Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7eSNq5Jw0K56w8SsHA4dYOfhEbk.roa
File: 7eSNq5Jw0K56w8SsHA4dYOfhEbk.roa (raw, json)
Hash identifier: FCa4/cUPCAN5kLkfuutJncgVTKbugO2AYYyxU+dYzF4=
Subject key identifier: ED:E4:8D:AB:92:70:D0:AE:7A:C3:C4:AC:1C:0E:1D:60:E7:E1:11:B9
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A08F893180A96448C8B11B223261E9C49C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7eSNq5Jw0K56w8SsHA4dYOfhEbk.roa
Signing time: Fri 11 Sep 2026 08:15:27 +0000
ROA not before: Fri 11 Sep 2026 08:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 979
IP address blocks: 77.67.126.0/23 maxlen: 24
194.77.76.0/23 maxlen: 24
212.189.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:89:31:80:a9:64:48:c8:b1:1b:22:32:61:e9:c4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 11 08:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ede48dab9270d0ae7ac3c4ac1c0e1d60e7e111b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:ec:6c:00:6e:e2:63:5d:c9:47:12:30:f0:
6f:e8:ac:70:c9:34:4b:35:f1:d0:66:9d:d0:16:c9:
a2:13:d8:b0:4f:1a:4b:86:6e:a6:d4:99:f1:20:20:
b9:25:d9:a6:57:40:2d:c9:6c:ed:cb:6d:56:d9:7f:
bc:6e:90:9c:a1:2c:8f:25:9f:b9:32:e2:2f:5d:6b:
f9:8f:92:bf:19:45:7b:79:7e:be:61:78:74:f4:73:
8e:00:74:b8:27:dc:58:98:29:4c:a5:52:9a:48:79:
68:24:09:60:da:11:98:60:38:00:e9:d9:fa:b7:dc:
03:db:dc:55:00:cb:57:5f:ae:22:97:a7:98:64:c1:
dc:c7:df:21:a3:80:e6:86:ef:e0:68:39:fd:9d:45:
df:f1:a6:4a:a3:f8:de:f4:a2:5e:25:1b:0e:0c:75:
49:c6:ac:d2:7d:99:df:88:5f:29:89:a7:1b:94:12:
8a:c9:b3:51:be:d3:86:0a:be:66:34:d6:0f:79:67:
9b:d0:75:84:e9:17:80:7d:3e:d0:8c:1f:cf:4f:9f:
6a:a7:d6:ef:31:fe:fc:54:f9:90:40:76:dc:82:dd:
47:7f:bc:78:95:bf:2c:74:ee:39:47:00:72:85:4f:
11:cd:38:41:fa:38:8b:5d:6f:42:4f:2e:6b:df:0f:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E4:8D:AB:92:70:D0:AE:7A:C3:C4:AC:1C:0E:1D:60:E7:E1:11:B9
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7eSNq5Jw0K56w8SsHA4dYOfhEbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.126.0/23
194.77.76.0/23
212.189.100.0/23
Signature Algorithm: sha256WithRSAEncryption
62:24:00:11:c6:39:2f:d8:ec:f1:6a:ee:28:22:20:0a:ef:83:
bd:3e:f1:2e:24:1d:af:dc:7e:b1:a6:95:ff:dc:ef:6a:85:c0:
0c:1d:90:67:1a:7f:c6:e3:49:17:09:89:f9:55:47:a9:8c:ad:
42:a4:e4:36:d9:be:7f:01:65:d1:0e:e8:15:9c:42:39:2f:20:
04:ef:d3:5d:6a:3d:6b:a9:ef:99:85:e5:b4:79:bf:b0:68:44:
ff:6e:43:09:6b:5f:90:d7:89:f7:2a:88:e8:e2:75:e4:cb:68:
a4:fe:b4:a5:1b:81:79:2a:26:f7:d2:3f:6f:b4:6d:bc:95:73:
ed:03:b6:64:e7:6e:36:25:77:22:3b:d6:65:8f:c8:40:a7:69:
38:00:56:71:97:00:ca:c9:9b:74:a3:0a:56:83:0a:5a:f5:8f:
e4:0f:65:ec:da:ca:96:1e:a5:2f:f3:15:f3:cc:1d:c6:9f:81:
44:51:32:d4:8f:41:35:8d:57:39:b6:8b:3a:03:14:9a:4f:5c:
eb:04:ec:bd:52:5b:07:3f:35:d8:40:df:c1:a9:4b:0d:45:2c:
84:b1:a4:d1:47:46:dd:88:f0:e2:a7:f2:d9:d7:d4:ab:77:d7:
a8:39:48:28:d3:0d:ac:48:b6:3a:2e:f8:20:ca:e4:3a:7c:39:
a5:fb:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 10:01:16 2026 by rpki-client