Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7RoW1B_bQBrYk3GV_B8YInB1a3g.roa
File: 7RoW1B_bQBrYk3GV_B8YInB1a3g.roa (raw, json)
Hash identifier: NrzcyRyBUjSMozgGCHFjE/+3Jpl/kAmnlaXKNmhafr8=
Subject key identifier: ED:1A:16:D4:1F:DB:40:1A:D8:93:71:95:FC:1F:18:22:70:75:6B:78
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A057A7D83368D0C5FE95F2E346428B8134
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7RoW1B_bQBrYk3GV_B8YInB1a3g.roa
Signing time: Mon 31 Aug 2026 11:50:12 +0000
ROA not before: Mon 31 Aug 2026 11:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 83.98.195.0/24 maxlen: 24
83.98.197.0/24 maxlen: 24
85.222.199.0/24 maxlen: 24
213.214.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:a7:d8:33:68:d0:c5:fe:95:f2:e3:46:42:8b:81:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 31 11:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed1a16d41fdb401ad8937195fc1f182270756b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:a4:38:e0:ef:4a:59:fa:ab:07:f5:64:86:
50:38:23:c7:3e:e3:7e:7d:b6:b3:44:02:bc:28:36:
4d:af:dd:c9:b1:18:63:0c:fc:74:5a:b0:ef:f8:49:
74:38:00:9b:61:91:5e:a8:74:52:b0:c8:c8:c8:41:
d3:48:18:00:9e:f4:fc:aa:08:a7:c4:fc:ff:9b:83:
41:8a:27:90:f6:89:fc:37:80:8c:95:aa:78:b0:8d:
f1:7c:da:0d:b3:c3:03:99:e4:a6:c1:bf:fe:b7:ce:
c8:91:85:11:8e:29:0f:3d:37:b7:bd:c7:b3:01:23:
f2:6c:b7:e1:88:0b:2e:32:07:51:e5:e9:8b:a9:69:
6f:4b:ef:25:71:51:52:fb:fe:90:f1:29:a0:1d:04:
e7:5a:43:32:76:fe:96:09:01:9f:e7:06:68:a7:99:
39:f5:81:08:f7:26:47:3e:29:f4:fb:ad:cf:16:8b:
00:eb:a4:76:e9:dd:37:00:a8:6a:ac:01:ad:56:c0:
0c:91:0b:94:0d:92:12:81:d0:99:88:c8:d0:42:14:
b0:5f:41:01:f6:0b:56:2e:56:4d:75:50:bd:40:21:
38:2c:0f:7e:ee:24:01:7f:eb:3e:79:78:99:4a:0c:
ba:fb:f2:0e:83:84:ad:3a:20:3c:88:ba:25:49:d4:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:16:D4:1F:DB:40:1A:D8:93:71:95:FC:1F:18:22:70:75:6B:78
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7RoW1B_bQBrYk3GV_B8YInB1a3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.195.0/24
83.98.197.0/24
85.222.199.0/24
213.214.102.0/24
Signature Algorithm: sha256WithRSAEncryption
90:92:e5:e8:5d:66:f9:0c:e9:ff:57:ec:bd:94:46:17:11:38:
f5:cc:f8:a1:04:20:cd:24:35:7d:53:5c:ff:1d:71:8d:13:aa:
4d:46:f9:da:1e:60:3c:27:17:5b:bd:c2:10:a9:8d:6b:34:5a:
76:e2:dd:20:3d:7b:aa:b5:d4:e3:e5:7b:71:ea:e9:ca:45:d1:
a1:f0:2c:b0:99:e1:9b:75:8a:71:eb:81:64:da:d6:bd:e8:e7:
8d:69:58:b0:94:5d:42:e9:dc:8a:04:b2:ef:a1:04:dd:5b:5b:
cb:10:6b:90:03:c8:59:90:82:01:89:98:ae:80:0b:67:10:e3:
57:a7:2d:19:60:7f:b1:f8:fc:4d:61:fb:58:15:7e:dd:9e:74:
5a:3c:a0:0f:32:41:00:42:8d:25:92:25:74:17:52:c5:a2:b2:
c4:eb:71:44:13:7f:a8:5d:8c:87:84:0c:91:d9:71:3c:d7:83:
b7:7b:87:ee:59:bd:f9:62:b7:bc:6d:92:a6:cf:07:19:c2:35:
7b:55:65:e6:04:bf:8e:5b:79:2c:8f:1e:4b:a6:a4:b5:a1:ce:
b8:8a:23:3a:69:55:f8:ad:54:5e:1e:d4:53:99:b0:64:53:c9:
d2:4a:86:8f:ed:e2:a6:ff:d4:38:a9:4d:f1:7c:a2:52:64:23:
92:af:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:00 2026 by rpki-client