Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/e7dLOjh-Bimdg1nRkiCMHRsgPZ0.roa
File: e7dLOjh-Bimdg1nRkiCMHRsgPZ0.roa (raw, json)
Hash identifier: FZDfxMVQb/vtD9QhPCWkcuqYIG4v5bPP/tyY4GXRq4M=
Subject key identifier: 7B:B7:4B:3A:38:7E:06:29:9D:83:59:D1:92:20:8C:1D:1B:20:3D:9D
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A01635ECAD095199E19A0167C6DB5BC8B9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/e7dLOjh-Bimdg1nRkiCMHRsgPZ0.roa
Signing time: Tue 18 Aug 2026 18:50:27 +0000
ROA not before: Tue 18 Aug 2026 18:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200436
IP address blocks: 5.42.217.0/24 maxlen: 24
62.3.14.0/24 maxlen: 24
91.217.166.0/24 maxlen: 24
217.18.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:16:35:ec:ad:09:51:99:e1:9a:01:67:c6:db:5b:c8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 18 18:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb74b3a387e06299d8359d192208c1d1b203d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:88:0f:29:31:12:ad:b5:0b:79:9b:85:24:
b9:94:bf:94:fa:ce:07:05:b7:88:63:8b:6c:b8:82:
98:c3:40:4a:5e:4c:17:42:16:94:eb:06:ec:43:39:
fb:d0:3a:d3:93:0a:24:fd:f6:6d:4c:fd:27:7a:d5:
84:5c:95:e8:6a:1a:92:c8:59:9b:ee:ea:d4:00:99:
58:ae:70:67:b0:25:3d:f3:43:99:13:18:b7:61:6a:
50:20:02:66:cc:cf:3a:77:0b:db:58:a1:f7:44:dd:
fa:49:45:b6:69:f6:fc:cf:02:7f:da:d0:80:02:6a:
9f:15:b6:70:d8:71:b0:f2:0d:49:3c:68:1b:4a:17:
c8:5c:15:8d:8d:b4:66:d7:4a:94:b7:26:89:c9:cf:
04:2c:65:df:71:a6:92:d8:8a:b5:7d:62:44:f2:31:
06:e6:a1:89:cd:ef:c5:75:ca:07:51:28:9f:96:85:
64:5d:8f:77:76:cb:0b:a0:34:9f:0a:79:16:fa:90:
cb:2a:7f:b9:81:fa:9d:28:80:8e:25:f0:0d:bd:8d:
70:f8:0a:19:8a:05:c9:2d:6f:0f:c4:de:f0:ca:57:
7b:58:05:38:06:23:57:99:a3:44:28:c0:ec:7d:f9:
df:fe:f7:52:dd:d4:ce:6b:b5:dd:fe:70:d5:fa:57:
a3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B7:4B:3A:38:7E:06:29:9D:83:59:D1:92:20:8C:1D:1B:20:3D:9D
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/e7dLOjh-Bimdg1nRkiCMHRsgPZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.217.0/24
62.3.14.0/24
91.217.166.0/24
217.18.90.0/24
Signature Algorithm: sha256WithRSAEncryption
35:68:96:11:8b:c0:c5:5e:7c:cb:3c:1a:38:b6:d8:3a:66:55:
47:9c:65:b7:19:7d:9f:af:3b:ac:db:98:c0:a6:53:81:a4:86:
c4:1f:b1:a2:eb:1e:a9:b1:49:a9:be:d5:19:4d:48:fc:37:4a:
43:be:b5:ce:bc:45:39:c0:07:be:aa:4b:36:94:62:8b:2d:e6:
a5:68:af:df:e1:0e:a6:20:0c:da:e3:f3:b7:48:cb:c1:74:1e:
8d:0e:8f:7c:c3:58:c3:36:2b:cc:c9:03:6e:21:c6:07:ed:47:
b2:18:df:bb:9c:f2:e7:d4:a1:f5:94:2c:f3:0a:e4:97:11:35:
da:19:34:9a:a4:34:54:ea:5d:77:f6:39:7a:3d:20:93:67:cc:
99:72:73:e1:b3:8a:f3:a2:6c:a9:dc:92:f0:78:2f:a5:a2:30:
72:bb:9d:e4:97:3d:2b:16:f0:b4:70:80:ed:19:f9:e2:a3:78:
16:10:0e:f0:72:84:7b:69:62:5b:77:d9:7a:5a:d6:23:93:99:
10:57:7b:69:55:8f:bc:40:b7:f6:bf:5f:9d:02:ce:9e:80:7a:
64:9a:83:65:3c:20:ea:f7:77:33:bc:f4:1c:06:b2:d7:67:b7:
cc:86:37:cc:8d:ba:e6:a7:25:7f:0f:4c:ff:95:2e:bc:80:56:
9d:b3:fd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:58:54 2026 by rpki-client