Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa
File: 7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa (raw, json)
Hash identifier: MQjxwKpRG2tiJ2eQhlWW1RBEP51Pbiw0toODvQ604Ak=
Subject key identifier: EE:B2:83:39:4F:D7:EC:6D:4E:C8:09:37:7E:AB:B7:28:BF:DE:2C:DA
Certificate issuer: /CN=6f235853183984479a9d69f40a194f0b8b67e165
Certificate serial: 019F2368DDCA80A80C41477122D4E0C2634B
Authority key identifier: 6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209360
IP address blocks: 46.32.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.mft
rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:ca:80:a8:0c:41:47:71:22:d4:e0:c2:63:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f235853183984479a9d69f40a194f0b8b67e165
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb283394fd7ec6d4ec809377eabb728bfde2cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:6c:18:b9:a0:e6:0b:3c:15:1f:08:e4:b6:
9b:ee:32:97:99:0a:3a:42:ad:a4:75:fd:8f:10:57:
93:d0:7a:97:fc:5a:e0:42:2f:02:ee:bd:04:f1:61:
55:d9:6c:02:44:36:d6:f6:a5:2e:db:36:83:06:27:
3c:28:89:d5:37:ee:69:a9:9b:11:2b:c6:76:69:dd:
ef:30:d5:b4:d6:93:f2:2d:fa:70:fc:3c:ea:ef:10:
b2:97:5b:39:86:26:39:8c:a0:70:7b:44:6c:9a:ae:
a8:9e:0f:f6:35:7a:89:5b:da:7a:7e:e6:48:34:4b:
4d:6d:3b:22:c6:3b:e0:99:ee:d5:d5:c1:dc:f5:6b:
bd:10:64:27:ae:cc:58:59:b6:df:ab:5f:76:09:55:
cf:00:12:0b:65:a4:0e:e1:0a:d9:6c:f8:07:70:51:
a6:03:d0:2f:e0:bb:42:29:97:af:f3:18:e7:73:52:
5e:72:43:f8:34:74:86:32:23:47:13:04:14:43:bc:
34:e7:69:5b:3d:ec:03:17:08:6a:c4:61:da:c1:91:
3f:9b:4d:af:a0:72:67:9e:da:72:d1:98:0a:2b:61:
15:bd:10:65:9d:3d:5f:d4:bb:1e:e4:24:26:0d:f1:
2f:dc:d3:dc:ce:a3:02:22:2e:ee:36:56:53:aa:41:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B2:83:39:4F:D7:EC:6D:4E:C8:09:37:7E:AB:B7:28:BF:DE:2C:DA
X509v3 Authority Key Identifier:
keyid:6F:23:58:53:18:39:84:47:9A:9D:69:F4:0A:19:4F:0B:8B:67:E1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byNYUxg5hEeanWn0ChlPC4tn4WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/7rKDOU_X7G1OyAk3fqu3KL_eLNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/byNYUxg5hEeanWn0ChlPC4tn4WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.32.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d4:8a:a7:ac:10:58:ec:34:22:03:3e:87:16:ec:a6:62:1f:
d4:e1:f5:06:f1:6a:3b:07:45:7c:30:60:48:de:77:fe:33:dd:
85:76:2e:aa:85:2a:bc:53:4d:41:a0:be:30:32:3a:95:3a:aa:
42:a9:e4:69:a2:d3:a1:0d:85:bc:0d:4e:7a:eb:02:62:5c:db:
7f:a5:18:ea:42:b3:8f:dd:e1:52:c1:d3:a9:2e:cc:ad:e7:33:
13:46:77:76:eb:cc:76:85:ad:3a:52:08:4d:5a:b0:a8:f9:de:
bd:fb:50:7c:8f:7e:59:ef:e7:38:ac:ad:7a:1b:6a:d1:7f:fb:
62:fe:7e:0e:87:f6:9d:94:9c:65:59:ef:4f:b0:a1:d6:e2:4a:
03:2f:94:31:e2:ec:f9:f7:b4:9e:21:d3:d4:78:1e:5b:80:c0:
07:e6:15:41:e5:33:a1:4b:60:7d:8e:d5:26:b1:7a:98:bf:82:
bf:5f:7b:b8:7b:20:11:9e:af:ae:b5:01:05:04:b2:2f:67:f0:
a0:02:26:59:a5:85:52:31:52:5a:d0:99:32:d4:f8:9b:7f:33:
8f:37:1e:58:33:12:34:f7:36:e4:ec:a2:f5:d1:fa:15:f7:bd:
7d:8d:62:62:ff:af:b5:a3:0a:8b:93:a6:9b:fb:9d:ea:93:96:
e5:61:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:24:45 2026 by rpki-client