Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7wKdAo80Z_sEoW6sBfsot7QHbM8.roa
File: 7wKdAo80Z_sEoW6sBfsot7QHbM8.roa (raw, json)
Hash identifier: hqc+EiLeY65TYKhJZ76+RFtBz2LudbeK6fkhWVIaR1M=
Subject key identifier: EF:02:9D:02:8F:34:67:FB:04:A1:6E:AC:05:FB:28:B7:B4:07:6C:CF
Certificate issuer: /CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Certificate serial: 019F23688D88C0183974CA7F96577F14A5EE
Authority key identifier: 9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7wKdAo80Z_sEoW6sBfsot7QHbM8.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30937
IP address blocks: 46.253.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:88:c0:18:39:74:ca:7f:96:57:7f:14:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9baf3f9805072b62a65fbebbe8ff9c7f3dc4c648
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef029d028f3467fb04a16eac05fb28b7b4076ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:6d:df:68:f4:a8:ba:be:18:2a:55:ab:59:
82:58:2b:81:e5:be:82:86:7c:0f:e1:7e:7c:7a:5c:
09:cb:f0:3a:e3:29:e9:5e:8d:cb:a3:83:00:11:50:
56:a3:52:bf:e2:2d:13:0b:3e:25:b6:e7:14:5c:77:
b2:a5:b0:d8:ce:d2:5d:af:50:3c:4f:a5:f4:6a:3a:
48:d9:2a:26:c4:95:da:d3:e2:b9:b5:b4:c6:b8:c4:
67:e2:1b:7b:d4:c7:27:82:da:ce:98:b2:6c:f3:a7:
25:e2:db:62:b5:16:6a:a8:d6:9a:1e:dc:c6:24:f9:
85:92:aa:59:12:10:20:a5:00:ec:cb:e6:7a:25:5b:
d0:29:95:56:15:31:33:06:a4:f7:c4:fd:d1:33:3d:
d5:26:51:8f:18:86:6c:65:ec:d3:d9:00:f3:3c:f5:
a5:39:de:0a:38:af:57:ac:bb:5d:06:a5:24:2e:6d:
20:d1:cb:b8:87:07:85:8e:5d:03:20:c0:bb:5f:c5:
22:02:bb:2d:6b:e1:6c:95:69:80:93:2f:43:b0:1f:
5e:06:6b:78:75:ff:64:d0:e3:34:24:c7:69:3c:dc:
21:e2:47:da:ec:a1:a9:ae:ee:4b:4d:a7:cd:3c:60:
03:ce:d3:50:94:a6:cb:6d:67:71:d9:7f:51:16:5f:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:9D:02:8F:34:67:FB:04:A1:6E:AC:05:FB:28:B7:B4:07:6C:CF
X509v3 Authority Key Identifier:
keyid:9B:AF:3F:98:05:07:2B:62:A6:5F:BE:BB:E8:FF:9C:7F:3D:C4:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m68_mAUHK2KmX7676P-cfz3Exkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7wKdAo80Z_sEoW6sBfsot7QHbM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/m68_mAUHK2KmX7676P-cfz3Exkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.138.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f0:0f:7a:a3:55:4f:b1:59:59:74:e1:3e:21:7e:c7:71:d5:
63:6b:a7:ec:79:c4:c1:b2:44:7b:c2:27:ab:05:7d:d3:27:ce:
03:a9:03:30:2c:58:7b:5e:19:57:20:86:be:76:4f:44:11:24:
14:43:fb:f1:65:85:b3:5b:10:16:f6:23:a3:55:88:50:7e:48:
4f:ad:a2:58:7a:8f:f8:a8:af:f8:0a:de:ac:4e:dd:e3:e0:7e:
7e:15:fd:78:83:0e:e8:5f:8e:04:cf:d4:f0:d5:2a:5a:6c:57:
fe:00:f0:3f:ef:b1:54:49:47:4f:35:3a:23:47:8a:69:80:10:
13:00:d9:22:48:f5:b2:75:3e:da:ab:f6:30:2d:82:04:69:fe:
4e:2e:9c:46:1f:e5:ea:e6:5f:22:76:90:18:37:3b:09:6f:01:
5f:e2:3c:9f:70:26:1e:ac:30:7d:6a:9d:d9:a8:f4:6e:e2:e3:
5f:f9:cb:94:11:09:63:1e:b8:f8:e6:6b:3a:45:2a:2b:80:f7:
c7:d6:32:c4:4b:27:5b:ec:71:71:1d:00:17:4a:a3:4a:05:46:
62:ec:6d:6c:b7:0f:d0:e7:ee:7f:cf:e7:03:52:84:29:d8:f2:
e0:2e:af:d8:c4:50:a1:48:84:d5:b7:f4:1e:66:b2:2b:20:9e:
73:40:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 08:45:55 2026 by rpki-client