Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7GPyPZie6jE4Hhgne38AWkPwP10.roa
File: 7GPyPZie6jE4Hhgne38AWkPwP10.roa (raw, json)
Hash identifier: dA9ne3K1Lbjq8UDkH/cC6AklBnEmilQKDAiL9L574cU=
Subject key identifier: EC:63:F2:3D:98:9E:EA:31:38:1E:18:27:7B:7F:00:5A:43:F0:3F:5D
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01A12D8FB6DFD9D901398244BC58C14A5742
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7GPyPZie6jE4Hhgne38AWkPwP10.roa
Signing time: Mon 12 Oct 2026 00:42:35 +0000
ROA not before: Mon 12 Oct 2026 00:42:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 168.199.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:8f:b6:df:d9:d9:01:39:82:44:bc:58:c1:4a:57:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Oct 12 00:42:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec63f23d989eea31381e18277b7f005a43f03f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:f9:e4:5e:77:8b:62:80:6e:e3:05:67:64:
cf:59:7f:61:28:e3:3e:58:4e:6a:ca:27:8f:17:e9:
e5:b9:ea:60:dd:79:33:5e:7c:ac:2b:4d:a9:3d:02:
e8:ba:b8:ae:f4:cd:e5:79:a6:2b:91:18:ab:5d:c9:
71:33:3c:c1:d2:a5:75:f9:90:e6:d7:5e:9d:3f:b6:
0e:99:b6:ae:24:4e:42:04:2d:da:48:89:ba:cb:0d:
bb:d4:40:87:6f:e9:53:3a:66:14:a5:cb:34:8e:18:
6c:e9:30:b6:27:77:fb:9e:ce:fa:0b:81:95:8b:19:
c0:91:69:2f:9e:29:5e:40:8b:ea:87:3e:5f:38:0c:
cd:74:5b:8f:06:d3:8a:5c:b2:fc:81:bf:52:47:29:
8d:99:75:58:03:8a:c6:f1:e6:aa:ad:c7:c2:ca:3b:
42:3b:ec:55:16:6e:8e:7d:1e:03:f0:2d:a8:5e:16:
e4:42:22:e8:7f:cd:d2:5a:35:0c:c2:09:81:6e:ba:
79:3c:df:de:d4:58:23:4c:2f:db:eb:32:64:0c:b2:
18:ba:98:57:8c:43:cd:47:5e:9c:18:29:10:2d:82:
64:1c:f1:5d:ad:6e:db:bb:47:78:53:cd:37:c9:26:
0c:40:81:db:e3:2a:d2:78:15:d6:f9:75:a3:fc:a7:
ff:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:F2:3D:98:9E:EA:31:38:1E:18:27:7B:7F:00:5A:43:F0:3F:5D
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/7GPyPZie6jE4Hhgne38AWkPwP10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.140.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ef:14:d9:b4:e2:2d:65:0c:13:67:d2:5b:11:1d:12:6b:e7:
b6:67:16:fd:3b:0d:05:73:81:f5:86:26:95:4d:4d:df:82:fc:
ab:73:b2:45:90:40:f8:6c:a2:89:15:d4:c1:0d:62:91:8b:47:
eb:3c:23:54:9c:54:25:0d:c0:5b:ab:1f:7a:3b:11:6c:56:94:
fe:93:ea:79:84:46:b3:51:a3:d7:a0:c4:7d:34:33:c0:95:1b:
ba:f7:ae:d0:bf:78:8a:cd:21:d6:a7:89:93:5a:72:10:79:0c:
34:f8:1e:a3:98:01:05:ad:9e:94:b3:b9:54:cf:5f:a9:78:3d:
0d:6b:f6:08:4c:a8:91:38:d6:11:d1:f3:cf:d3:86:62:87:b7:
e7:d7:84:c9:e2:75:27:bf:15:ce:88:f8:f5:07:52:78:5c:11:
e3:cb:6e:f9:1e:53:db:a7:f1:20:6c:0e:9f:e1:f6:5d:e6:60:
26:88:35:cb:05:f0:6c:d4:e5:7e:fa:bd:0e:3b:ef:50:6a:d2:
d1:37:5c:90:1c:d0:7b:55:12:dd:d3:8f:d4:f6:f5:45:46:a1:
b7:d4:b5:1e:d4:7d:45:db:e4:33:c8:b7:d0:51:0f:74:16:f3:
e5:94:0f:a7:78:ab:a8:42:68:b2:1e:ca:d7:da:1a:ae:a2:80:
85:56:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:08 2026 by rpki-client