Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7VTsSzgjCruuT9D_oo_GpCePRmA.roa
File: 7VTsSzgjCruuT9D_oo_GpCePRmA.roa (raw, json)
Hash identifier: 2bYUaq7TmrIdQwCJpi7WU1r54hlWSNb2+szJ26QwC/w=
Subject key identifier: ED:54:EC:4B:38:23:0A:BB:AE:4F:D0:FF:A2:8F:C6:A4:27:8F:46:60
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07FF1AE678921F8CD710B796A7AB54623
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7VTsSzgjCruuT9D_oo_GpCePRmA.roa
Signing time: Tue 08 Sep 2026 07:35:40 +0000
ROA not before: Tue 08 Sep 2026 07:35:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 194.163.69.0/24 maxlen: 24
194.195.101.0/24 maxlen: 24
195.252.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f1:ae:67:89:21:f8:cd:71:0b:79:6a:7a:b5:46:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 8 07:35:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed54ec4b38230abbae4fd0ffa28fc6a4278f4660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:d5:a9:37:59:3b:17:be:39:5c:6d:17:54:
66:99:67:fe:6c:68:09:70:b4:46:64:5d:f8:93:14:
1c:84:ef:45:e5:dd:bc:8c:fc:b7:63:c6:5d:46:bc:
5c:29:52:66:c1:5a:ee:fd:26:09:8f:bb:3f:23:f3:
3c:3d:5b:d4:cd:40:eb:85:6a:bb:f1:19:fd:5b:73:
10:13:4c:60:58:7d:b2:e0:9d:83:57:16:9d:fd:34:
91:3a:1c:e2:df:94:c5:04:66:ab:4b:8d:14:eb:bd:
8e:03:25:47:40:0a:dd:2e:0f:b5:0f:94:b9:c8:03:
2f:c0:cb:70:56:20:89:13:f9:90:48:7d:88:98:23:
f7:8e:3d:a0:b3:58:fa:59:38:09:36:fb:85:fe:7a:
67:0e:18:37:d0:5e:b5:fa:2a:c6:63:96:62:4a:b1:
25:7e:97:19:ab:c0:93:91:f6:18:bc:44:5a:52:9d:
93:fd:ae:5d:39:2b:7a:43:f3:bb:d7:05:63:1e:6e:
64:41:5d:9a:df:8c:31:af:31:81:58:38:47:07:9f:
c2:12:cc:97:1c:23:1b:0e:3e:2d:e3:9f:f4:3f:28:
e2:88:b2:cc:2e:86:f6:60:4b:5a:e4:52:53:d3:63:
b5:aa:58:bc:f6:32:ce:ae:27:ec:7e:14:d7:10:17:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:EC:4B:38:23:0A:BB:AE:4F:D0:FF:A2:8F:C6:A4:27:8F:46:60
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/7VTsSzgjCruuT9D_oo_GpCePRmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.69.0/24
194.195.101.0/24
195.252.172.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f7:56:55:35:78:2a:9e:61:65:b4:e0:8f:15:e8:2b:6c:73:
42:01:3d:05:d9:b5:d4:04:3c:8b:0f:7e:f0:d3:74:fd:ab:d5:
1e:8d:70:fa:ef:7b:35:54:b8:24:80:c6:c7:80:f6:0c:cc:6f:
62:ff:a9:9e:2f:33:e8:3f:d3:5f:a0:21:98:39:7a:a9:45:5d:
82:c9:25:1f:4d:d5:11:c2:71:c3:6a:df:cf:31:47:68:b7:15:
f7:e9:8c:ae:e7:dd:9a:47:66:c7:39:ae:96:8f:d3:89:c6:c3:
e1:3a:4a:b4:7c:d1:f8:3c:65:33:0f:5d:ce:4b:9f:80:15:7f:
b2:84:de:36:f3:a2:db:e4:fa:18:70:7b:ce:73:02:f6:e0:72:
5d:df:f1:d5:19:17:d5:1a:ac:e2:8a:69:7b:2d:85:1a:f3:8b:
c0:2b:7e:eb:7d:7e:33:33:d8:ba:af:e7:31:f8:e5:28:37:22:
9b:de:63:b5:74:2e:16:5c:99:e9:e6:38:44:01:f9:f3:e4:4d:
e8:fb:e7:5f:ef:58:bd:ff:ec:b3:6b:ab:f0:11:76:bd:56:fa:
dd:ac:24:e7:48:c4:1e:f1:8a:85:5f:bc:86:ec:b8:4b:43:68:
53:02:8e:46:b2:1c:da:c4:95:f7:5e:e1:f0:91:b5:79:77:f9:
9a:b7:f1:69
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB/8a5niSH4zXELeWp6tUYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjYwOTA4MDczNTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDU0ZWM0YjM4MjMwYWJiYWU0ZmQwZmZhMjhmYzZhNDI3OGY0NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1DVqTdZOxe+OVxtF1RmmWf+bGgJ
cLRGZF34kxQchO9F5d28jPy3Y8ZdRrxcKVJmwVru/SYJj7s/I/M8PVvUzUDrhWq7
8Rn9W3MQE0xgWH2y4J2DVxad/TSROhzi35TFBGarS40U672OAyVHQArdLg+1D5S5
yAMvwMtwViCJE/mQSH2ImCP3jj2gs1j6WTgJNvuF/npnDhg30F61+irGY5ZiSrEl
fpcZq8CTkfYYvERaUp2T/a5dOSt6Q/O71wVjHm5kQV2a34wxrzGBWDhHB5/CEsyX
HCMbDj4t45/0PyjiiLLMLob2YEta5FJT02O1qli89jLOrifsfhTXEBcdbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO1U7Es4Iwq7rk/Q/6KPxqQnj0ZgMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvN1ZUc1N6Z2pDcnV1VDlEX29vX0dwQ2VQUm1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwqNFAwQA
wsNlAwQAw/ysMA0GCSqGSIb3DQEBCwUAA4IBAQCD91ZVNXgqnmFltOCPFegrbHNC
AT0F2bXUBDyLD37w03T9q9UejXD673s1VLgkgMbHgPYMzG9i/6meLzPoP9NfoCGY
OXqpRV2CySUfTdURwnHDat/PMUdotxX36Yyu592aR2bHOa6Wj9OJxsPhOkq0fNH4
PGUzD13OS5+AFX+yhN4286Lb5PoYcHvOcwL24HJd3/HVGRfVGqziiml7LYUa84vA
K37rfX4zM9i6r+cx+OUoNyKb3mO1dC4WXJnp5jhEAfnz5E3o++df71i9/+yza6vw
EXa9VvrdrCTnSMQe8YqFX7yG7LhLQ2hTAo5GshzaxJX3XuHwkbV5d/mat/Fp
-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:33 2026 by rpki-client