Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa
File: 7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa (raw, json)
Hash identifier: McFAl/WKQX0xi1vS74G9WytOjkgqYbIf6IQeiu/SBtE=
Subject key identifier: ED:AE:E0:43:48:CC:A5:6F:87:3B:8C:DA:D8:34:8F:D1:92:88:48:91
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01A0727365306B6A716E903A8860ACEF0F1C
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa
Signing time: Sat 05 Sep 2026 16:42:40 +0000
ROA not before: Sat 05 Sep 2026 16:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202412
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:73:65:30:6b:6a:71:6e:90:3a:88:60:ac:ef:0f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Sep 5 16:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edaee04348cca56f873b8cdad8348fd192884891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:ed:b8:28:e1:25:36:3b:5a:af:07:53:31:
70:b4:79:0e:be:a6:d7:fe:e6:9b:1a:ab:2e:57:d5:
e7:78:b7:64:ee:fd:0e:27:75:87:a7:22:9f:59:c9:
4a:86:25:47:37:fb:2f:7a:db:aa:88:15:fe:6c:7e:
1b:59:ed:c8:48:0e:71:66:07:82:5e:b1:a8:7c:e2:
44:2f:a5:d8:c2:a5:c9:83:86:dc:ce:dc:26:b5:60:
cb:27:38:3b:d4:34:a7:81:a0:ca:c6:fa:c4:a3:32:
ec:85:b2:29:76:38:55:7e:64:bc:97:a7:8f:38:33:
5e:0d:6a:31:09:07:bb:81:2c:b6:ac:d3:1b:24:39:
c5:98:58:aa:93:2e:00:05:ae:4a:df:91:17:71:bc:
62:3c:03:fe:e5:08:93:25:92:fd:dd:0c:c8:43:74:
45:93:a4:86:cd:a9:92:a7:ca:f6:04:54:58:52:04:
54:75:ff:41:d3:dd:02:ec:1c:36:68:9f:ff:fb:0f:
86:fc:3d:75:e5:d4:50:77:05:51:72:54:10:e8:71:
19:8f:62:9f:1b:a8:f7:f5:95:93:61:c8:05:ac:7b:
bc:e0:bb:a4:22:8a:47:62:a8:dd:ee:cb:b3:f8:9d:
bd:c9:c4:47:0d:42:cc:24:ff:1d:19:0f:b4:f5:7c:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:E0:43:48:CC:A5:6F:87:3B:8C:DA:D8:34:8F:D1:92:88:48:91
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/7a7gQ0jMpW-HO4za2DSP0ZKISJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7b:e0:60:0f:2d:af:a0:0f:f9:93:92:12:23:ec:1d:8d:74:
ef:17:57:c4:ec:75:c1:13:dd:f2:fc:fd:b5:7c:42:2f:e7:8c:
ed:aa:88:a0:13:cf:6c:b1:c5:39:a3:e2:d8:6b:ed:c0:d1:5d:
eb:29:f4:a3:5d:53:14:9c:75:79:ef:eb:54:2f:de:dd:2a:5e:
d5:f9:2b:48:9d:1b:3e:62:e8:71:87:51:e2:b2:ab:9d:f9:4c:
63:14:b7:53:7c:6c:2a:bd:2f:df:5f:29:18:32:64:82:1f:e7:
c1:73:56:7e:57:d4:ff:9e:0f:77:e2:34:79:02:ae:3e:20:72:
58:48:da:97:00:37:50:b6:94:ad:aa:71:b8:8d:90:e9:34:3f:
f6:7e:99:67:30:56:7a:aa:b8:72:ca:c5:ee:30:da:43:bf:de:
55:a5:55:fe:f8:57:b8:5e:b2:1e:f2:06:3a:2f:cf:53:77:7e:
de:d5:05:41:07:79:84:8c:14:53:ca:a9:a7:19:ee:68:ce:a4:
39:3a:ec:8c:2d:6e:c7:c7:2d:e1:23:5e:ad:22:67:99:86:7e:
79:04:ed:c7:a9:e9:98:5b:3f:87:c3:f0:e7:d9:d8:66:7a:d0:
17:8c:d9:94:f1:3e:e3:d4:20:57:31:62:ba:56:07:57:31:3b:
9e:7e:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:04:42 2026 by rpki-client