Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7OuApwd-jvYtWZlolppUrwbxsXE.roa
File: 7OuApwd-jvYtWZlolppUrwbxsXE.roa (raw, json)
Hash identifier: gvG6XwdDBj2hs0026f5LPgAw30LXd0bDTwsKJrfaARk=
Subject key identifier: EC:EB:80:A7:07:7E:8E:F6:2D:59:99:68:96:9A:54:AF:06:F1:B1:71
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01A13FD581C699060AC583F98035918722C7
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7OuApwd-jvYtWZlolppUrwbxsXE.roa
Signing time: Thu 15 Oct 2026 13:51:59 +0000
ROA not before: Thu 15 Oct 2026 13:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55253
IP address blocks: 31.99.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:d5:81:c6:99:06:0a:c5:83:f9:80:35:91:87:22:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Oct 15 13:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eceb80a7077e8ef62d599968969a54af06f1b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:39:00:2b:73:5f:00:74:f1:53:3d:ce:43:
54:d1:df:21:30:1f:f1:71:c0:a2:bb:33:c3:f9:67:
8a:6d:76:1d:b6:7e:42:2f:0d:e8:61:72:99:27:6b:
b3:03:89:1c:1a:b0:57:14:9b:00:3e:82:16:48:fd:
2b:aa:c0:e3:5c:52:8f:f8:9e:e9:26:fd:e1:51:d9:
13:2b:e6:19:a5:c7:17:af:40:ce:16:38:19:3a:6d:
6a:64:41:a0:bb:3b:df:76:ea:c9:56:44:62:b8:0c:
25:7a:e2:04:97:c6:a7:ea:fd:f0:56:56:d9:c2:01:
bd:f1:1b:34:56:f2:e7:1d:08:98:8a:1b:f4:6b:6c:
bc:a1:a2:5b:b7:be:4e:2a:c7:00:af:22:34:79:49:
2d:55:93:a2:30:20:22:74:5a:45:a6:90:81:3d:02:
c4:b4:c6:3e:86:c3:b3:13:5d:54:37:1e:59:1a:d3:
6d:aa:19:ca:b2:63:82:ca:b4:2f:3f:52:e0:9c:90:
56:1a:c2:6c:78:00:ac:6f:2e:d5:b6:e0:4d:be:b8:
80:ce:66:60:9f:d3:b7:37:bc:32:3e:60:e2:ec:aa:
07:79:c3:29:1c:2f:77:80:aa:f3:3e:7b:38:17:08:
08:5c:fd:09:cd:9b:b8:7d:95:e2:e6:79:f3:59:b9:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EB:80:A7:07:7E:8E:F6:2D:59:99:68:96:9A:54:AF:06:F1:B1:71
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/7OuApwd-jvYtWZlolppUrwbxsXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.99.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ce:98:6f:fd:2c:31:16:d1:f5:67:9e:1d:b2:01:ee:07:16:
26:81:a9:fe:d1:c7:98:e6:be:27:1c:4f:59:1d:85:c2:a0:7d:
12:14:e8:05:49:23:80:09:5d:81:52:28:d3:52:dd:c8:96:6a:
7c:fd:6b:c9:1e:dc:74:79:93:b6:c0:a1:b0:4b:3f:db:b8:da:
5e:0e:2a:5a:d6:0e:cf:d9:0b:53:56:f8:48:8e:f5:03:2a:3c:
d9:ec:15:84:59:d3:b9:01:16:91:c9:ff:4c:3c:66:01:51:9d:
3a:ef:23:5c:cf:be:2b:e4:7c:4c:85:92:2b:7a:e7:9f:06:37:
54:9b:a8:16:3c:7c:11:0d:7a:56:9a:1c:b0:0b:9e:ff:65:b3:
bc:b9:5b:f5:11:5b:e6:05:5e:13:fe:f6:78:61:b8:67:e2:e6:
87:78:79:d0:bc:a0:ab:c1:f4:21:a8:34:d3:20:42:33:31:1a:
cf:88:c3:d6:38:62:28:c1:c0:67:32:c7:40:1d:be:b6:e4:53:
5c:72:56:31:bf:0a:ae:ae:70:14:7e:78:3c:ac:c6:8b:f5:3a:
0b:22:2b:66:cc:f9:b7:d9:44:7e:59:dd:a9:21:ea:5c:24:8d:
0e:3c:ff:5f:fb:01:07:59:16:bc:67:58:2f:9a:5c:b3:c0:cc:
f5:c8:b0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:46:39 2026 by rpki-client