Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/7liLho7mm8qK1hKdo9pzuzDUrKI.roa
File: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (raw, json)
Hash identifier: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=
Subject key identifier: EE:58:8B:86:8E:E6:9B:CA:8A:D6:12:9D:A3:DA:73:BB:30:D4:AC:A2
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A0E460A774A17A840E0B5DE0897632BEE6
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/7liLho7mm8qK1hKdo9pzuzDUrKI.roa
Signing time: Sun 27 Sep 2026 19:38:54 +0000
ROA not before: Sun 27 Sep 2026 19:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219426
IP address blocks: 165.84.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:60:a7:74:a1:7a:84:0e:0b:5d:e0:89:76:32:be:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Sep 27 19:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee588b868ee69bca8ad6129da3da73bb30d4aca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:3c:0e:a5:ba:31:5f:5d:54:ef:31:6a:a1:
5f:3d:8d:ad:24:17:bd:d4:ad:a2:d8:50:ab:82:18:
5c:0f:23:e7:4e:a5:58:10:47:c4:c6:a0:09:27:87:
fd:39:08:e8:1b:01:a7:70:a3:07:4a:42:bc:0c:58:
15:45:19:48:3e:58:ed:7f:9a:70:59:3d:6a:e1:ff:
ed:ab:91:bc:b4:54:ed:60:0b:00:90:4f:27:b3:17:
f6:75:09:ad:c0:71:da:81:d1:68:b7:83:a3:67:8d:
88:2e:f9:c2:02:cb:fc:e8:8c:06:c0:f6:01:54:0a:
5f:da:2e:b4:d6:20:1f:4e:ab:88:83:6b:5d:26:ac:
cc:9d:a9:db:40:f0:fb:3d:70:ca:bc:2c:77:74:0d:
21:a7:11:cb:d3:29:10:73:c1:a0:f8:51:51:9d:ee:
98:35:a3:3b:a4:18:6d:1d:31:a9:41:37:44:41:74:
ff:f0:9e:29:8a:7d:e7:64:08:a6:d7:df:f1:9e:17:
9c:ce:4e:be:ce:95:a1:f1:83:a9:f7:e2:fc:75:68:
f1:cb:5d:94:d3:a7:47:15:ff:e5:b7:50:06:e7:af:
af:c1:3b:1a:ab:3b:0e:b9:2f:ec:b2:14:e4:c5:2b:
02:09:a1:e8:d6:4c:48:57:c7:9e:06:c0:b4:91:a8:
16:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:8B:86:8E:E6:9B:CA:8A:D6:12:9D:A3:DA:73:BB:30:D4:AC:A2
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/7liLho7mm8qK1hKdo9pzuzDUrKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.84.225.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fb:4a:70:40:d5:ef:5f:82:1f:56:cd:f0:bb:cf:e1:56:ad:
ee:86:a8:10:67:51:c6:aa:3b:d9:01:03:8a:bd:34:7c:ac:0e:
68:6a:e8:be:2b:c6:a1:70:47:a3:a4:69:32:90:28:e0:e0:72:
98:5e:86:15:85:0f:95:4c:5e:7a:82:1f:7b:88:45:b5:a0:3b:
5a:6a:75:43:21:4d:aa:b0:bb:98:ec:1c:67:2e:79:bc:fc:9b:
70:be:3b:20:0b:a3:8e:3b:c3:20:34:6d:5e:3d:e2:5d:bf:ef:
02:df:6f:a6:d0:c3:85:21:ac:e9:2b:59:f5:0c:47:f6:28:9b:
c1:c2:d3:61:8a:e1:d7:3e:33:8e:c3:c2:75:68:6f:c8:a6:58:
45:a3:8a:a0:e1:99:22:92:6d:0c:ab:9e:29:24:30:9f:2c:eb:
0f:9a:6c:0f:a5:1d:60:9e:91:b2:bb:ee:80:63:43:11:c1:a8:
b0:87:e3:58:2b:84:76:15:4f:5e:ba:7d:f2:28:f0:b4:2b:f5:
d0:c8:5f:dd:8c:ca:ba:2f:fb:38:2c:ae:33:6f:0e:09:0c:11:
9c:4c:ae:76:19:f3:63:6d:0a:5a:85:a5:27:09:ab:f6:4b:46:
53:1d:ef:0d:7e:bb:a3:48:8b:01:60:df:f7:4f:33:dd:3b:f8:
a6:7f:6c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:51:06 2026 by rpki-client