Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/fADQ3jZuaPMPWjx2vDouL3uORA4.roa
File: fADQ3jZuaPMPWjx2vDouL3uORA4.roa (raw, json)
Hash identifier: n2GZxiMIy0rKBVR1WP0lesxtr0/b5gUI+URghcDViu4=
Subject key identifier: 7C:00:D0:DE:36:6E:68:F3:0F:5A:3C:76:BC:3A:2E:2F:7B:8E:44:0E
Certificate issuer: /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial: 019F236887F4E4EF1272D00E2E1888318839
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/fADQ3jZuaPMPWjx2vDouL3uORA4.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 93.191.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:87:f4:e4:ef:12:72:d0:0e:2e:18:88:31:88:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c00d0de366e68f30f5a3c76bc3a2e2f7b8e440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:71:f5:5e:3e:f0:7b:ba:9c:79:13:f9:59:
08:b8:a7:7d:c8:7a:a6:80:77:ac:d6:02:1e:57:6a:
bd:df:dd:40:72:92:cb:c0:36:7f:41:88:e4:82:e0:
c9:8e:04:a0:17:bc:7d:66:89:fc:4d:70:d8:7c:bb:
f2:50:18:11:28:77:57:fe:cc:cf:6e:b1:0c:12:45:
81:9c:58:6c:4d:45:e3:10:b9:62:e4:60:d8:cc:c5:
7a:23:e1:1e:f8:3f:88:69:32:2b:dd:16:21:8b:7f:
39:1e:8a:e5:15:52:81:3a:d6:66:00:fa:73:bf:f5:
a9:b1:ea:72:36:77:3a:61:65:29:fc:f9:66:7c:42:
93:72:a1:4f:08:f0:e2:b8:e9:e6:dc:6e:e2:81:55:
93:de:66:f1:39:e6:51:11:8c:10:0f:47:a9:cc:ec:
a1:5c:2d:b4:68:43:2b:26:b0:c6:e1:02:52:f8:32:
79:5c:23:fe:6e:88:ad:2a:a3:91:07:20:af:d3:06:
8f:05:90:af:fe:6c:3f:ab:79:80:22:64:e2:57:de:
f4:e6:f3:f4:30:8d:f9:5f:56:ad:cc:8c:3f:bb:18:
f3:c9:44:b8:30:e5:6e:37:c4:f6:f3:72:2a:32:2b:
3b:17:a4:f5:a7:29:51:64:49:f2:02:92:a8:2b:68:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:D0:DE:36:6E:68:F3:0F:5A:3C:76:BC:3A:2E:2F:7B:8E:44:0E
X509v3 Authority Key Identifier:
keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/fADQ3jZuaPMPWjx2vDouL3uORA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
20:13:4d:d1:6d:de:8c:06:fb:62:5f:f0:ec:2b:c2:4d:e4:03:
82:1f:18:16:2b:8a:58:4f:ae:1b:70:e3:3c:01:df:54:21:30:
ac:4f:77:3d:a3:60:4d:df:11:c7:f3:49:40:75:51:73:80:62:
e2:fa:74:e3:18:ec:0c:33:6c:8a:27:fe:3d:94:f4:eb:39:d4:
e3:e2:6e:ca:a9:ee:bb:e8:48:95:97:6c:6a:de:05:03:97:72:
22:04:b6:1f:7c:6f:96:74:33:30:4b:56:c0:4f:bf:52:d9:24:
91:d0:d3:92:2d:42:05:e6:a9:bc:a5:82:e0:ab:03:a9:95:59:
22:7d:83:c7:d4:e5:fc:33:62:40:8c:b9:6b:d0:ce:94:0f:ed:
c7:5c:6b:75:53:81:4b:61:9d:25:68:1c:e0:7c:64:7d:2c:23:
e2:bf:f7:e8:5c:57:89:02:3b:e7:a2:73:41:50:81:59:80:23:
44:4d:87:53:3a:f6:fb:1c:d3:94:51:86:d9:0f:aa:ca:c6:fa:
45:9b:fe:d8:f1:d6:02:28:13:5e:ff:c2:dc:be:ed:1d:08:af:
1a:44:34:bc:f8:7f:ea:81:b5:ae:58:56:10:98:63:f0:d2:fb:
ff:93:5c:70:07:33:24:76:45:4e:85:90:53:d8:72:e6:e1:2d:
df:5a:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:27 2026 by rpki-client