Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7ElDWEaDgdQutCu4Tb2JuxXPuFA.roa
File: 7ElDWEaDgdQutCu4Tb2JuxXPuFA.roa (raw, json)
Hash identifier: AIqO5FQKBrkQsx9S+BEpQ+sS9p6c2QijyAqdCsZJU/4=
Subject key identifier: EC:49:43:58:46:83:81:D4:2E:B4:2B:B8:4D:BD:89:BB:15:CF:B8:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A10D0A8AA9BD2492988E3209C48AD2AE49
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7ElDWEaDgdQutCu4Tb2JuxXPuFA.roa
Signing time: Mon 05 Oct 2026 17:09:17 +0000
ROA not before: Mon 05 Oct 2026 17:09:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218500
IP address blocks: 5.83.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 00:19:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:0a:8a:a9:bd:24:92:98:8e:32:09:c4:8a:d2:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 5 17:09:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec494358468381d42eb42bb84dbd89bb15cfb850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:25:89:8a:f9:7c:85:dd:b9:15:14:40:41:1a:
44:40:e4:17:e3:c0:44:b9:de:8a:91:16:34:3c:4d:
9e:0b:f7:6a:d7:ab:74:db:75:55:20:b3:78:a7:f1:
70:7a:bb:71:30:63:55:83:7d:3b:a6:6f:65:69:c4:
28:3c:86:90:e1:01:94:fc:7d:55:b6:80:8f:7a:7f:
37:8e:2d:34:18:51:c3:0f:ad:13:b7:da:48:9f:9f:
c4:15:35:d3:ee:ca:04:37:30:eb:12:49:8a:6f:6e:
61:54:f7:79:be:d7:dd:b7:cc:ca:fd:cd:28:3b:55:
e7:fc:e2:d3:57:67:39:f7:74:46:80:6f:69:83:5e:
ff:7c:87:7d:39:de:ba:a9:64:dc:4e:d1:d1:74:eb:
0f:73:06:b6:ba:d4:e3:56:48:da:a5:ed:14:e0:cd:
b6:36:75:24:12:26:6f:e5:f8:ed:1f:b2:99:47:92:
f7:2c:19:14:22:4e:67:72:fe:7a:4e:83:99:6b:64:
74:99:1e:0f:b1:99:8e:32:7a:c2:5d:ca:8c:3e:b3:
e3:41:7b:0d:fe:95:02:67:93:12:4d:69:1f:ce:5a:
7c:9c:f7:b4:ed:cf:39:82:9c:34:d8:b8:3b:3a:74:
ae:f4:13:ef:a3:69:73:46:de:f3:9a:2e:03:b4:c9:
cf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:49:43:58:46:83:81:D4:2E:B4:2B:B8:4D:BD:89:BB:15:CF:B8:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7ElDWEaDgdQutCu4Tb2JuxXPuFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:97:25:c0:b4:65:02:36:7d:1e:2c:59:4a:ce:e4:8e:76:06:
94:cf:af:ef:13:6f:67:2b:69:68:a3:77:8a:53:cb:f6:fa:70:
bd:cb:32:92:6f:1e:47:3d:97:c7:46:44:62:ea:3f:63:b4:3b:
33:e9:f1:01:bd:2c:da:71:e0:0e:71:5a:a9:e9:07:40:58:cc:
6a:3b:d2:f5:a3:7b:2c:20:f5:e2:0f:2a:30:ea:9c:4c:cc:20:
58:f2:62:fc:69:d5:7b:77:ec:84:36:40:39:40:d3:77:b7:45:
9a:cd:a6:cc:b6:41:b8:92:78:a3:20:8d:02:42:3e:81:c6:a3:
86:08:c1:11:7b:30:1f:f3:2c:db:28:e9:64:c5:22:25:57:73:
11:4c:5b:3b:6a:fe:92:cf:b4:d4:80:97:f5:33:e7:ae:06:03:
e3:01:1e:7b:a2:59:ef:2a:ad:7a:dd:a2:e8:a9:61:ae:03:92:
9a:01:5a:01:e1:7f:af:8b:ee:f8:d8:08:8d:f8:aa:55:2b:cf:
16:9b:94:2c:d0:7a:18:20:49:43:42:1a:f1:fe:24:56:97:20:
c8:54:2f:1b:1d:15:ec:5b:84:94:a4:ba:4f:b4:7c:83:b6:ab:
a7:3e:20:e7:1f:e2:6d:2c:33:84:22:bb:e1:f3:a7:ef:53:e9:
c8:54:c4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:00 2026 by rpki-client