Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x7Av8Z5SqTjz0ec3N9agm04h4qQ.roa
File: x7Av8Z5SqTjz0ec3N9agm04h4qQ.roa (raw, json)
Hash identifier: QHMni0sxujvafoudX5lhFW86uhykyckNv/k4LA6CLBg=
Subject key identifier: C7:B0:2F:F1:9E:52:A9:38:F3:D1:E7:37:37:D6:A0:9B:4E:21:E2:A4
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A13769EDAC10A5E21D15F1A3A2D6F365DA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x7Av8Z5SqTjz0ec3N9agm04h4qQ.roa
Signing time: Tue 13 Oct 2026 22:37:31 +0000
ROA not before: Tue 13 Oct 2026 22:37:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 94.103.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:69:ed:ac:10:a5:e2:1d:15:f1:a3:a2:d6:f3:65:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Oct 13 22:37:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7b02ff19e52a938f3d1e73737d6a09b4e21e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:6a:3a:91:ab:25:bb:5a:0d:a6:79:8d:1e:
b1:22:5d:71:c3:59:87:f6:05:8d:12:92:dd:85:8a:
c5:85:48:3f:fe:d4:4e:85:fb:22:bc:f6:a0:24:3e:
37:e2:31:e7:8b:dc:ec:6a:3d:a1:a8:7a:4c:6b:66:
51:57:91:bc:b6:67:6b:f4:64:e9:d5:ea:fc:65:f2:
0a:e3:ba:71:fb:0b:f4:21:ba:05:b3:82:be:34:ee:
6a:88:c5:e4:08:d2:06:2d:60:26:6f:86:26:2d:cf:
80:a6:34:07:a7:86:4a:5c:b6:ca:62:4e:4d:0d:21:
14:e0:5a:72:0d:e4:d3:c2:1e:10:92:5f:4f:a7:10:
4a:00:76:d1:35:c0:29:f3:72:4c:e9:4d:76:04:af:
a6:94:81:bb:c1:e3:48:ef:06:8d:e2:55:20:ad:a2:
65:29:99:47:24:6d:c0:a8:f5:9c:fd:84:c6:f8:84:
b4:0a:8c:b3:bb:15:ff:5e:52:4f:c7:bc:5c:35:2b:
98:4e:6b:be:bc:75:d6:ca:05:c5:dc:de:84:98:36:
9e:cd:cb:2b:bc:93:51:53:03:0a:3b:da:52:47:9a:
fe:e2:20:b5:86:cc:37:7e:28:90:eb:ba:44:47:c7:
e6:f7:31:78:96:02:a4:67:9c:8a:0f:c6:31:0d:41:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B0:2F:F1:9E:52:A9:38:F3:D1:E7:37:37:D6:A0:9B:4E:21:E2:A4
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/x7Av8Z5SqTjz0ec3N9agm04h4qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:73:19:96:77:bf:1d:cd:a5:fc:4b:bd:51:04:ae:03:1f:cd:
5f:02:59:73:42:da:44:22:89:7d:a0:50:fb:d3:72:d6:c6:d0:
23:16:7e:d2:26:72:5e:4d:de:e5:71:03:1a:d4:eb:db:3f:25:
b0:01:3b:46:a0:df:56:8a:10:ee:4f:35:3a:b5:98:a4:9d:f0:
da:9f:16:2e:0b:9f:f7:f7:ab:8e:42:22:bf:5d:9e:40:54:21:
6c:68:a1:cf:a9:bb:58:d3:6a:bf:19:a2:55:20:c3:a9:b7:79:
65:67:2b:e6:e2:fe:35:02:7b:08:7a:b3:39:e5:cd:b7:ab:7a:
7e:19:36:81:27:c1:07:b5:87:02:bd:65:d1:61:84:ac:68:c1:
a8:ca:62:73:58:19:59:f2:54:4f:93:f9:8a:eb:6a:6f:16:58:
00:89:d0:6f:32:35:d9:18:a2:dd:ff:ce:c5:7b:f4:30:c6:c3:
5d:92:55:15:7f:ca:cb:f8:2e:95:20:86:0f:5b:14:e0:e7:5f:
85:da:4c:86:9c:ca:6b:a3:e5:6f:8a:b4:19:ff:66:67:22:03:
7d:a4:c6:cd:b8:e5:30:b9:8b:39:32:d2:e6:84:b1:5c:d3:c7:
ea:29:f5:a2:cf:3d:77:cd:6a:cb:5a:51:e4:3b:eb:2f:23:2d:
9b:e1:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:22:57 2026 by rpki-client