Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_7O_-2Hqx6dd7BLv6-gdksNz2Rk.roa
File: _7O_-2Hqx6dd7BLv6-gdksNz2Rk.roa (raw, json)
Hash identifier: yw0lew1SjRfqNAbnUhMSQfXW9LI6mbh8pxBFVvBnAu4=
Subject key identifier: FF:B3:BF:FB:61:EA:C7:A7:5D:EC:12:EF:EB:E8:1D:92:C3:73:D9:19
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A00A07A2F92833FF001DDA16910D5DA070
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_7O_-2Hqx6dd7BLv6-gdksNz2Rk.roa
Signing time: Sun 16 Aug 2026 10:04:27 +0000
ROA not before: Sun 16 Aug 2026 10:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397373
IP address blocks: 91.210.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:07:a2:f9:28:33:ff:00:1d:da:16:91:0d:5d:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Aug 16 10:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb3bffb61eac7a75dec12efebe81d92c373d919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:a7:d5:1b:f6:9b:af:28:15:93:f6:1c:8d:
da:38:7e:f2:77:58:20:15:f8:21:6d:2c:6e:fd:1d:
12:3e:22:43:86:5a:9f:71:26:c5:c0:eb:57:18:87:
a6:bc:ad:db:a1:ff:2f:8d:a7:8e:a3:6f:0e:b6:6b:
30:6b:36:d8:5a:c0:3a:90:0d:df:26:ef:14:66:70:
19:c3:78:20:2e:6a:73:6b:db:ee:1b:22:92:35:ee:
8a:0c:d7:28:34:25:1c:75:35:dc:ad:7e:a2:b1:f7:
b2:44:7c:b5:2f:c8:8e:53:a7:60:69:6c:c7:ef:88:
f2:47:b0:d4:06:7b:cd:d2:30:7f:66:a6:ad:f9:b4:
83:d4:a6:03:cd:0d:a4:5b:d7:a8:0e:93:11:5e:6a:
0e:51:6b:67:3e:ef:0d:ea:d9:70:53:c2:5f:d7:8a:
fc:e9:76:c6:cc:59:67:75:f0:8e:cb:82:cd:33:7d:
bf:44:45:c1:94:ed:c4:bc:86:59:b1:5f:f0:bf:fa:
ad:16:72:6a:7a:06:3a:1a:f1:65:25:4d:ad:f1:be:
68:71:40:e7:c0:91:da:61:79:1a:b6:ec:c0:a6:93:
41:89:43:b9:90:77:50:98:3a:ac:50:fe:60:71:af:
96:57:2f:65:25:66:cd:37:7c:48:8d:2d:48:bf:c1:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B3:BF:FB:61:EA:C7:A7:5D:EC:12:EF:EB:E8:1D:92:C3:73:D9:19
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/_7O_-2Hqx6dd7BLv6-gdksNz2Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
Signature Algorithm: sha256WithRSAEncryption
29:13:b7:5b:59:2d:93:bd:48:df:fe:14:b5:57:52:4a:0e:07:
c2:9a:73:8e:31:7e:5f:ff:c6:61:ad:66:13:ec:91:69:13:a9:
39:fc:8a:fd:86:08:e5:92:cb:31:e2:40:87:dd:1f:42:9f:13:
05:ba:d4:34:40:39:74:84:b0:90:8f:fa:65:9a:ca:7d:f4:4f:
a9:e4:8a:07:60:68:c9:04:4a:ef:69:51:42:f2:7b:e3:dd:c1:
5f:34:fb:68:fd:e8:6d:7f:fc:18:72:fc:45:fd:5b:49:23:8c:
54:30:5e:e4:ab:98:ef:ed:4c:f5:75:3e:22:1f:62:b2:f0:de:
38:97:f5:13:1c:e2:0e:84:ff:0e:ef:82:3e:6b:20:85:e8:16:
c7:28:37:47:97:91:2b:69:5a:72:e3:1a:6c:cd:93:72:69:7f:
86:0f:8f:1a:34:94:d9:e0:9a:e1:8b:d1:77:3e:f1:28:14:fe:
f1:d4:62:0e:cf:be:7b:3d:96:17:1a:75:0e:42:6d:11:3f:ab:
51:5a:0f:0a:b7:b3:85:30:45:89:e6:cf:fa:d7:25:23:e4:75:
33:48:62:aa:fa:42:c1:61:56:55:c0:c5:8b:8e:6a:db:44:7b:
fb:21:49:1d:a5:28:c0:71:93:c2:21:15:55:c7:9b:17:1d:df:
c1:62:f6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:43 2026 by rpki-client