Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa
File: e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa (raw, json)
Hash identifier: 9Mx+CD/LnDGLKhs7WTJY4mZKGHAB4Ii0cAqMmkj5NmM=
Subject key identifier: 7B:BA:B2:D9:C4:ED:EA:9E:60:35:A3:01:2E:F7:3D:D9:A6:8D:73:F6
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01A134267D3604501DB35C1901EB461373C7
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa
Signing time: Tue 13 Oct 2026 07:24:59 +0000
ROA not before: Tue 13 Oct 2026 07:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 37.44.228.0/22 maxlen: 24
37.44.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:26:7d:36:04:50:1d:b3:5c:19:01:eb:46:13:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 13 07:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bbab2d9c4edea9e6035a3012ef73dd9a68d73f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:02:16:54:56:64:58:00:3b:aa:d7:e5:85:
b5:2d:65:98:a8:4a:e8:86:a7:0a:ac:69:1b:da:b0:
17:e9:2b:c2:0f:94:30:89:5b:9f:95:04:94:ff:08:
e8:a1:51:c9:55:08:06:aa:1b:41:60:a9:64:d9:ae:
e2:e4:5c:85:0f:09:c5:5c:ec:57:8f:9e:fd:96:bc:
54:55:28:18:57:2d:cd:d2:a8:8a:9f:0c:04:cc:81:
85:3c:4f:b8:30:98:5e:34:d9:b9:61:5d:ad:91:13:
ac:49:54:b9:a8:c1:45:44:a6:d8:a3:3e:cd:cd:81:
7f:a4:72:c8:34:aa:f5:b6:0c:62:3d:f0:e2:4d:50:
ee:0c:aa:18:19:61:5d:6f:19:b0:34:8a:43:02:dd:
e7:f3:68:19:0e:78:3c:6d:3c:91:38:63:38:9a:21:
bd:09:d0:76:6d:43:c4:ed:51:b2:75:96:5f:db:28:
cd:5f:7f:3e:04:88:6e:e6:5b:54:7e:54:5d:dd:53:
d9:40:e5:e9:98:fe:ff:db:01:67:f3:e3:de:e6:59:
43:15:f6:82:35:12:df:ac:6a:29:b7:4e:07:7b:83:
c4:a8:ac:4c:c1:15:f6:41:2f:e8:62:2c:e5:7d:81:
f4:a5:33:60:3b:9d:28:a4:c8:ec:9b:3a:7c:c6:05:
60:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:B2:D9:C4:ED:EA:9E:60:35:A3:01:2E:F7:3D:D9:A6:8D:73:F6
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d7:33:12:9a:27:06:a0:2b:c3:f1:02:e4:a3:72:7c:07:5f:
ff:0d:d9:52:00:fb:fe:5f:ce:43:30:66:ed:f1:83:1f:f6:47:
6f:2b:db:40:62:0f:2d:b7:56:c8:83:a1:85:60:55:5d:d2:db:
03:03:27:63:03:f8:a7:1b:91:ce:72:af:fc:97:ef:fb:25:3c:
e5:b4:fe:51:9a:c9:6b:62:19:d3:9a:6c:85:a1:d9:ab:8f:b4:
66:a0:6c:a7:a2:0e:2f:e0:30:80:46:ce:7c:26:fd:f0:73:0a:
01:29:8e:a2:5b:61:94:57:99:72:3d:3f:85:af:b2:58:bf:1c:
df:8f:a1:a5:25:cf:e7:4d:2a:9e:fb:a1:39:5e:e6:15:db:4c:
70:67:13:35:a4:02:53:a1:43:ae:73:87:d9:6b:44:03:03:59:
d9:31:01:db:2e:c0:88:14:b8:4c:9a:b6:68:b8:7a:7c:0b:7e:
9f:8b:1b:49:71:57:83:ca:dc:b2:ba:c9:57:27:e2:ba:39:02:
a3:bd:c8:c1:5e:f8:de:8d:e7:c4:02:10:af:d2:38:53:cb:c0:
94:f0:40:95:84:40:09:1c:bb:d0:42:b0:69:94:92:79:56:ac:
a2:b5:2a:d9:d6:83:b9:39:a8:a7:fe:4e:3f:c8:12:f8:7c:1e:
7e:29:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:12 2026 by rpki-client