Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/7NZroQtAfwdYpg7hlHgEsL7L3jk.roa
File: 7NZroQtAfwdYpg7hlHgEsL7L3jk.roa (raw, json)
Hash identifier: pu57mN55iIvpDD1ZByFno7c4FdnuILbPII07O2Zp+yo=
Subject key identifier: EC:D6:6B:A1:0B:40:7F:07:58:A6:0E:E1:94:78:04:B0:BE:CB:DE:39
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01A18898FC7EA1AAAFE4F73FB3EE496C2375
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/7NZroQtAfwdYpg7hlHgEsL7L3jk.roa
Signing time: Thu 29 Oct 2026 16:58:09 +0000
ROA not before: Thu 29 Oct 2026 16:58:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34959
IP address blocks: 5.59.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:98:fc:7e:a1:aa:af:e4:f7:3f:b3:ee:49:6c:23:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Oct 29 16:58:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecd66ba10b407f0758a60ee1947804b0becbde39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:48:97:21:d4:87:ef:12:32:17:af:8d:05:
03:5e:0d:3a:3f:36:be:54:65:fc:a5:35:1c:09:2c:
02:0a:af:b9:4b:af:8a:a4:f5:79:cf:e4:ed:8c:fa:
2f:ff:59:6c:00:7e:24:78:26:b7:52:22:8a:0d:ab:
4c:15:a4:08:39:4c:35:20:d7:7f:f4:65:65:d6:25:
73:48:84:cc:1d:16:0a:b7:a0:a8:1e:b1:0f:05:b3:
56:44:5b:d3:a8:24:36:08:26:dc:35:c0:da:1e:f2:
b7:11:be:51:fe:37:72:0d:ed:30:73:8e:d0:9b:36:
ba:23:28:bb:ad:53:ec:c5:0c:54:02:15:f4:e2:cc:
3f:0a:1c:3a:fa:4d:56:54:ea:79:94:c4:a4:e0:09:
27:fa:fc:43:f1:ec:fe:e9:97:14:9c:b8:8f:3c:b3:
00:bb:0d:13:47:f1:fe:25:0c:1a:bd:1b:b6:6d:48:
6e:8b:24:33:6a:19:3c:11:97:a8:28:52:e1:d7:b4:
d8:44:b9:fe:eb:f6:bf:86:86:21:d6:11:a3:c7:b3:
fa:ee:e7:1d:6e:c9:4b:a4:1e:52:69:20:4d:4c:75:
58:99:b3:c3:92:00:b8:d5:a4:d0:d8:28:b9:12:72:
82:29:7e:54:ee:12:7d:6f:f4:86:28:67:11:84:67:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:6B:A1:0B:40:7F:07:58:A6:0E:E1:94:78:04:B0:BE:CB:DE:39
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/7NZroQtAfwdYpg7hlHgEsL7L3jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:d0:1d:ea:a4:aa:30:da:13:d7:1e:12:31:07:ff:bc:40:e8:
36:13:a2:05:44:13:66:bc:e1:4b:53:89:82:4d:98:2f:4c:08:
55:19:75:38:1b:69:be:8b:1f:96:d6:73:01:31:86:6e:0f:20:
b0:e1:ab:23:75:5c:32:98:3b:48:4d:d9:29:72:16:b2:9d:fd:
e0:da:72:6e:6e:d5:b4:c4:81:02:b0:73:2e:6b:21:7b:1e:63:
c6:cb:86:6a:a8:e1:16:3c:da:8c:2b:03:69:45:2d:5c:3c:22:
38:0b:48:f4:3b:7c:7d:aa:93:2f:ef:57:f4:bb:2d:ce:38:3d:
06:bc:04:59:e0:89:27:e1:81:6b:e3:33:c0:d8:c2:8b:7e:80:
f6:1d:85:1e:87:19:15:c2:14:4b:1d:9b:42:74:52:29:08:79:
2e:0d:c6:99:52:15:f3:f2:c5:f8:65:cb:ee:99:c9:30:8c:9f:
e6:f3:cc:26:bd:20:f6:c6:f4:54:68:f4:6b:f7:58:b1:d5:20:
78:cb:a3:d8:3d:73:28:c4:7c:18:d1:ec:c1:b5:26:60:75:ec:
4d:73:64:a0:be:9c:d6:1e:84:9f:ca:61:22:26:4f:6a:c6:b9:
f0:3e:f5:ab:77:8a:93:b5:e5:ed:1d:c0:3e:73:d1:5d:21:2d:
9e:f6:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:31:06 2026 by rpki-client