Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7keWNGuJWU9cxRe0HNoW84Ifj9k.roa
File: 7keWNGuJWU9cxRe0HNoW84Ifj9k.roa (raw, json)
Hash identifier: sPxLFVFyd1CLo0KSVpgvL78Q3f91cF50L3Qj8oDKbuo=
Subject key identifier: EE:47:96:34:6B:89:59:4F:5C:C5:17:B4:1C:DA:16:F3:82:1F:8F:D9
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01A0542FC78789280AC25613E31487369619
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7keWNGuJWU9cxRe0HNoW84Ifj9k.roa
Signing time: Sun 30 Aug 2026 19:40:12 +0000
ROA not before: Sun 30 Aug 2026 19:40:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:54:2f:c7:87:89:28:0a:c2:56:13:e3:14:87:36:96:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Aug 30 19:40:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee4796346b89594f5cc517b41cda16f3821f8fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:3a:e4:ef:43:bd:57:1a:ad:98:97:56:4a:
b2:25:92:f7:1a:77:56:3d:5d:c0:46:66:d9:79:dc:
27:c4:5a:76:ca:e6:35:05:fb:4b:ad:71:1e:94:91:
f5:7b:29:81:e1:05:9b:7c:43:0e:15:a3:e1:fa:51:
40:24:74:b5:60:f3:97:b0:f5:c8:67:05:a2:22:68:
83:10:17:33:74:8b:55:c0:da:09:6b:86:ba:01:f6:
d2:ee:7a:7d:2f:16:9f:d2:00:90:b6:ee:59:98:fa:
42:85:d8:ec:07:25:a5:95:0e:7c:2c:e2:15:40:ee:
e8:ac:4f:d2:4d:86:33:90:5c:d3:18:62:88:af:68:
ff:d6:e5:6c:d8:07:56:39:5a:4a:e7:4a:11:8a:f2:
72:1f:85:95:13:8e:08:a0:39:45:42:08:d2:71:13:
f5:53:1b:1b:d9:e0:50:90:a6:f1:b2:5f:59:16:48:
c0:cc:f8:72:21:03:9e:94:ff:f2:f9:49:6c:10:0d:
95:96:7d:13:ac:d4:e8:3b:d4:d4:ef:e8:13:3f:7e:
7c:45:8e:0a:e3:9a:6e:71:3b:e2:94:8c:84:8e:60:
c8:5b:48:d8:31:6a:bc:c9:6f:b0:45:50:56:5a:d0:
92:06:d5:fc:5b:be:ad:b9:bd:01:2c:df:35:6b:bf:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:96:34:6B:89:59:4F:5C:C5:17:B4:1C:DA:16:F3:82:1F:8F:D9
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/7keWNGuJWU9cxRe0HNoW84Ifj9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c5:37:aa:f4:40:94:3a:09:78:39:a0:df:85:29:6d:45:86:
2d:fd:2f:3b:4d:22:85:07:51:68:fa:7e:9c:85:dc:d4:56:dd:
6a:1e:8e:46:f6:d9:54:2a:29:34:41:e5:35:b2:4d:a2:58:14:
b2:3a:55:7a:56:dd:ee:0a:b1:80:54:cf:3b:55:1b:15:30:d7:
38:ef:52:bf:42:a8:4c:d6:cb:5a:ed:8d:ef:0e:ee:fd:51:9b:
43:c1:2a:32:0a:06:ec:39:ed:2d:76:00:5b:2a:91:af:2c:fd:
22:f6:e1:53:14:65:a9:3a:2d:82:a3:8f:3e:62:2d:9e:b2:8c:
db:83:46:f9:55:5a:ec:5a:72:7a:ad:1f:6e:f2:e6:6b:c3:c4:
90:28:23:be:f2:4b:f2:94:4a:73:fb:54:74:49:ce:80:34:da:
1d:19:9a:4d:35:47:f4:3c:fe:ad:48:b8:2c:7f:95:64:0d:24:
df:e4:9f:01:f9:fc:20:df:80:a6:db:11:c0:1e:5f:36:9f:9d:
36:19:e7:26:4b:49:19:ef:1a:68:97:0f:33:3f:5e:c8:44:d8:
6e:f9:b0:9a:0a:e9:4e:f8:04:68:e9:06:15:13:a0:2a:28:42:
26:55:5e:61:21:40:91:c2:9f:ec:52:50:7d:6b:ea:c3:d1:a7:
82:58:37:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:36 2026 by rpki-client