Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/7CQfmSnA7xlofoaIh6O3s__ALU0.roa
File: 7CQfmSnA7xlofoaIh6O3s__ALU0.roa (raw, json)
Hash identifier: 5qzHN9BjrU3TGNOdR1wkA5orwEhZQeK5CFHWatWFVuo=
Subject key identifier: EC:24:1F:99:29:C0:EF:19:68:7E:86:88:87:A3:B7:B3:FF:C0:2D:4D
Certificate issuer: /CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Certificate serial: 01A17E198C59ECC8B6249B7D52243A53F63C
Authority key identifier: BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/7CQfmSnA7xlofoaIh6O3s__ALU0.roa
Signing time: Tue 27 Oct 2026 16:02:45 +0000
ROA not before: Tue 27 Oct 2026 16:02:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2611
IP address blocks: 130.104.0.0/16 maxlen: 16
192.135.167.0/24 maxlen: 24
192.135.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:19:8c:59:ec:c8:b6:24:9b:7d:52:24:3a:53:f6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd79028407e36fd3d0fc78d6745322bb0a91ec3e
Validity
Not Before: Oct 27 16:02:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec241f9929c0ef19687e868887a3b7b3ffc02d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:4b:83:0f:9e:e7:b9:7d:64:fb:70:a9:fe:
ce:77:9d:1b:cd:3b:b3:8e:66:40:70:d4:68:c5:83:
a3:7d:95:e2:f5:54:07:47:5f:71:f4:6f:a2:98:5e:
39:54:48:a8:4f:33:5f:c5:7a:3b:3a:81:f0:f6:7d:
87:68:f1:d6:86:7f:fd:a1:ee:27:55:65:1b:c2:f6:
a0:a5:c9:84:be:02:a7:55:10:da:d5:16:77:71:3c:
8d:f4:c9:c0:49:50:bc:8c:60:e7:32:57:f2:5f:d8:
b0:e6:f5:9b:bb:20:10:3e:27:63:90:83:87:c9:01:
f3:8e:bb:47:f8:ea:b6:05:cf:b9:6c:f7:d8:59:12:
7a:53:e1:25:d0:e4:9d:f8:86:98:a1:6d:1c:f7:d5:
28:35:ba:68:e8:a7:43:60:1c:70:12:d1:56:fb:de:
fb:65:2a:76:48:1a:b7:fe:35:e3:d0:8c:12:50:16:
b7:18:5a:1c:b9:d7:d2:ca:8f:c7:9f:c7:a0:0f:bf:
fb:b3:5c:5b:43:39:bd:49:bb:d2:8f:a3:fe:d2:1b:
3f:87:81:05:5e:b9:fb:c3:bd:82:e9:f3:70:d0:8d:
23:f2:d5:01:6c:f9:bc:d0:eb:40:8a:8f:1f:a8:fa:
8d:1b:aa:a2:49:d0:49:d9:d5:1a:44:80:58:3d:2a:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:1F:99:29:C0:EF:19:68:7E:86:88:87:A3:B7:B3:FF:C0:2D:4D
X509v3 Authority Key Identifier:
keyid:BD:79:02:84:07:E3:6F:D3:D0:FC:78:D6:74:53:22:BB:0A:91:EC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXkChAfjb9PQ_HjWdFMiuwqR7D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/7CQfmSnA7xlofoaIh6O3s__ALU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/4f64ab-9327-4bb4-b986-1c7b4d468d39/1/vXkChAfjb9PQ_HjWdFMiuwqR7D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.104.0.0/16
192.135.167.0-192.135.168.255
Signature Algorithm: sha256WithRSAEncryption
a6:aa:be:6b:ff:4e:05:bb:68:36:32:25:f1:38:a9:68:27:8c:
17:dd:63:0a:ac:b0:1a:67:50:4f:61:dd:8d:70:21:3a:ba:5a:
42:76:ed:57:6d:69:9b:14:94:5f:03:83:3c:e7:97:f7:db:6b:
e7:66:5f:2b:96:4a:98:80:d8:7c:36:a5:d2:92:59:25:64:d2:
79:96:10:e9:b1:25:96:e1:9b:a9:71:4b:f0:a9:63:4e:69:29:
b4:9a:04:86:f9:c5:1a:2b:20:2a:af:ce:7b:cc:17:e4:87:76:
ff:3f:81:d4:86:09:d8:ca:32:d3:be:2a:10:66:06:65:71:70:
c7:75:b9:d0:2b:8e:60:66:68:12:49:c7:b1:93:6f:e4:2d:c7:
af:f1:46:3c:cb:04:cc:80:5d:c2:05:4b:1c:03:31:35:b2:92:
22:79:fd:0a:65:1a:eb:a5:a3:cc:af:eb:d1:ee:b9:0a:b9:2b:
b5:d4:d8:a6:4f:d9:6e:db:86:fa:19:47:4e:4d:46:e2:07:0b:
49:50:5c:8a:de:cc:f6:44:30:f8:8d:da:a1:0b:90:69:6e:7a:
dd:c6:ab:2d:78:3e:46:96:98:95:7e:85:fd:ed:dd:01:2c:27:
8c:b7:68:21:bc:ab:07:a6:13:c0:a8:0d:19:fb:0a:2a:7d:2d:
98:e1:e4:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 1 20:14:19 2026 by rpki-client