Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/7AMox4S4nEHhmpbXvGZbnJYK6vY.roa
File: 7AMox4S4nEHhmpbXvGZbnJYK6vY.roa (raw, json)
Hash identifier: GwF5AtnzW8V2jba5G+d/080MoYMx9miVmeYXvE5ydYs=
Subject key identifier: EC:03:28:C7:84:B8:9C:41:E1:9A:96:D7:BC:66:5B:9C:96:0A:EA:F6
Certificate issuer: /CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Certificate serial: 019F23682A7AC412471376A705079509B7EE
Authority key identifier: A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/7AMox4S4nEHhmpbXvGZbnJYK6vY.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214213
IP address blocks: 185.38.173.0/24 maxlen: 24
2001:35c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 21:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:7a:c4:12:47:13:76:a7:05:07:95:09:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b9141adb4eca35175a3c2adbdd5d5398753d4c
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0328c784b89c41e19a96d7bc665b9c960aeaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:6d:10:9d:12:45:93:b6:07:e0:68:fd:5b:
e3:6b:ea:88:16:b4:ac:54:08:68:59:9f:fe:e0:58:
91:82:b1:8d:f8:12:7c:e7:01:61:72:cf:38:c6:55:
8d:5e:f3:68:99:1b:0c:66:97:23:3f:2b:30:4e:02:
c8:5b:47:b0:d8:db:3c:40:8d:55:c0:d9:29:0b:53:
bd:af:4e:01:8a:0f:7e:6a:70:1a:05:d1:27:6f:c4:
9e:3e:ae:7d:a4:df:2a:99:cf:3e:df:38:89:27:05:
cf:98:fd:1b:ec:42:49:02:fc:32:40:37:b5:04:8a:
18:66:9e:71:52:e3:70:f7:d0:45:80:67:16:1e:1a:
c3:a6:0f:90:74:1e:66:3a:3e:28:78:31:7e:26:82:
0c:dc:b1:d5:2a:b8:e7:63:8f:23:2e:7a:3f:c7:92:
fd:6a:2b:bd:68:98:9e:06:42:c8:b6:07:a7:42:a2:
f2:ae:df:d2:cf:f1:f7:3c:7b:87:8d:5a:42:79:6f:
28:14:1a:57:21:4f:4e:d3:00:fb:d7:22:42:77:86:
b9:76:54:6f:1f:75:8c:c5:19:dc:60:c1:79:2e:30:
ae:12:59:e5:d2:f0:fb:53:10:ca:08:3d:38:87:81:
c1:96:64:66:cd:8c:c2:ea:1c:11:e9:bc:69:cc:6b:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:28:C7:84:B8:9C:41:E1:9A:96:D7:BC:66:5B:9C:96:0A:EA:F6
X509v3 Authority Key Identifier:
keyid:A1:B9:14:1A:DB:4E:CA:35:17:5A:3C:2A:DB:DD:5D:53:98:75:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obkUGttOyjUXWjwq291dU5h1PUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/7AMox4S4nEHhmpbXvGZbnJYK6vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/obkUGttOyjUXWjwq291dU5h1PUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.173.0/24
IPv6:
2001:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:06:35:e7:87:fa:cf:34:90:29:23:0d:eb:13:69:7c:21:55:
a2:34:c7:9d:e2:a7:a6:7d:4d:4d:6a:3c:b7:43:71:a0:aa:2c:
05:44:ee:4b:fa:9d:2b:3a:cd:99:03:ee:8f:1d:74:fd:92:6a:
0e:60:5b:f8:e2:44:57:f8:74:c2:c9:45:12:c1:b3:9c:6e:37:
3d:f6:b2:80:a7:b9:02:87:b2:74:ac:70:e9:97:aa:5b:e7:c1:
1f:da:37:81:8d:50:6b:19:44:61:cb:52:34:1a:38:89:4f:a8:
64:42:7c:9b:55:5c:6b:a7:16:e0:07:07:be:43:de:0f:db:f0:
53:88:19:3d:d7:44:c2:15:b1:82:f5:af:03:ab:0e:80:f8:24:
5f:e0:7b:b2:47:ea:5f:1d:c4:b0:7a:6a:5f:10:f0:51:fe:64:
42:2e:68:c7:b7:0a:ea:fd:0b:a9:48:8a:aa:8f:09:a2:21:aa:
7d:74:02:2f:e1:e4:e4:ff:9e:cf:42:f9:e7:64:5a:ec:69:57:
0c:7e:e5:d7:71:f6:4c:f1:47:55:eb:35:08:c8:e3:ea:69:ab:
7e:87:b8:b0:2f:c4:69:2e:c2:4f:01:7b:18:66:ec:31:70:d6:
f7:14:0a:0f:6f:92:05:90:00:dd:4e:92:e6:83:fb:bd:93:ef:
5c:0c:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 05:20:25 2026 by rpki-client