Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/7zfCWc4upk4I1bVehHqZGnWy1os.roa
File: 7zfCWc4upk4I1bVehHqZGnWy1os.roa (raw, json)
Hash identifier: l+ilzCvhNRDq+ZNJl9rnuS+EDBpnu5QWN9g3kv0E4XM=
Subject key identifier: EF:37:C2:59:CE:2E:A6:4E:08:D5:B5:5E:84:7A:99:1A:75:B2:D6:8B
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A0D453C3F4F96482148A9690F7C937F4A1
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/7zfCWc4upk4I1bVehHqZGnWy1os.roa
Signing time: Thu 24 Sep 2026 16:50:54 +0000
ROA not before: Thu 24 Sep 2026 16:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 45.143.96.0/24 maxlen: 24
185.148.243.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:53:c3:f4:f9:64:82:14:8a:96:90:f7:c9:37:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 24 16:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef37c259ce2ea64e08d5b55e847a991a75b2d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:a2:29:ae:c3:0a:2c:97:2d:ec:c3:68:fb:
59:2b:ed:47:5e:22:ff:f7:5a:42:2e:7d:c3:bf:e3:
b1:49:f7:5a:80:8f:17:65:25:ce:49:3b:73:cb:02:
a7:36:e6:1d:e5:c4:42:a5:71:a3:af:b4:89:b6:f5:
26:97:96:a1:ec:a0:a2:bb:b6:35:c0:43:cb:bf:e2:
27:8b:c8:f3:cd:15:55:27:f8:b1:e2:88:1f:a6:87:
47:67:0c:68:27:5e:46:b6:b8:4a:e5:eb:5e:01:04:
b7:52:4f:fc:20:0d:04:78:f2:2c:80:fa:cf:d3:f5:
c5:25:be:fe:ca:29:ba:de:9c:dc:d1:8b:75:5f:30:
5a:91:c2:58:21:67:eb:ba:72:a3:a8:ff:d9:1b:14:
92:1b:b8:92:17:69:ab:16:d7:5d:20:de:94:99:96:
12:a1:17:90:95:bf:ec:85:4f:b5:f9:21:b8:73:2e:
d0:c5:06:1a:e0:82:17:13:be:06:ff:32:ed:70:47:
2d:2d:b4:81:10:18:5b:c3:b2:b6:3a:d0:7a:2a:07:
90:18:fc:cf:de:11:ba:aa:9c:6e:87:fc:fe:a8:f7:
0e:68:7b:e9:be:b2:d0:ba:43:9d:36:42:d2:c9:0d:
a4:51:e2:cf:d8:9c:f1:1f:b2:c7:f7:ed:4d:d8:44:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:C2:59:CE:2E:A6:4E:08:D5:B5:5E:84:7A:99:1A:75:B2:D6:8B
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/7zfCWc4upk4I1bVehHqZGnWy1os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.96.0/24
185.148.243.0/24
185.169.183.0/24
185.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dc:98:16:7e:99:16:d9:ce:29:16:3e:15:e5:4b:f2:d0:43:
9a:96:87:40:38:d3:00:6a:e3:8d:54:09:1c:71:c3:db:1f:60:
a6:de:98:98:10:08:79:0c:a2:88:70:db:2d:80:0a:95:d1:91:
3e:ff:d9:b2:97:11:6e:40:34:b2:2a:bc:cb:51:11:de:db:b7:
7d:9e:8f:01:c9:db:fa:22:62:37:90:19:7a:dc:ce:b7:d2:ae:
6e:ae:15:be:0e:21:86:86:b1:b8:bf:e7:60:de:47:8f:9a:fe:
c9:02:b1:71:ad:f4:f9:7a:9a:fc:98:df:9c:60:77:d8:a5:31:
f5:28:6e:7a:ac:d6:a6:73:a0:03:cc:3c:01:45:06:da:0a:b9:
ff:95:a6:1a:1d:95:c0:a7:94:86:35:86:cf:f3:6d:b5:dc:11:
e3:9d:3c:3d:de:68:85:57:6e:f2:f5:f2:b3:2f:8d:6a:dd:a5:
5c:cf:a8:ac:55:5e:ea:6c:20:dd:95:2b:cf:44:92:f9:b5:3c:
0f:98:75:3e:ab:ab:cb:a4:51:eb:d2:c4:9c:55:b6:fd:3e:a7:
34:ef:ba:b9:d6:ae:70:9e:6e:34:d0:65:10:88:f8:e0:b2:e4:
ef:29:74:16:97:41:80:2c:24:3e:98:ca:69:16:08:b4:1a:c5:
ec:bd:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:29:07 2026 by rpki-client