Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa
File: ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa (raw, json)
Hash identifier: R2oha/fcFPb0epOdgrfmn0UI+snTa7+8DEeVd1/ufjk=
Subject key identifier: 91:AE:D6:F5:49:F3:8D:4B:5F:6D:32:E1:BF:82:F9:49:74:96:B8:6F
Certificate issuer: /CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Certificate serial: 019F2369378146337F87200FE1EF83DF8E29
Authority key identifier: 7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 193.38.178.0/24 maxlen: 24
193.38.179.0/24 maxlen: 24
193.38.180.0/24 maxlen: 24
193.38.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:37:81:46:33:7f:87:20:0f:e1:ef:83:df:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91aed6f549f38d4b5f6d32e1bf82f9497496b86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cd:3a:b9:17:ea:30:43:03:b2:e4:ba:19:b0:
2f:fd:36:0f:53:09:d0:ff:aa:42:10:bb:30:81:a9:
94:3d:f9:d3:e4:69:3e:2c:b7:c9:d4:54:4a:e8:00:
0d:20:2a:a6:01:f9:5b:88:9f:b8:61:fd:d4:95:0e:
a9:ce:6d:fa:6d:78:e0:5d:b2:24:a2:7e:35:ab:9b:
0a:95:0d:c5:74:7f:1f:23:44:8b:68:87:38:8f:e1:
99:5a:aa:bc:3a:84:3b:d6:16:57:0a:e0:6b:77:3b:
1b:e2:5d:dc:4c:8e:97:3c:b9:d1:84:40:2e:01:2d:
a2:26:a7:61:36:cf:63:65:9e:c0:67:ca:ca:10:c2:
ee:50:a8:11:e8:31:40:eb:96:04:3f:35:87:13:24:
30:15:50:e7:4e:44:fb:f7:59:46:de:29:02:cc:fb:
81:54:28:74:58:26:55:64:ae:ee:d8:d5:a5:c8:af:
b7:b9:dd:49:d9:89:85:33:3c:9c:d9:21:e4:90:48:
86:05:bd:e8:47:45:76:9c:60:fe:fc:26:fa:6c:4f:
92:2f:4b:ea:3b:96:a1:29:2b:0d:e7:6e:4a:67:68:
3d:72:c1:8a:45:8d:a9:42:a7:e0:a1:94:45:70:2f:
32:de:77:ef:82:2d:06:05:2b:c8:6c:c6:8d:b5:2f:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AE:D6:F5:49:F3:8D:4B:5F:6D:32:E1:BF:82:F9:49:74:96:B8:6F
X509v3 Authority Key Identifier:
keyid:7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.178.0-193.38.181.255
Signature Algorithm: sha256WithRSAEncryption
91:dc:16:d9:3a:c9:88:36:e5:03:4f:18:71:b7:9d:8b:9b:38:
74:9b:db:e7:fb:64:53:de:a8:c7:84:9a:50:db:6b:30:de:a1:
70:ed:b7:5f:d9:f6:af:df:41:7e:19:7c:2b:c2:f1:8f:4f:87:
88:0f:fb:d0:b8:99:52:79:32:b3:2b:f7:42:84:1c:33:b3:42:
89:f8:2c:67:0e:f2:f9:28:80:86:4d:83:db:e0:49:23:b1:7d:
a9:ab:5c:e1:4e:39:fa:38:91:6f:ff:76:bb:8c:2c:85:60:1d:
d9:e9:ea:2d:ce:39:cc:c3:08:17:8a:11:bb:0d:f0:f8:08:ff:
67:2e:ce:53:32:27:2b:22:e8:fd:a8:1f:dc:27:f0:77:be:e0:
58:7f:01:cf:13:fa:9a:89:75:b4:cc:5d:3d:fd:17:f7:5f:75:
50:cb:76:cc:4a:47:99:34:40:6c:f7:00:bd:be:80:53:28:36:
d8:b0:76:92:bc:ce:ee:59:c4:94:90:41:24:5f:8c:06:3b:1b:
18:5a:5e:51:d4:04:47:63:6d:9e:17:19:e2:9c:46:28:40:92:
e5:73:cb:e8:1c:0b:c6:0b:08:07:92:90:73:0f:11:cd:74:9e:
28:ad:a9:a3:a4:47:3d:4e:93:88:b4:9a:60:61:2c:22:80:ce:
81:e4:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:14:57 2026 by rpki-client