Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7ctFBaAA77hxUugJvpz5-Q2O2So.roa
File: 7ctFBaAA77hxUugJvpz5-Q2O2So.roa (raw, json)
Hash identifier: n0ZJ9RY1JNNGdLrdJEoDFvXyOiokkCUsJwdY3Jy8Fn0=
Subject key identifier: ED:CB:45:05:A0:00:EF:B8:71:52:E8:09:BE:9C:F9:F9:0D:8E:D9:2A
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A15D82035661C06D40F7EF4B3C0222ED4B
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7ctFBaAA77hxUugJvpz5-Q2O2So.roa
Signing time: Wed 21 Oct 2026 08:09:23 +0000
ROA not before: Wed 21 Oct 2026 08:09:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137410
IP address blocks: 213.189.18.0/24 maxlen: 24
213.214.109.0/24 maxlen: 24
213.247.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:82:03:56:61:c0:6d:40:f7:ef:4b:3c:02:22:ed:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 21 08:09:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edcb4505a000efb87152e809be9cf9f90d8ed92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:d0:30:54:9a:50:af:c2:a8:0e:9b:83:40:
b1:fc:fb:8b:60:0d:dc:cf:43:31:d2:80:5a:07:c0:
d9:2b:13:0c:86:6a:41:bf:d2:78:64:a0:a8:23:4b:
2c:65:e2:59:d9:f7:d3:49:30:6d:09:59:be:5f:96:
74:80:71:c8:23:3d:7d:f9:c6:f7:d2:77:b3:0e:71:
23:22:8e:f4:83:72:cd:c7:d0:f9:3a:8e:fc:6a:87:
b1:39:3a:a1:e7:b0:df:62:22:79:81:fc:43:ad:02:
c4:7b:24:31:76:b6:c4:fa:aa:da:2a:8a:1f:2a:1d:
3b:cc:b3:fe:64:89:4a:97:61:41:88:49:f4:8f:f2:
75:a3:c4:fa:9b:9f:54:d1:0e:6c:8b:94:d8:46:a1:
00:6d:5e:ad:50:f0:52:35:6a:15:4d:38:66:9d:7a:
e2:bf:28:05:7e:6c:ee:dd:eb:7a:6f:b1:ac:3f:ce:
a7:46:8a:9e:f5:08:1b:5e:7a:0b:f8:47:37:5b:95:
a9:55:86:12:35:0d:3a:7b:bd:51:65:ff:93:b6:fc:
60:fe:24:6e:5c:a9:d3:72:57:d5:1e:55:52:a0:c6:
86:80:4f:4f:c7:a7:96:9a:8f:04:77:37:b3:ca:d7:
1b:17:df:85:7e:ff:12:b8:5b:55:3f:db:29:42:db:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CB:45:05:A0:00:EF:B8:71:52:E8:09:BE:9C:F9:F9:0D:8E:D9:2A
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/7ctFBaAA77hxUugJvpz5-Q2O2So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.18.0/24
213.214.109.0/24
213.247.47.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3f:7f:b2:9c:79:2d:a7:6e:e1:01:d7:37:12:67:d0:15:50:
69:3f:48:dc:e7:91:3e:b7:f9:df:ef:c4:9a:a0:f7:18:61:1b:
c4:0f:9b:d1:14:14:87:c9:cc:3f:4b:30:99:50:2f:1d:b4:3e:
40:b7:e4:2b:22:32:54:5b:83:62:e0:b3:4b:9f:77:32:5b:43:
7c:99:5e:dd:f0:d8:77:3c:ec:82:14:73:e3:77:81:58:8f:88:
0a:16:84:53:3e:5c:cc:5c:db:6b:1b:b5:20:35:b5:31:9d:3b:
47:83:e0:84:e3:d2:9f:c2:8e:0c:1d:c5:58:65:76:06:b5:0e:
44:80:ab:42:f1:36:bc:bd:45:bd:92:8d:4f:7c:6d:b5:08:eb:
a0:b3:d6:c4:f3:90:6d:c4:92:49:49:69:5f:96:90:4f:a9:7c:
d7:19:cf:87:eb:9d:68:d8:00:cb:fd:0e:6d:8d:d1:87:33:f0:
89:9d:7f:42:e5:32:df:a1:f2:e8:4c:46:3f:01:00:38:4b:ec:
af:2b:76:93:13:18:06:db:7b:fa:7a:fc:5e:b2:22:9f:32:eb:
6c:8a:48:1c:79:c1:8a:ac:8f:b3:1e:fb:bf:7e:56:b8:52:e1:
fa:55:80:d1:50:44:70:97:d8:49:bc:3e:ca:4c:5b:d0:f0:2f:
d1:ab:60:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:49:54 2026 by rpki-client