Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/7nORkz-7qToh44AbRCrHCl9vv3E.roa
File: 7nORkz-7qToh44AbRCrHCl9vv3E.roa (raw, json)
Hash identifier: xBt5aq4rSmZs31Jle6K9vL3XZBjZD/54M66ZODWqUSs=
Subject key identifier: EE:73:91:93:3F:BB:A9:3A:21:E3:80:1B:44:2A:C7:0A:5F:6F:BF:71
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A038D6F9A4A47128E7E5CF8E626C1433F3
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/7nORkz-7qToh44AbRCrHCl9vv3E.roa
Signing time: Tue 25 Aug 2026 12:13:27 +0000
ROA not before: Tue 25 Aug 2026 12:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 185.32.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:d6:f9:a4:a4:71:28:e7:e5:cf:8e:62:6c:14:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Aug 25 12:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7391933fbba93a21e3801b442ac70a5f6fbf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:e6:e2:07:5f:1c:20:bb:cd:74:a5:19:d4:
6a:a2:b9:8f:b1:bc:01:59:2d:d3:3f:23:2b:01:e4:
e2:c8:03:e0:3f:68:0e:a0:ee:30:00:dd:4e:e2:1a:
d0:d4:48:98:34:5a:c4:be:7d:37:17:59:f2:35:82:
10:2f:54:03:29:b1:1d:1d:f4:05:07:ee:81:d5:a0:
4b:ff:9a:5a:e8:d2:27:f5:9b:d2:b9:a6:e9:90:49:
12:8f:50:d5:eb:64:f7:e0:e8:b4:54:46:b8:68:d8:
94:56:b6:e1:e1:ea:c3:aa:34:7c:ef:4e:f0:1b:5b:
c2:a1:98:d9:9e:4d:8b:e9:e6:16:06:7b:a4:a2:4d:
d4:cd:37:3c:07:01:7e:11:f6:5e:34:01:a6:36:aa:
98:11:40:37:92:4f:58:1b:78:70:32:9d:45:21:75:
17:68:bc:79:ad:9d:f4:b3:cf:c7:99:30:55:01:39:
6a:90:f3:67:d1:7c:4a:fa:05:29:af:ac:34:9e:39:
5f:58:b0:fe:c4:25:43:8f:67:c0:0c:8a:ac:2f:a7:
60:07:b7:68:8d:5e:b6:91:09:8b:48:98:a0:0e:85:
f0:47:5c:36:1a:c3:d9:97:12:98:c2:4b:35:b0:31:
65:b0:dd:10:ff:11:6c:6d:98:14:31:5d:86:4c:25:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:73:91:93:3F:BB:A9:3A:21:E3:80:1B:44:2A:C7:0A:5F:6F:BF:71
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/7nORkz-7qToh44AbRCrHCl9vv3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.89.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d5:ac:ef:02:2b:ee:12:1f:c2:5e:60:91:8a:d4:e4:4d:3c:
4c:1c:36:4d:f2:3f:21:e0:41:26:fb:e1:9e:d5:fc:53:53:53:
57:93:5e:bc:c3:a4:b3:c5:b3:f7:24:6d:66:08:64:20:39:80:
77:7d:08:7b:6d:20:ea:f0:20:8f:11:f9:bb:10:f9:8b:62:4d:
1a:f0:a4:b1:0d:d1:af:0f:1a:cc:2e:23:0c:09:c3:6c:6a:cc:
08:47:64:ab:f9:8c:85:1e:83:f5:86:32:bb:20:2d:ee:57:98:
21:92:58:63:1f:a6:18:c8:40:44:96:dc:27:77:d7:51:97:89:
b1:a4:f9:5d:5d:5e:4f:9a:59:e1:5e:96:c4:b5:00:72:25:09:
6d:70:23:cb:21:22:21:57:e9:f9:e9:45:e7:de:6b:02:5a:31:
af:fa:71:1e:51:c2:76:77:7a:4b:14:10:d2:f8:c9:86:a5:46:
e1:b8:aa:f3:79:c6:f8:c8:b8:6f:ad:af:08:e9:c1:31:6d:2a:
d1:e6:f1:22:ba:0e:b2:ba:54:44:60:c2:e2:b6:15:bf:39:6a:
ef:df:91:01:2b:64:b6:52:69:a2:3f:cd:e4:0d:18:0a:3b:d3:
11:60:41:3b:3e:03:25:b3:cc:09:d9:4f:b2:3c:d1:51:09:e8:
8f:9c:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:23 2026 by rpki-client