Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/7U3G5nALb8au_bjunLhvPF6ExOg.roa
File: 7U3G5nALb8au_bjunLhvPF6ExOg.roa (raw, json)
Hash identifier: AoGKOnyQ41n5M1mzbNoWjJr65WO25PPnBAVMagIHj2o=
Subject key identifier: ED:4D:C6:E6:70:0B:6F:C6:AE:FD:B8:EE:9C:B8:6F:3C:5E:84:C4:E8
Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Certificate serial: 01A0E870B20420ED3571095829B12DFB4DD4
Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/7U3G5nALb8au_bjunLhvPF6ExOg.roa
Signing time: Mon 28 Sep 2026 14:34:54 +0000
ROA not before: Mon 28 Sep 2026 14:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207778
IP address blocks: 157.173.76.0/24 maxlen: 24
2001:67c:3a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:70:b2:04:20:ed:35:71:09:58:29:b1:2d:fb:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d
Validity
Not Before: Sep 28 14:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed4dc6e6700b6fc6aefdb8ee9cb86f3c5e84c4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:74:01:00:db:b6:02:c3:59:e7:9d:eb:81:
3d:88:46:cf:0e:f2:34:ea:0b:0c:cb:72:66:41:c7:
b0:1c:dc:ca:73:7f:99:a8:07:c6:f3:96:ae:1f:c0:
8b:fe:78:31:02:70:85:a6:4e:2c:c3:f8:76:4b:08:
36:80:8f:31:ef:5a:ff:5e:f6:ad:d8:ab:09:40:77:
a6:81:c1:a9:53:05:81:9d:f2:82:3c:10:3d:f3:47:
2a:84:88:58:d1:a6:57:31:13:7b:9e:fb:52:4d:f0:
20:56:b2:1c:ec:fb:e3:1c:4e:0b:bb:53:da:90:b5:
ae:59:f2:28:e2:42:b2:8c:4c:15:a8:c0:bd:6d:fb:
9a:4c:d7:63:b8:6a:d3:2e:de:fa:c6:ea:75:3a:7d:
95:05:c6:42:64:15:17:7f:1c:db:cb:92:b2:42:8a:
28:1f:ee:ec:5c:eb:af:aa:3d:c1:68:68:d2:9d:36:
78:8c:6c:07:21:df:c0:7c:f5:8b:70:d4:f9:c6:1c:
fd:7c:18:51:f9:24:e4:06:01:1d:8d:d2:d5:eb:83:
7a:66:82:07:5d:15:2a:70:75:7d:0c:84:72:5c:88:
14:3c:38:46:5c:4d:69:46:0e:1b:ea:65:33:81:30:
54:e8:ab:5c:18:ac:56:ac:03:6a:05:57:cc:c4:59:
81:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4D:C6:E6:70:0B:6F:C6:AE:FD:B8:EE:9C:B8:6F:3C:5E:84:C4:E8
X509v3 Authority Key Identifier:
keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/7U3G5nALb8au_bjunLhvPF6ExOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.76.0/24
IPv6:
2001:67c:3a0::/48
Signature Algorithm: sha256WithRSAEncryption
7a:de:fa:2e:6c:24:c2:7e:2d:86:4c:dc:c3:e1:04:02:bb:c4:
a3:f4:3a:f7:52:2c:38:0f:e3:c0:97:b4:c6:20:c8:fe:80:5b:
5c:61:bf:b2:52:d2:55:b9:15:3c:ad:1c:5c:5d:bf:74:dd:99:
cb:79:b4:6e:cb:a9:ee:46:23:41:1e:97:cb:91:e3:13:00:4a:
41:35:e6:43:53:ea:38:de:8e:44:88:e8:af:39:26:22:6b:af:
d9:fd:29:c2:18:40:6c:23:3a:70:36:eb:76:3d:28:04:f6:ac:
a4:f7:c5:60:2c:34:d3:da:c9:6b:63:7c:f0:65:a1:20:1f:a4:
64:22:3c:08:ed:b2:9a:54:24:76:dc:51:a8:91:8e:90:3c:33:
89:77:c6:b3:e2:74:23:f1:63:56:e2:da:b6:a9:06:5a:4b:07:
9a:7a:42:42:15:c8:17:0b:ac:fb:f1:0c:bf:5b:b0:2a:ec:f0:
10:22:de:bc:e0:74:73:f3:bb:9f:2e:c7:87:93:dc:b6:ad:37:
07:0f:6e:18:88:95:f7:57:77:88:cb:87:38:67:a5:19:56:3f:
c8:80:87:3b:26:64:77:d7:20:1a:67:ec:73:d4:b3:be:6c:72:
07:22:58:35:76:d6:7e:c5:0a:68:ed:cc:20:a3:19:a8:1a:cf:
4b:ab:1d:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaDocLIEIO01cQlYKbEt+03UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz
YjE3NmQwHhcNMjYwOTI4MTQzNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDRkYzZlNjcwMGI2ZmM2YWVmZGI4ZWU5Y2I4NmYzYzVlODRjNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbZ0AQDbtgLDWeed64E9iEbPDvI0
6gsMy3JmQcewHNzKc3+ZqAfG85auH8CL/ngxAnCFpk4sw/h2Swg2gI8x71r/Xvat
2KsJQHemgcGpUwWBnfKCPBA980cqhIhY0aZXMRN7nvtSTfAgVrIc7PvjHE4Lu1Pa
kLWuWfIo4kKyjEwVqMC9bfuaTNdjuGrTLt76xup1On2VBcZCZBUXfxzby5KyQooo
H+7sXOuvqj3BaGjSnTZ4jGwHId/AfPWLcNT5xhz9fBhR+STkBgEdjdLV64N6ZoIH
XRUqcHV9DIRyXIgUPDhGXE1pRg4b6mUzgTBU6KtcGKxWrANqBVfMxFmBoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO1NxuZwC2/Grv247py4bzxehMToMB8GA1UdIwQY
MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt
NDRkMGQwODkxOTg5LzEvN1UzRzVuQUxiOGF1X2JqdW5MaHZQRjZFeE9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5
LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAna1MMA8E
AgACMAkDBwAgAQZ8A6AwDQYJKoZIhvcNAQELBQADggEBAHre+i5sJMJ+LYZM3MPh
BAK7xKP0OvdSLDgP48CXtMYgyP6AW1xhv7JS0lW5FTytHFxdv3Tdmct5tG7Lqe5G
I0Eel8uR4xMASkE15kNT6jjejkSI6K85JiJrr9n9KcIYQGwjOnA263Y9KAT2rKT3
xWAsNNPayWtjfPBloSAfpGQiPAjtsppUJHbcUaiRjpA8M4l3xrPidCPxY1bi2rap
BlpLB5p6QkIVyBcLrPvxDL9bsCrs8BAi3rzgdHPzu58ux4eT3LatNwcPbhiIlfdX
d4jLhzhnpRlWP8iAhzsmZHfXIBpn7HPUs75scgciWDV21n7FCmjtzCCjGagaz0ur
HWY=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:38 2026 by rpki-client