Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7MZdNBqG0h6523UjbCQvh3cZtEY.roa
File: 7MZdNBqG0h6523UjbCQvh3cZtEY.roa (raw, json)
Hash identifier: xBEcvIsUS9sLmP0Eu+svv08GX3Bo4dW4OJVLx/5bhHY=
Subject key identifier: EC:C6:5D:34:1A:86:D2:1E:B9:DB:75:23:6C:24:2F:87:77:19:B4:46
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FD7A70474AB5E927472BA81302E440183
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7MZdNBqG0h6523UjbCQvh3cZtEY.roa
Signing time: Thu 06 Aug 2026 15:17:54 +0000
ROA not before: Thu 06 Aug 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 194.231.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:a7:04:74:ab:5e:92:74:72:ba:81:30:2e:44:01:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 6 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecc65d341a86d21eb9db75236c242f877719b446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:ab:18:6a:4b:00:c2:cf:60:07:fe:f0:0a:
c1:9a:92:c3:7b:c5:4e:ca:80:b0:4d:ed:ca:f4:6a:
84:e8:e0:b5:54:b1:37:a1:c3:da:dc:5c:4b:3c:d6:
ae:16:47:31:88:90:05:ec:4b:38:bb:2c:3d:f3:c6:
b9:7e:d8:ef:86:c4:d4:2d:b5:55:0b:d4:91:b6:49:
cf:6b:7f:28:0f:d6:e5:1e:57:cd:45:59:cc:5b:37:
0a:52:8b:88:fe:4d:a3:ab:5c:fb:75:db:d2:04:c4:
39:0b:cc:fe:7e:00:56:92:92:b0:e6:f2:9b:4f:3f:
50:37:03:6d:cc:14:fb:1d:da:42:70:12:0f:1a:d3:
20:19:e7:87:68:12:26:6b:e9:0e:67:8f:a9:71:53:
5a:2a:0d:9d:90:ba:16:d9:bd:39:a9:da:0f:fa:8d:
48:33:26:3f:60:84:7d:2a:d3:ee:d8:ae:63:9a:a6:
f0:f0:09:9c:b6:bc:39:40:55:b5:ba:ed:ef:29:00:
93:1f:7b:32:ec:ba:84:c1:fb:a1:42:c5:a5:22:b0:
37:ec:45:cb:3c:09:9d:04:79:40:21:83:19:26:8e:
4c:bf:b1:b8:c5:47:42:69:4c:d6:30:a3:c2:a5:e1:
e7:88:a2:e9:52:46:e1:98:c6:09:7c:93:8b:3c:1d:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C6:5D:34:1A:86:D2:1E:B9:DB:75:23:6C:24:2F:87:77:19:B4:46
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7MZdNBqG0h6523UjbCQvh3cZtEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a1:0e:f6:fa:2d:cd:a0:9d:e0:09:c4:3d:15:58:15:29:29:
df:d6:78:a9:b6:11:b0:82:6a:58:3c:96:ef:79:2b:74:a8:f0:
c9:3c:62:df:40:e6:d4:3b:14:2f:6f:ed:a2:88:d3:d0:c7:ce:
2d:28:ab:a2:7a:10:6f:04:be:7c:53:27:68:c8:3d:db:4a:4d:
e9:02:c8:b7:eb:77:eb:35:cf:87:23:5a:b1:aa:2c:da:ff:b2:
2c:a0:60:5d:63:65:35:78:70:de:98:77:72:9c:64:4c:b6:97:
18:54:fa:42:82:4a:e1:ff:35:ea:73:c7:be:a0:c1:a2:59:46:
dc:42:44:f3:cc:b6:7e:a3:2b:af:28:ad:fc:75:70:b1:49:9b:
87:be:82:2e:64:66:3d:58:a6:27:da:24:bd:27:e7:43:30:4f:
b1:85:31:ae:5a:df:9c:2b:24:8a:1d:2d:71:93:73:63:b8:7e:
a9:7f:55:9d:0a:76:32:53:d0:e4:2b:a7:4b:d0:0b:a9:35:46:
00:9a:82:c4:11:1b:0d:9b:62:36:6a:1b:15:82:12:bb:d6:fb:
7b:39:a7:ce:d5:2d:bb:3b:b7:d8:11:be:47:cf:7c:fd:3f:51:
b9:fb:73:55:65:57:44:0e:29:65:26:bc:03:9b:45:4e:be:73:
a9:13:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:23 2026 by rpki-client