:9f:4c:e4:53:16:00:68:5d:cb:90:9e:42:
25:49:52:cb:55:b3:f4:75:7b:0c:a4:c0:0e:5e:82:
0f:28:e5:9b:72:8d:ca:62:dd:06:ec:01:78:98:7d:
1f:7f:d4:5d:4e:29:1e:81:e2:ba:09:17:d1:19:cb:
c0:48:2f:c4:d7:d4:81:a9:4f:a6:46:9c:cb:f2:59:
d6:c7:6a:aa:70:91:8c:a5:93:6f:0f:81:f6:47:81:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:35:55:14:74:3E:29:A5:C8:4B:56:2A:08:E9:FE:6D:6C:97:E8
X509v3 Authority Key Identifier:
keyid:7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/dt41VRR0PimlyEtWKgjp_m1sl-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.171.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1f:38:6f:23:66:14:1d:8f:a3:a5:ad:bb:7d:e7:19:6d:68:
0e:90:03:d0:dc:01:bf:e2:ad:82:79:e6:11:be:fc:67:d6:c6:
88:da:23:62:45:73:3f:ab:d7:04:ed:2d:db:6b:2a:63:88:e6:
c9:71:67:a1:29:b2:53:16:ea:98:b0:b4:9c:90:c5:c6:02:d7:
7d:f6:1f:70:42:50:38:e3:7a:66:74:bb:ae:05:81:f9:4f:7c:
ba:95:03:ed:b7:80:9d:26:f5:91:c9:92:83:f8:ba:9f:0e:02:
f2:70:fe:c8:3d:74:61:2c:47:ec:af:2a:f9:ad:cd:ac:f2:83:
4f:60:b4:27:44:54:80:36:6c:b1:f1:7f:db:ab:27:61:ab:36:
4d:0a:d0:5e:0e:2a:0f:f2:1a:74:b6:f5:6c:f3:61:71:2e:11:
63:2b:7b:bd:74:a5:c6:34:80:c3:f1:9f:ad:75:0a:55:1d:f7:
17:4d:af:74:5e:b6:e2:88:86:08:3c:cf:fb:e5:b7:97:01:fb:
0a:e6:1c:35:ad:62:8e:67:81:a4:9c:df:ac:3a:32:4f:4f:f4:
79:d2:33:b0:54:c9:01:5e:d8:c0:63:47:7b:69:0a:2f:14:88:
05:36:5a:01:b5:84:ee:85:c8:7a:f2:a4:2a:5f:20:c2:c7:28:
b9:f1:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:12:49 2026 by rpki-client