Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/7dS3f87b8rClIQfQDt7ZrLOCFN0.roa
File: 7dS3f87b8rClIQfQDt7ZrLOCFN0.roa (raw, json)
Hash identifier: jtFM+HhYEhIeATKc9POq4FW4Qi1yjd0neVJZ42IO2dk=
Subject key identifier: ED:D4:B7:7F:CE:DB:F2:B0:A5:21:07:D0:0E:DE:D9:AC:B3:82:14:DD
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019F455C488923214F0F93B538581A22C38F
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/7dS3f87b8rClIQfQDt7ZrLOCFN0.roa
Signing time: Thu 09 Jul 2026 05:31:43 +0000
ROA not before: Thu 09 Jul 2026 05:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219245
IP address blocks: 141.0.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:5c:48:89:23:21:4f:0f:93:b5:38:58:1a:22:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Jul 9 05:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edd4b77fcedbf2b0a52107d00eded9acb38214dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:15:33:f4:b2:d7:e2:aa:66:b6:3a:db:b8:
f3:f4:fd:e7:37:fa:05:2a:40:3f:d4:17:e9:f2:4c:
06:c7:5f:be:63:2d:84:d9:eb:9d:cc:a8:9f:eb:65:
e5:29:53:86:a5:99:60:ef:f1:4a:86:c1:78:96:ac:
d0:d2:83:25:59:b0:4c:7f:40:c8:da:f4:ea:45:5b:
7b:16:f4:27:23:6c:47:3b:33:69:cb:a8:ce:1d:5f:
42:7e:c9:01:5d:60:a5:75:18:9b:89:0a:52:e1:f5:
20:72:46:29:2c:6c:f5:25:0e:fb:51:d5:db:c2:8b:
9c:4c:5c:8c:d6:66:f7:5c:0f:e1:87:0d:cd:9a:55:
47:63:ed:0f:6a:54:9e:4b:fd:fa:47:2a:94:c7:8d:
47:62:3b:d2:50:5f:7d:05:9e:09:33:ac:81:be:c4:
19:aa:2e:d8:e2:60:7f:5c:1a:18:8e:df:ac:84:a6:
25:c3:3d:9b:7f:0e:da:f8:64:dc:ef:ac:2a:63:e9:
12:f1:98:36:d2:bd:87:8e:e5:59:95:8c:05:1f:5d:
32:06:6b:0e:f2:41:7e:d4:1a:4b:dc:e9:b1:47:c6:
bb:fb:f3:90:64:f6:ca:6e:48:6d:53:5d:6e:00:52:
b6:04:70:6a:06:e1:8f:96:e0:98:ad:1a:92:85:fc:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:B7:7F:CE:DB:F2:B0:A5:21:07:D0:0E:DE:D9:AC:B3:82:14:DD
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/7dS3f87b8rClIQfQDt7ZrLOCFN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.188.0/24
Signature Algorithm: sha256WithRSAEncryption
51:31:b7:7c:a7:a9:f9:4f:82:2e:ef:ce:ef:4b:4b:99:a9:bf:
80:2f:28:89:2d:2e:37:1d:f8:75:c8:16:14:13:be:f3:fe:68:
27:c5:f9:59:cb:7b:45:be:18:26:2c:40:6b:b7:e8:e9:2f:bc:
55:06:8c:5b:f6:0d:12:b8:10:e0:4e:c4:dc:78:af:82:96:a9:
9d:40:69:da:3f:49:a2:4d:56:ea:14:14:fa:05:46:13:7e:28:
4e:b3:37:28:7d:6f:ab:d0:b6:da:31:02:92:6b:45:8e:6a:f7:
af:44:0c:68:ed:ed:63:f8:81:30:d8:81:df:71:ec:b9:b6:32:
34:2f:c9:1c:45:be:85:1c:3d:c4:d7:53:1d:11:0d:fa:ff:64:
a6:20:d7:27:fd:39:ce:47:32:f4:25:43:7f:25:cf:ca:6d:0e:
a0:6f:9d:0f:0e:8b:c1:a1:11:6d:78:2f:e1:05:d9:a9:46:3d:
30:70:a7:cd:7e:60:80:c3:ba:26:2f:b8:c3:92:a3:ab:0f:19:
bf:c9:30:30:9a:da:f3:74:8c:a5:f2:c0:2d:04:3c:cf:ec:29:
6d:01:61:49:9a:96:00:ee:ec:d0:4c:8e:97:47:25:b7:9d:91:
ed:f7:8a:19:dd:29:fa:9d:0c:c5:80:f9:4f:29:b2:b8:8e:8b:
36:76:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:10 2026 by rpki-client