Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/7DUIwilmDr5d02W6GI1qHAXlta4.roa
File: 7DUIwilmDr5d02W6GI1qHAXlta4.roa (raw, json)
Hash identifier: MCwAkHYqe+E9E6tOIK6u+A6dJHIEtiQJRoXay7j/EDU=
Subject key identifier: EC:35:08:C2:29:66:0E:BE:5D:D3:65:BA:18:8D:6A:1C:05:E5:B5:AE
Certificate issuer: /CN=689701deeaf1660144f2b79bd08172884f1a213d
Certificate serial: 01A0F3231CD58A77E7E37136297ADC8D534E
Authority key identifier: 68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/7DUIwilmDr5d02W6GI1qHAXlta4.roa
Signing time: Wed 30 Sep 2026 16:25:59 +0000
ROA not before: Wed 30 Sep 2026 16:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218648
IP address blocks: 194.0.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:23:1c:d5:8a:77:e7:e3:71:36:29:7a:dc:8d:53:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689701deeaf1660144f2b79bd08172884f1a213d
Validity
Not Before: Sep 30 16:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec3508c229660ebe5dd365ba188d6a1c05e5b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:77:6c:ea:1a:d2:12:48:65:df:e9:b5:02:
12:23:71:c6:4a:06:9d:4e:06:35:3a:68:10:17:ae:
36:be:23:90:29:f2:e5:c2:94:3b:a1:fa:d1:54:87:
2e:70:c3:a3:9e:c4:e4:e1:09:b3:6d:14:36:14:24:
e5:5d:65:07:2c:f3:77:3e:3c:be:57:e0:9e:a0:36:
a9:57:b1:81:fa:0f:ef:22:ea:9e:86:67:4c:db:0c:
07:e1:fd:a6:0c:49:fa:08:a6:a5:b9:bc:82:f2:af:
54:45:33:78:f5:41:45:f9:c5:79:d3:59:d0:6d:fb:
79:9f:50:a0:25:ae:aa:95:26:46:b0:4a:96:ca:c0:
7c:f5:1a:ba:c0:de:17:4b:0c:00:f1:96:f2:cb:86:
ac:35:75:83:5c:bb:4d:4b:2b:7b:3b:1a:f8:fe:a1:
71:de:43:29:5b:66:c9:58:7f:1c:25:3c:29:ed:54:
73:9b:eb:8c:6f:52:da:12:bb:fc:32:c9:1e:60:9c:
fb:c3:4b:20:f5:88:6d:91:41:dc:1b:65:49:dc:f9:
39:ce:64:62:9c:a3:05:68:d0:aa:ae:90:20:43:cd:
90:d1:15:78:26:46:8a:b1:b2:ea:c7:0c:41:7f:5f:
a3:af:6f:59:ae:c4:f8:ea:f0:5f:76:7c:1b:0e:c7:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:35:08:C2:29:66:0E:BE:5D:D3:65:BA:18:8D:6A:1C:05:E5:B5:AE
X509v3 Authority Key Identifier:
keyid:68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/7DUIwilmDr5d02W6GI1qHAXlta4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b6:c8:29:ee:9b:f3:7a:3f:3b:70:33:3b:b6:f1:21:9c:4b:
0d:39:a2:30:08:4e:75:59:83:0f:45:98:f7:58:61:e6:7d:12:
63:e8:05:28:b3:85:84:4d:97:14:f1:49:e9:c9:a1:c0:db:c2:
3b:84:74:25:44:75:f6:91:74:ce:8f:bb:07:52:e8:90:0c:a8:
af:71:95:22:1a:13:9d:b7:dc:77:ef:1b:84:98:d3:8b:cf:27:
db:ff:3b:53:ca:62:d3:37:74:32:20:f9:69:f6:4b:7d:f9:84:
6e:1f:c4:da:85:3d:36:ba:2d:f0:8f:cb:fe:a4:91:2f:f9:33:
a6:69:dd:f6:a1:e9:ff:ab:b3:7a:78:a9:9d:7a:87:fa:26:bf:
e0:bf:dc:84:c1:2a:15:fd:17:0d:65:d6:1b:e2:5a:16:32:b1:
eb:cc:6f:78:c0:c9:20:5f:3d:ad:d9:c3:71:c7:d6:0f:b3:37:
f9:d6:7e:a3:a3:46:c1:76:b3:06:83:92:dd:30:7a:90:cb:8f:
47:e7:a2:60:76:ce:97:b6:07:35:42:d9:46:b2:2a:ce:7b:f0:
d2:90:80:3c:f9:45:3b:e9:b2:db:04:4f:2b:e4:4d:b6:1e:f9:
2e:1b:c5:b2:e3:84:1a:ad:5a:43:92:4f:51:9f:53:1a:a4:f1:
e5:68:71:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:38 2026 by rpki-client