Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/7auibiwx_22MxRnQ-1dVxUSmV08.roa
File: 7auibiwx_22MxRnQ-1dVxUSmV08.roa (raw, json)
Hash identifier: I5taVHa7nFeZIiRWcVfBiMHapyCP1aSHqSZAvsnJ/h0=
Subject key identifier: ED:AB:A2:6E:2C:31:FF:6D:8C:C5:19:D0:FB:57:55:C5:44:A6:57:4F
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A1479D5115E5D60FFF203C98B6B81B4D7E
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/7auibiwx_22MxRnQ-1dVxUSmV08.roa
Signing time: Sat 17 Oct 2026 02:07:34 +0000
ROA not before: Sat 17 Oct 2026 02:07:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 109.70.236.0/24 maxlen: 24
2a0c:b840:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:9d:51:15:e5:d6:0f:ff:20:3c:98:b6:b8:1b:4d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Oct 17 02:07:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edaba26e2c31ff6d8cc519d0fb5755c544a6574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:f1:56:e6:f9:f8:86:92:26:a9:be:23:8d:
1f:85:1c:2c:7c:0b:25:8d:9e:ea:86:6d:b9:1f:9a:
26:3d:e8:5a:6b:40:4b:22:27:60:92:96:ec:3a:1a:
00:81:4d:0d:24:64:4c:47:bd:fc:c7:1d:4b:19:6e:
7e:79:59:22:d0:d9:3c:98:77:92:bb:21:53:ab:d0:
49:24:ee:32:59:fa:98:54:51:e5:64:4a:30:2d:a8:
95:7f:68:28:66:60:14:51:90:4c:f2:54:f9:1c:f1:
76:c6:ec:5b:4c:f4:46:46:5b:86:7e:72:bd:94:0a:
93:db:b0:23:91:bd:7a:46:76:9e:92:be:98:df:27:
37:dd:f6:ef:28:6a:3d:7a:de:4a:be:7e:1d:10:c5:
97:50:6f:9e:0e:7c:81:36:c9:3e:a4:fb:d8:12:67:
0a:81:a9:48:86:16:df:0f:9f:7c:6d:eb:c6:b8:d8:
83:ce:b2:66:98:ae:94:49:be:51:5f:ec:10:ae:67:
99:ae:cf:f8:8b:50:5d:87:75:d9:b4:b2:a2:26:66:
b0:8c:97:1f:f9:9c:68:12:c6:1b:60:b2:80:0d:1f:
aa:e0:1e:ed:c5:bc:e7:fa:38:08:87:7f:91:69:1b:
44:8d:a5:e0:82:0b:13:3f:87:16:dc:2d:9d:3a:91:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:A2:6E:2C:31:FF:6D:8C:C5:19:D0:FB:57:55:C5:44:A6:57:4F
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/7auibiwx_22MxRnQ-1dVxUSmV08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.236.0/24
IPv6:
2a0c:b840:2::/48
Signature Algorithm: sha256WithRSAEncryption
56:bc:b0:fd:af:f5:98:16:6b:d0:cc:8e:82:c2:ab:8c:40:43:
5b:1f:dc:27:59:a6:ab:14:60:33:52:08:4b:d5:69:de:9a:af:
6b:fe:06:fe:a1:6a:9d:a4:ef:a0:2b:f4:ed:25:96:bd:c3:51:
30:a0:ad:5f:07:24:7a:d0:f5:1e:e9:e6:fb:07:83:39:74:53:
3b:82:56:d1:9d:ae:69:6c:ad:1a:f4:41:20:17:d9:73:14:6b:
04:e4:55:31:cc:14:75:50:98:96:82:36:d6:68:9f:7a:b2:32:
40:4b:e0:50:1f:ce:28:23:d8:a8:53:05:ee:f0:a1:52:4f:ac:
f2:05:e0:0d:d7:36:2b:90:b9:9a:1f:e6:dd:48:17:35:c5:c1:
94:5f:c7:df:17:cd:46:b0:34:af:d3:38:cf:72:d0:4b:b9:92:
57:ca:0f:9a:d6:27:5b:fb:5e:db:58:76:ce:9a:ff:48:91:66:
33:b2:e4:33:bc:ae:1d:71:fa:76:b0:3a:6b:bf:e0:80:9d:17:
c0:7d:bf:46:76:0f:2d:cc:31:c9:03:b0:ea:45:f6:7d:30:a5:
3d:e8:07:0d:b2:b2:10:22:b6:92:72:16:f4:28:09:87:2b:2f:
0b:3f:f1:3c:51:d3:a9:f5:89:3f:95:65:53:e1:1f:f4:ed:5d:
de:07:3f:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaFHnVEV5dYP/yA8mLa4G01+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDIyNmE3MDRjZjYyMGViMjAwMGYyN2U3YTkxOWNlNzMw
OTkxYmUwHhcNMjYxMDE3MDIwNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGFiYTI2ZTJjMzFmZjZkOGNjNTE5ZDBmYjU3NTVjNTQ0YTY1NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4PxVub5+IaSJqm+I40fhRwsfAsl
jZ7qhm25H5omPehaa0BLIidgkpbsOhoAgU0NJGRMR738xx1LGW5+eVki0Nk8mHeS
uyFTq9BJJO4yWfqYVFHlZEowLaiVf2goZmAUUZBM8lT5HPF2xuxbTPRGRluGfnK9
lAqT27Ajkb16Rnaekr6Y3yc33fbvKGo9et5Kvn4dEMWXUG+eDnyBNsk+pPvYEmcK
galIhhbfD598bevGuNiDzrJmmK6USb5RX+wQrmeZrs/4i1Bdh3XZtLKiJmawjJcf
+ZxoEsYbYLKADR+q4B7txbzn+jgIh3+RaRtEjaXgggsTP4cW3C2dOpHj2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO2rom4sMf9tjMUZ0PtXVcVEpldPMB8GA1UdIwQY
MBaAFF8CJqcEz2IOsgAPJ+epGc5zCZG+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAt
NzVkOWNlNWI4ZDljLzEvN2F1aWJpd3hfMjJNeFJuUS0xZFZ4VVNtVjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82M2VmYjgtYmYyNC00OGMyLThjNTAtNzVkOWNlNWI4ZDlj
LzEvWHdJbXB3VFBZZzZ5QUE4bjU2a1p6bk1Ka2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAbUbsMA8E
AgACMAkDBwAqDLhAAAIwDQYJKoZIhvcNAQELBQADggEBAFa8sP2v9ZgWa9DMjoLC
q4xAQ1sf3CdZpqsUYDNSCEvVad6ar2v+Bv6hap2k76Ar9O0llr3DUTCgrV8HJHrQ
9R7p5vsHgzl0UzuCVtGdrmlsrRr0QSAX2XMUawTkVTHMFHVQmJaCNtZon3qyMkBL
4FAfzigj2KhTBe7woVJPrPIF4A3XNiuQuZof5t1IFzXFwZRfx98XzUawNK/TOM9y
0Eu5klfKD5rWJ1v7XttYds6a/0iRZjOy5DO8rh1x+nawOmu/4ICdF8B9v0Z2Dy3M
MckDsOpF9n0wpT3oBw2yshAitpJyFvQoCYcrLws/8TxR06n1iT+VZVPhH/TtXd4H
P+o=
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:04:58 2026 by rpki-client