Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/qS7L8NnGpNyu32W316uLLLPpPH0.roa
File: qS7L8NnGpNyu32W316uLLLPpPH0.roa (raw, json)
Hash identifier: tdSyc1eqpE9AG20qm1HBcOdt/PWMuB8pFBOQwDAuLlI=
Subject key identifier: A9:2E:CB:F0:D9:C6:A4:DC:AE:DF:65:B7:D7:AB:8B:2C:B3:E9:3C:7D
Certificate issuer: /CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Certificate serial: 01A04CED80D06177A1FD6C20E2E665B92B7B
Authority key identifier: EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/qS7L8NnGpNyu32W316uLLLPpPH0.roa
Signing time: Sat 29 Aug 2026 09:50:28 +0000
ROA not before: Sat 29 Aug 2026 09:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 193.46.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:ed:80:d0:61:77:a1:fd:6c:20:e2:e6:65:b9:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc0aaad4e2512d4c43e16ac6da5dcd9ebbe3039
Validity
Not Before: Aug 29 09:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a92ecbf0d9c6a4dcaedf65b7d7ab8b2cb3e93c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:f4:a8:f9:c7:3e:81:ad:74:3b:ed:2a:57:
ec:08:76:57:8d:8c:c8:4f:b4:38:c2:6d:9a:2c:fd:
86:59:cd:3a:13:b6:63:67:86:a7:be:be:2c:97:ba:
3a:c5:09:6d:ab:8d:3b:e3:24:02:17:8e:bd:0b:c5:
bd:f6:bd:1a:79:f0:37:bd:2d:35:b3:cb:d8:11:74:
c3:a6:be:99:4d:f6:b8:47:9f:80:df:bc:cc:41:df:
0a:c0:29:d5:22:ab:21:04:1b:36:40:11:70:38:39:
98:9b:c9:a5:19:7b:8c:3f:80:90:ea:b5:d3:ed:d7:
35:ac:7d:21:b3:76:f9:ee:11:3f:dc:e8:d7:d6:54:
69:b3:fe:c6:29:31:29:e5:cb:42:86:7f:b4:37:94:
3a:01:36:49:1c:59:60:21:cd:b9:1c:4a:ee:3d:75:
b0:3c:02:ce:6b:b1:ba:3a:6e:e4:a4:7e:12:64:69:
95:28:56:74:bc:49:c5:ad:ae:7d:b9:3e:87:87:66:
cd:13:80:ae:14:a1:50:3b:99:87:7c:dc:7c:2f:a9:
72:3d:cc:b2:7e:f2:fe:70:cf:66:a3:89:cf:e0:a9:
61:d6:f2:89:57:d2:09:85:86:ee:38:b5:4b:40:9a:
4d:95:1f:8b:0d:09:5b:26:1c:10:9b:3d:11:33:4c:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:CB:F0:D9:C6:A4:DC:AE:DF:65:B7:D7:AB:8B:2C:B3:E9:3C:7D
X509v3 Authority Key Identifier:
keyid:EB:C0:AA:AD:4E:25:12:D4:C4:3E:16:AC:6D:A5:DC:D9:EB:BE:30:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68CqrU4lEtTEPhasbaXc2eu-MDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/qS7L8NnGpNyu32W316uLLLPpPH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b9692-8a27-4d97-9dde-66aafa7c4512/1/68CqrU4lEtTEPhasbaXc2eu-MDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a2:2e:2f:79:16:56:bc:d0:53:34:46:0c:0d:00:38:cd:5e:
ec:3a:45:58:52:8c:6d:4b:17:c2:1d:81:a9:aa:0f:d2:d2:c1:
ba:7e:96:4a:34:12:33:9b:2e:97:17:24:3d:e1:49:23:d5:93:
51:a0:bb:79:8b:80:38:60:f4:91:57:09:af:23:f2:21:55:b4:
cf:24:d3:fe:9c:cf:79:5c:be:9c:58:73:97:14:5d:52:95:9a:
11:ce:f8:40:4d:85:a4:29:12:7b:ce:9d:52:0b:b5:55:aa:d0:
d9:5d:c6:01:71:4b:f3:9c:bd:20:45:1d:02:27:bc:05:e5:73:
df:06:96:a0:55:a3:03:9e:13:33:7a:e2:a1:a5:97:9d:86:1d:
e5:16:57:f1:f9:47:14:59:cc:76:89:3e:aa:28:b9:5c:c6:11:
e5:6f:23:44:e8:5a:5c:2a:e0:d1:42:67:bd:5d:ce:91:67:14:
98:a0:32:2b:27:36:7b:e3:12:03:dc:c4:fd:6b:91:18:7c:be:
ff:13:a8:55:6b:ef:e3:cc:94:a2:d6:55:30:dc:58:c8:34:7e:
ae:bc:a6:37:e7:7f:b8:43:23:2b:73:ec:f2:6a:64:fc:c0:8b:
06:46:59:ed:10:7e:a0:85:b8:3f:a9:20:9b:0e:6d:38:9b:b5:
11:2c:ed:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:10:02 2026 by rpki-client