Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/7kdDh-pEj2k42422BoX6JBW3_Ms.roa
File: 7kdDh-pEj2k42422BoX6JBW3_Ms.roa (raw, json)
Hash identifier: 84QvPY+D41j3++xe4cxLcvuMi2We/Q8cDVLZ9oZiJC8=
Subject key identifier: EE:47:43:87:EA:44:8F:69:38:DB:8D:B6:06:85:FA:24:15:B7:FC:CB
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 01A07717C1B95797E26BEB035163C36E279B
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/7kdDh-pEj2k42422BoX6JBW3_Ms.roa
Signing time: Sun 06 Sep 2026 14:20:40 +0000
ROA not before: Sun 06 Sep 2026 14:20:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208555
IP address blocks: 80.75.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:17:c1:b9:57:97:e2:6b:eb:03:51:63:c3:6e:27:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Sep 6 14:20:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee474387ea448f6938db8db60685fa2415b7fccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:bf:1e:9b:58:9b:7d:4b:cb:a2:71:58:9f:
7c:a3:36:b3:bd:72:cc:c5:e0:1e:1d:3e:c1:0b:6e:
d8:da:cf:9c:29:08:2e:5c:c9:5c:99:61:9e:39:52:
87:13:16:78:2e:fb:3a:72:fb:25:88:94:c4:b7:db:
c7:78:e8:b5:a6:39:9f:25:05:d0:fe:26:d0:43:bc:
1c:aa:f6:f4:d8:0d:8b:06:c7:20:c0:2d:80:6b:80:
f1:02:6c:84:ae:60:da:d3:ce:c5:ce:b7:9c:53:9c:
a3:6c:53:0d:13:51:a6:6d:77:6e:4d:04:f6:df:ef:
8b:9d:cd:7b:c1:ff:5c:43:ca:3d:56:72:c4:67:5f:
be:ff:73:8a:25:80:82:d1:9c:f3:a6:33:07:5b:a0:
bd:fc:1c:a3:da:e6:c3:9c:96:f9:40:0c:4b:64:ae:
8c:fe:a8:60:26:98:94:ec:46:01:e8:42:a3:41:36:
97:fa:ab:1d:5b:9f:0a:c6:e5:94:76:1b:6e:e3:f5:
48:3c:d1:fe:4a:4c:e1:c6:b6:c8:a9:6c:f3:48:4e:
a7:d7:99:3a:1d:ae:3e:ff:ca:8e:a4:4b:f8:90:5b:
03:0e:b8:be:4a:62:bc:84:86:01:77:a3:71:1d:dd:
7b:8d:fb:f9:fc:ce:26:cd:59:2f:29:02:e0:51:c8:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:43:87:EA:44:8F:69:38:DB:8D:B6:06:85:FA:24:15:B7:FC:CB
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/7kdDh-pEj2k42422BoX6JBW3_Ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e6:5d:6a:22:29:28:4e:b1:0f:57:25:0b:d1:c1:36:e3:e7:
c7:37:4b:09:29:86:a4:9f:a7:a2:41:e0:a8:35:99:5e:59:ad:
0d:97:e9:c3:c5:9a:ca:22:01:1f:30:17:eb:11:d2:a6:86:62:
3b:34:ae:17:fa:1e:3f:61:f8:a5:d8:3d:6a:c3:7e:65:29:0e:
63:17:b9:c9:9c:3c:a7:77:a7:dd:f6:8e:26:48:45:57:9e:7d:
23:fc:c1:2a:50:9a:d9:97:bd:8d:74:81:33:a5:05:a6:ca:16:
a4:5a:86:ba:7e:a9:9a:34:63:dc:76:54:06:a0:00:ac:67:96:
19:d8:25:c8:8b:c6:eb:17:25:d8:84:25:0e:d9:72:fd:98:be:
2b:bc:44:4e:cf:2d:e3:49:b1:4e:93:c4:6d:cc:e2:89:f7:97:
1f:07:28:4a:98:82:e9:de:82:b4:a5:d1:96:c8:e7:bb:b9:82:
44:f6:e8:86:eb:ec:f5:2e:1b:67:42:e8:04:cf:bf:02:78:7a:
fa:72:e2:5b:d2:36:f8:9e:a6:0f:35:a3:e2:ce:a8:c6:29:9f:
3d:c4:0e:b0:9b:15:c4:64:01:d8:57:a3:28:ec:65:42:ec:40:
70:d9:3a:32:f0:56:54:de:f1:b9:71:92:cf:19:c7:0d:c4:3a:
b8:d0:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:53:10 2026 by rpki-client