Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/o7u9_rM58d_eJS8rqXm5Q6yp0hY.roa
File: o7u9_rM58d_eJS8rqXm5Q6yp0hY.roa (raw, json)
Hash identifier: 85JKegfS68K2mPCjggg+VXJ0GnsAJpfJYFPqh4TXPig=
Subject key identifier: A3:BB:BD:FE:B3:39:F1:DF:DE:25:2F:2B:A9:79:B9:43:AC:A9:D2:16
Certificate issuer: /CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Certificate serial: 019F2368B514E32DD45D60CC8F7D556622CE
Authority key identifier: 25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/o7u9_rM58d_eJS8rqXm5Q6yp0hY.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196615
IP address blocks: 93.175.147.0/24 maxlen: 24
2001:7fb:fd03::/48 maxlen: 48
2001:7fb:fd04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b5:14:e3:2d:d4:5d:60:cc:8f:7d:55:66:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d93a8100d4b37ed3cd8bbc1a79e9f20d064a99
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3bbbdfeb339f1dfde252f2ba979b943aca9d216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:c3:29:ae:e8:3d:d8:76:38:68:29:8b:0a:
0b:a3:32:05:07:88:b9:41:0d:70:5d:86:67:c6:35:
d8:f1:cf:80:76:84:28:ba:ed:b1:6e:e8:02:fa:a4:
8e:a3:70:05:f1:90:f2:dc:d7:b2:1a:02:64:03:a9:
a4:b1:2b:53:13:ab:cb:e0:54:9d:ec:96:7d:2e:43:
7d:2f:a8:60:b1:1b:ce:8e:14:0c:25:41:46:6a:eb:
eb:80:62:f3:42:8c:bb:6c:a6:53:c9:64:34:af:8d:
be:8d:a9:46:e4:d1:be:97:08:c4:26:a3:d5:a3:bf:
d1:7f:48:df:23:60:16:2b:df:e2:44:9b:5f:6b:bb:
bf:b2:85:b9:0c:4b:54:b6:c8:ba:cc:52:5e:38:cf:
c5:c8:68:b8:5a:47:4d:25:8f:61:1e:3d:1b:e9:dc:
a9:eb:c2:32:0d:97:d3:ab:07:44:f6:40:77:29:f8:
68:18:7a:d0:17:7e:c0:a6:37:e3:5b:d9:93:2f:cf:
08:cf:fc:53:47:e6:90:7d:9b:fd:aa:04:50:a0:de:
37:cf:47:0d:d8:c2:2b:6d:5a:b9:b9:36:cc:73:05:
d2:b6:18:80:d9:5c:ef:a6:d6:cf:ed:02:aa:c4:3a:
f9:c8:5c:3e:6f:35:9c:a6:b3:4f:48:ea:73:78:94:
cf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BB:BD:FE:B3:39:F1:DF:DE:25:2F:2B:A9:79:B9:43:AC:A9:D2:16
X509v3 Authority Key Identifier:
keyid:25:D9:3A:81:00:D4:B3:7E:D3:CD:8B:BC:1A:79:E9:F2:0D:06:4A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/o7u9_rM58d_eJS8rqXm5Q6yp0hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/Jdk6gQDUs37TzYu8Gnnp8g0GSpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.147.0/24
IPv6:
2001:7fb:fd03::-2001:7fb:fd04:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:e9:72:f1:17:b4:a4:c6:fe:c1:a7:81:f7:18:e8:5b:2c:b9:
e1:d3:77:8b:7b:af:88:65:de:75:44:12:98:8f:6a:f5:5d:0e:
19:df:1d:85:d4:c9:48:32:31:84:39:bb:9a:66:4b:a7:5d:00:
27:b6:9b:20:cc:a1:69:b1:df:cf:29:d8:77:42:58:fe:88:0b:
94:04:5a:4e:fe:a0:b5:1e:6b:6d:be:84:9a:1b:ff:31:90:9a:
f3:15:a7:c2:99:8b:2c:09:56:08:1a:53:bc:36:e0:b3:60:26:
2b:df:7c:d8:3a:f5:c5:80:3e:60:e0:0d:c9:89:72:a2:37:fc:
48:b8:f3:23:45:c0:59:f6:bc:9b:35:23:96:0d:51:5f:72:2c:
9c:18:f4:7a:67:de:e2:0b:1d:be:f9:e3:0f:29:f8:32:81:0f:
2c:3a:d9:e9:a2:dc:a4:fb:57:93:c4:2f:68:bb:02:6d:82:84:
4a:73:54:fe:aa:8d:90:b3:66:11:5b:d0:c2:c3:6f:11:b4:17:
d6:16:56:98:a0:4f:d1:52:da:4d:7d:0b:d3:c4:01:6e:24:ba:
42:ee:23:80:af:47:c7:bc:2e:12:d3:fd:d8:58:28:54:8c:a6:
e7:a2:5d:bf:24:ee:bc:10:53:ab:9d:7a:bf:6a:9f:5b:e3:2f:
08:55:8e:72
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8jaLUU4y3UXWDMj31VZiLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDkzYTgxMDBkNGIzN2VkM2NkOGJiYzFhNzllOWYyMGQw
NjRhOTkwHhcNMjYwNzAyMTUxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2JiYmRmZWIzMzlmMWRmZGUyNTJmMmJhOTc5Yjk0M2FjYTlkMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWDDKa7oPdh2OGgpiwoLozIFB4i5
QQ1wXYZnxjXY8c+AdoQouu2xbugC+qSOo3AF8ZDy3NeyGgJkA6mksStTE6vL4FSd
7JZ9LkN9L6hgsRvOjhQMJUFGauvrgGLzQoy7bKZTyWQ0r42+jalG5NG+lwjEJqPV
o7/Rf0jfI2AWK9/iRJtfa7u/soW5DEtUtsi6zFJeOM/FyGi4WkdNJY9hHj0b6dyp
68IyDZfTqwdE9kB3KfhoGHrQF37ApjfjW9mTL88Iz/xTR+aQfZv9qgRQoN43z0cN
2MIrbVq5uTbMcwXSthiA2VzvptbP7QKqxDr5yFw+bzWcprNPSOpzeJTPgQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKO7vf6zOfHf3iUvK6l5uUOsqdIWMB8GA1UdIwQY
MBaAFCXZOoEA1LN+082LvBp56fINBkqZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvbzd1OV9yTTU4ZF9lSlM4cnFYbTVRNnlwMGhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvSmRrNmdRRFVzMzdUell1OEdubnA4ZzBHU3BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAXa+TMBoE
AgACMBQwEgMHACABB/v9AwMHACABB/v9BDANBgkqhkiG9w0BAQsFAAOCAQEAWely
8Re0pMb+waeB9xjoWyy54dN3i3uviGXedUQSmI9q9V0OGd8dhdTJSDIxhDm7mmZL
p10AJ7abIMyhabHfzynYd0JY/ogLlARaTv6gtR5rbb6Emhv/MZCa8xWnwpmLLAlW
CBpTvDbgs2AmK9982Dr1xYA+YOANyYlyojf8SLjzI0XAWfa8mzUjlg1RX3IsnBj0
emfe4gsdvvnjDyn4MoEPLDrZ6aLcpPtXk8QvaLsCbYKESnNU/qqNkLNmEVvQwsNv
EbQX1hZWmKBP0VLaTX0L08QBbiS6Qu4jgK9Hx7wuEtP92FgoVIym56JdvyTuvBBT
q516v2qfW+MvCFWOcg==
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:27 2026 by rpki-client