Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7iHSiTPd2B9WtONp-DLQYvhxrEQ.roa
File: 7iHSiTPd2B9WtONp-DLQYvhxrEQ.roa (raw, json)
Hash identifier: B6D8HSbhCYe6ECNz+4LH8CPZ7W5F0tENyMz3AUR7+xc=
Subject key identifier: EE:21:D2:89:33:DD:D8:1F:56:B4:E3:69:F8:32:D0:62:F8:71:AC:44
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A183CCD15C9E7B3B24F79A73BE3F9B3DC2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7iHSiTPd2B9WtONp-DLQYvhxrEQ.roa
Signing time: Wed 28 Oct 2026 18:36:40 +0000
ROA not before: Wed 28 Oct 2026 18:36:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 45.144.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:cc:d1:5c:9e:7b:3b:24:f7:9a:73:be:3f:9b:3d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 28 18:36:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee21d28933ddd81f56b4e369f832d062f871ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:f2:44:c3:09:c5:80:19:d9:25:af:fa:9a:
b6:ab:8f:dc:63:db:f0:31:c9:76:26:68:fc:15:e4:
0c:84:04:7a:31:12:74:70:70:8b:a7:88:0e:4c:7c:
ed:58:84:83:12:1d:9c:96:ca:77:85:8f:59:c2:1d:
b2:71:75:f6:79:cf:7e:44:94:34:22:59:9c:d5:5b:
81:48:a0:82:71:87:34:f4:c2:b0:38:e5:f1:75:28:
c6:a4:c4:9c:d2:1c:9b:48:28:1a:4f:be:a7:ce:4f:
2f:0b:d9:03:a8:8a:e3:16:f0:3a:d8:53:36:2d:61:
a0:26:1b:a0:70:38:ce:80:74:0b:13:be:fd:24:fb:
70:8b:14:d1:bf:c6:b8:a2:08:23:05:fa:62:bf:7f:
67:f7:86:2a:e6:8c:b2:e7:29:5a:aa:7e:65:a9:f7:
f5:7b:85:40:55:e8:8a:e3:47:fc:93:51:c1:5c:8b:
88:19:f9:25:b8:57:bd:40:67:ad:82:27:37:f2:53:
dc:f1:ee:6e:0b:e3:ed:88:b3:18:4b:77:67:a5:52:
9a:1c:17:29:37:f7:fd:c0:98:04:61:09:1a:ea:cb:
4b:3b:db:69:5d:48:3a:22:14:77:ac:f6:68:e2:2c:
ba:ff:45:ef:81:51:08:7b:9a:d6:d6:76:82:58:42:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:21:D2:89:33:DD:D8:1F:56:B4:E3:69:F8:32:D0:62:F8:71:AC:44
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7iHSiTPd2B9WtONp-DLQYvhxrEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:99:34:92:52:f3:0d:57:90:95:1f:52:ba:9d:e7:4e:96:f7:
b0:32:da:2c:6b:dc:67:a4:2b:a4:85:4e:e6:39:49:67:05:53:
40:24:5d:f4:4f:f4:59:11:04:f2:0e:2f:46:64:82:23:b7:db:
de:24:ae:c4:39:87:21:85:26:2f:85:1d:80:a1:b9:66:c1:85:
65:c7:a0:a8:af:ba:66:b3:44:2c:a5:1a:4b:5c:ae:0a:07:a8:
21:98:6a:7a:97:86:a5:ae:e4:f7:b1:cc:66:a9:2d:ee:ff:18:
46:f9:fe:54:01:e1:cb:d8:f8:98:2e:3c:f1:41:de:e5:62:86:
69:63:54:3b:7a:6a:85:7e:a4:10:69:ff:4c:b6:0b:01:7e:0e:
6a:36:d9:e0:1f:c5:b4:55:5e:a4:f4:61:0d:6f:e4:03:6d:cb:
04:32:82:f5:fe:83:1b:24:57:b6:1e:c4:4d:ca:4b:6c:fe:fa:
40:70:73:16:af:21:2f:12:88:f1:9e:4f:ee:8c:0b:f5:52:6e:
81:e0:df:77:05:d1:63:00:ea:d0:cb:69:09:cc:92:53:93:f4:
f0:62:ac:dc:2b:c2:53:b5:56:ff:c0:0e:af:34:09:54:1f:7c:
96:8c:d4:09:38:c8:e7:68:0d:3a:34:90:9d:5b:cf:4e:4a:cb:
74:2f:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:33 2026 by rpki-client