Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Oryq6FYz7DFUcTHRnMUGlwBWcyA.roa
File: Oryq6FYz7DFUcTHRnMUGlwBWcyA.roa (raw, json)
Hash identifier: 0Y5bHDj8a99AoeEfGXGioJ4GZ6BiBCopRnYqP8PZJRI=
Subject key identifier: 3A:BC:AA:E8:56:33:EC:31:54:71:31:D1:9C:C5:06:97:00:56:73:20
Certificate issuer: /CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Certificate serial: 01A145E7B174A4967722C5021A183A74D6BB
Authority key identifier: E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Oryq6FYz7DFUcTHRnMUGlwBWcyA.roa
Signing time: Fri 16 Oct 2026 18:09:34 +0000
ROA not before: Fri 16 Oct 2026 18:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218537
IP address blocks: 187.7.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e7:b1:74:a4:96:77:22:c5:02:1a:18:3a:74:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e03354666c4cb2abfd51411eca5d524b0d5be5
Validity
Not Before: Oct 16 18:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3abcaae85633ec31547131d19cc5069700567320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:db:ad:aa:20:c7:a1:56:b6:48:ae:a4:2a:95:
6d:6b:ea:1b:3d:fe:7f:56:c2:ca:dc:33:bd:c0:4c:
69:81:a9:80:68:cd:24:70:2b:ee:1d:59:f0:6b:91:
f8:e9:62:04:96:84:9d:ae:0c:05:ec:9e:f0:b4:98:
de:f6:bd:a0:3b:d3:62:9d:10:35:f9:8d:40:e6:ee:
da:8d:e4:8b:fe:c3:7f:a4:23:e8:be:15:b1:72:3a:
f3:6a:1c:fc:85:bd:64:db:be:33:8f:d6:d3:41:29:
01:01:6b:4c:52:7c:fe:37:cc:76:e7:fb:dd:39:7f:
7b:c6:75:b6:91:09:cf:8a:9f:48:14:13:40:d2:14:
e9:2d:40:2f:3c:92:7d:95:0a:2c:40:eb:28:1c:f5:
f8:12:62:60:70:af:3f:45:4b:31:de:de:2e:30:ea:
9f:cc:6a:d4:b5:44:4d:3e:d5:d7:9f:42:bc:0c:2d:
86:fe:e6:f5:d3:35:ac:6b:cc:8a:7e:db:b5:83:fe:
e6:ad:3d:70:c6:4b:29:5b:ee:16:84:0e:19:27:14:
8f:da:d2:e7:83:43:51:a3:77:bc:57:da:8e:60:0e:
8a:2f:92:47:94:3e:e1:66:40:d8:f4:08:1b:2b:4f:
4e:e6:a9:2a:74:1c:a0:e1:dc:8e:7e:5f:0a:0b:e0:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BC:AA:E8:56:33:EC:31:54:71:31:D1:9C:C5:06:97:00:56:73:20
X509v3 Authority Key Identifier:
keyid:E5:E0:33:54:66:6C:4C:B2:AB:FD:51:41:1E:CA:5D:52:4B:0D:5B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eAzVGZsTLKr_VFBHspdUksNW-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/Oryq6FYz7DFUcTHRnMUGlwBWcyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9b625d-0b62-45d9-99ef-60fb0f91997e/1/5eAzVGZsTLKr_VFBHspdUksNW-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.7.207.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:45:af:56:3b:9c:e1:25:ae:2b:3d:71:e0:3b:3f:57:2e:5d:
4e:e8:e1:1a:f4:02:40:87:2d:7e:93:62:7c:ab:72:1b:ef:42:
e7:22:0c:06:dc:d9:05:fa:1c:13:f1:f3:31:92:e1:17:ca:0b:
79:a6:3a:37:ca:0e:17:47:e2:1a:74:a1:3d:ad:d1:e5:13:e1:
33:49:4c:ad:5d:51:06:ea:da:94:f5:67:4d:ef:db:f8:5b:0f:
bc:99:38:3c:be:a4:f9:7f:71:59:51:45:75:99:8e:89:8f:1a:
c4:ee:fd:a9:b9:2e:ae:9f:97:fa:3b:72:c2:98:0f:53:c7:40:
89:15:ad:43:fe:f8:e1:61:55:4d:68:b3:46:34:92:91:18:47:
be:1d:60:75:7f:7f:64:53:00:c5:c1:03:eb:04:3b:32:e7:e2:
b0:00:10:1b:c0:89:9f:e4:44:12:5d:1d:8d:8a:64:73:31:e8:
40:47:21:72:23:11:0c:5e:29:50:ff:52:69:da:31:12:dc:a3:
29:93:ad:19:79:0e:3d:e4:4e:d3:05:e6:f8:8e:5d:dc:83:ea:
0c:08:4b:e3:b7:d6:78:13:56:2a:4f:ac:d9:9d:14:64:17:14:
5c:60:e9:3d:20:86:d7:17:c2:98:39:d9:64:f5:76:5c:a9:d9:
aa:07:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:28 2026 by rpki-client