Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nH7gC0A7tnD9psDoH0OJ31kdyeU.roa
File: nH7gC0A7tnD9psDoH0OJ31kdyeU.roa (raw, json)
Hash identifier: R/7TBye0UFeEZNsucxTN2YluARZDvoPXoxZFH713aK0=
Subject key identifier: 9C:7E:E0:0B:40:3B:B6:70:FD:A6:C0:E8:1F:43:89:DF:59:1D:C9:E5
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A01979E00FB1C59A4965FFA069BF6BE72A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nH7gC0A7tnD9psDoH0OJ31kdyeU.roa
Signing time: Wed 19 Aug 2026 10:03:32 +0000
ROA not before: Wed 19 Aug 2026 10:03:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25525
IP address blocks: 213.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:79:e0:0f:b1:c5:9a:49:65:ff:a0:69:bf:6b:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 19 10:03:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c7ee00b403bb670fda6c0e81f4389df591dc9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:86:fe:8e:69:ae:07:41:ee:44:b3:88:9d:
b4:ef:41:eb:b7:47:8c:3b:af:91:10:06:6e:b7:d3:
6f:7e:29:0e:0e:89:f3:be:a4:a3:13:a2:30:02:f9:
39:c0:7f:84:8c:e1:50:40:78:49:e3:10:68:3d:66:
57:5d:8a:66:0b:47:5f:fb:09:f0:f8:60:53:cd:76:
9c:64:d6:12:e5:32:7e:f4:13:05:30:c4:2e:2a:10:
12:7a:92:a4:19:49:8c:ca:4d:12:ee:7b:7a:77:67:
c1:a0:30:a8:7a:1f:eb:19:73:79:cf:f3:df:9d:e0:
f4:87:46:f7:6f:1e:32:ad:a1:82:43:9a:1f:72:43:
32:50:24:20:b5:20:0f:48:e4:ce:0e:64:08:2b:6e:
34:1f:32:94:c5:3e:67:f4:63:fd:f7:eb:a3:0c:a0:
48:33:d2:29:a4:9e:f8:6a:a3:76:d8:98:67:45:cc:
f9:8f:87:ae:63:c0:ee:f1:a9:cc:75:c6:92:7d:53:
02:79:71:b5:a6:e1:89:eb:39:ee:50:36:9a:d5:ca:
17:aa:79:26:3f:31:dc:89:84:ee:f5:d0:3e:a8:eb:
6e:44:e2:39:0f:7e:d1:63:61:5a:b1:1e:3e:fc:1b:
cc:3c:07:6b:32:95:44:ad:4a:bf:9d:9b:43:8b:5e:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7E:E0:0B:40:3B:B6:70:FD:A6:C0:E8:1F:43:89:DF:59:1D:C9:E5
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/nH7gC0A7tnD9psDoH0OJ31kdyeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
30:7b:6a:c5:d1:34:d2:ea:2a:f2:fd:22:9c:97:c6:d5:c3:af:
8c:b7:06:8b:77:b4:94:d2:20:25:91:0f:23:40:d8:f3:3e:fe:
53:b7:32:12:cd:d7:9a:48:bf:e3:bf:45:b4:3a:91:55:2f:95:
22:09:36:aa:59:3b:3f:4c:37:df:86:33:4f:8d:ab:dc:2c:58:
a3:43:72:82:a7:37:ba:db:1d:11:6e:c8:c3:5b:1a:25:5a:b4:
b7:03:78:91:0d:5f:a9:46:3a:02:71:1c:20:04:92:36:81:a2:
51:f4:8e:13:36:9d:6f:78:e0:46:83:66:56:6f:5b:ca:d7:ee:
62:d5:7c:06:eb:0c:22:d3:6c:7a:9a:aa:cc:49:da:a4:e1:da:
38:22:c8:be:c0:28:6e:39:6d:58:98:b2:6d:33:d5:85:c0:30:
01:a3:3d:ca:67:79:2e:c1:3a:a9:0c:46:a6:47:d8:a6:42:d1:
48:fd:06:c4:55:f1:6a:c6:36:f7:93:25:9d:c5:46:c6:6c:97:
5b:cc:e7:c0:69:f5:23:08:93:36:9f:7f:36:7c:34:0f:6d:bc:
74:60:ba:24:ba:af:d1:08:08:d2:df:5b:6e:cd:93:2b:c9:65:
59:45:70:0d:7e:31:da:c6:af:5b:3a:88:33:94:d2:84:61:29:
9b:35:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:46 2026 by rpki-client