Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7c1lqx4Oouj7dqM97v-9_pwnkIU.roa
File: 7c1lqx4Oouj7dqM97v-9_pwnkIU.roa (raw, json)
Hash identifier: sVtwOXZrWx6PYIkTITAB6OkiSzlpDEdd/j0bOXBcd60=
Subject key identifier: ED:CD:65:AB:1E:0E:A2:E8:FB:76:A3:3D:EE:FF:BD:FE:9C:27:90:85
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F236890E06A6D3BEB4746149AB4B88A92
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7c1lqx4Oouj7dqM97v-9_pwnkIU.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 185.243.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:90:e0:6a:6d:3b:eb:47:46:14:9a:b4:b8:8a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edcd65ab1e0ea2e8fb76a33deeffbdfe9c279085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:f6:62:e8:dd:7c:8c:ec:2e:7b:33:41:35:
20:d8:e2:10:6b:46:a0:42:ef:35:bb:d8:d2:a4:67:
48:79:1d:0a:86:a8:5d:dc:6a:c0:2d:fd:ce:eb:55:
7b:50:65:01:8b:9f:a4:58:d3:73:ad:23:1f:44:a6:
d8:33:ff:8e:d5:8f:19:e6:f8:af:b1:6b:22:e9:85:
3c:93:57:d9:f5:f4:53:e1:e2:66:ba:70:56:e3:df:
90:93:05:aa:f5:ba:20:d0:ae:89:df:8a:44:d2:10:
e9:65:9f:94:a3:65:c4:72:ec:3f:f9:66:85:b8:bf:
df:a3:05:45:8f:e9:4a:02:1f:2d:ed:84:bb:65:20:
4a:d1:61:70:04:d7:fa:b3:bc:8a:6c:58:0b:cf:2f:
38:c3:59:e2:f5:36:d5:c6:fe:d1:c9:57:1e:8b:74:
4f:9f:0e:73:c8:25:0c:21:bc:3b:ac:55:d6:2e:fc:
64:f2:83:8a:8c:48:be:15:7f:2a:78:73:46:f0:d7:
b8:60:1f:7c:9c:06:1d:e4:6c:e4:b7:e0:8a:62:4a:
24:fa:f0:c3:01:83:8c:7a:10:d0:e1:71:3b:3a:0e:
8d:fc:9a:83:4a:92:18:dd:31:91:73:5f:f4:21:4c:
f5:4d:01:21:9b:c9:95:fe:3c:a7:d6:09:06:da:ef:
5b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:65:AB:1E:0E:A2:E8:FB:76:A3:3D:EE:FF:BD:FE:9C:27:90:85
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7c1lqx4Oouj7dqM97v-9_pwnkIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.153.0/24
Signature Algorithm: sha256WithRSAEncryption
82:78:87:c8:13:d2:ef:94:d6:2a:4d:53:a2:2e:ce:10:4b:87:
75:2e:09:03:ef:23:bc:59:05:04:f2:10:ec:36:44:4f:ff:1e:
8f:64:c0:a5:a7:39:40:e4:af:fd:34:5c:5c:b6:c1:01:54:a4:
c3:74:3f:57:67:21:cd:65:3d:87:d4:ab:d0:05:8f:b2:7e:57:
8e:fd:24:6b:87:53:52:7a:a4:fe:7b:c6:8b:89:5e:3a:17:2f:
07:53:0c:42:17:c5:57:85:e6:52:a4:a1:12:80:38:d9:9f:ee:
a7:23:29:ed:0f:3c:dd:07:98:f2:07:c5:96:14:b6:42:ec:a7:
a5:bb:22:25:a6:a1:e6:fd:55:ca:a6:91:86:21:5b:26:12:37:
c9:1b:c9:6c:a0:63:d9:c8:bc:32:8f:4b:4e:45:05:a6:84:92:
76:5d:8f:03:f3:fe:db:65:ff:b7:cd:22:1e:cb:8b:15:1e:18:
3b:e2:cd:47:99:46:73:f0:c7:b4:73:0b:38:66:da:a9:62:59:
b7:bf:77:19:c3:1f:be:9f:0e:1b:c4:eb:39:49:54:05:1e:4f:
82:50:39:7c:e0:da:45:df:ac:e2:ac:8f:35:e9:26:e7:6c:ba:
1d:de:93:f9:84:30:50:87:d5:ab:58:6a:07:55:5e:d5:20:7a:
db:38:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:48:11 2026 by rpki-client