Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa
File: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (raw, json)
Hash identifier: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=
Subject key identifier: EC:0E:4C:A3:F1:C2:4F:9B:48:62:07:B9:04:AF:49:52:13:20:E4:7C
Certificate issuer: /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial: 019E3ABC4539113D866BD5593F8D13A4D549
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa
Signing time: Mon 18 May 2026 10:57:57 +0000
ROA not before: Mon 18 May 2026 10:57:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12859
IP address blocks: 194.53.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:bc:45:39:11:3d:86:6b:d5:59:3f:8d:13:a4:d5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Validity
Not Before: May 18 10:57:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0e4ca3f1c24f9b486207b904af49521320e47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:94:8a:27:b4:b7:56:9c:5c:d7:4f:36:02:
8e:30:70:65:ad:a1:ca:b0:48:4d:94:cb:f6:b0:35:
85:36:f7:2a:c7:74:f5:e5:14:c6:f9:b9:c1:10:dc:
c9:ce:06:82:16:81:eb:b6:00:68:08:6b:6b:cb:4c:
7a:a5:91:a5:b8:f5:81:b2:0b:85:81:1f:fa:61:44:
0b:4c:73:a1:a0:e5:1a:96:ed:c6:4e:ee:d2:66:af:
fd:b3:0d:f0:68:cd:f9:06:5f:c3:b5:de:0d:e6:fb:
00:70:26:da:82:32:62:93:f1:ee:a6:01:64:0a:3e:
4b:2c:26:65:0b:c4:ab:ac:96:32:95:46:66:4d:a4:
e0:e6:1c:53:f5:11:c0:8a:c9:9d:11:0c:4f:df:a9:
0d:cb:ca:eb:82:b4:6b:39:21:6b:3e:1d:d8:9a:e5:
9b:c1:ef:8c:45:cb:a2:d8:53:cf:00:8e:1d:a2:42:
ea:60:08:f0:ac:12:7d:1a:f0:89:88:b9:a0:c8:34:
eb:be:a7:8f:28:3e:91:88:24:65:f5:3a:26:30:d9:
32:02:58:b9:af:7a:c3:a5:f1:26:15:3f:92:cd:16:
fd:e8:da:48:bf:ca:79:0d:53:45:6e:81:28:7e:51:
9a:6a:5f:0e:76:b8:52:d8:bf:85:5f:f9:ce:9d:22:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0E:4C:A3:F1:C2:4F:9B:48:62:07:B9:04:AF:49:52:13:20:E4:7C
X509v3 Authority Key Identifier:
keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e6:78:19:f3:96:40:de:15:13:76:5f:56:8f:0a:7e:61:2c:
b1:63:a7:bc:b4:cf:31:75:7d:3e:23:17:ef:87:32:56:d0:b1:
2c:19:6a:15:cd:a5:13:3f:08:74:68:f2:48:15:08:1a:ff:db:
11:8e:8c:36:6f:56:cd:04:0b:3e:77:80:57:b3:a1:45:5f:a9:
0b:1c:14:94:79:54:78:b2:c9:25:d6:28:b9:f2:79:e0:ac:16:
06:91:c4:2d:68:39:f3:51:8b:df:cc:8d:03:a3:cc:cd:41:67:
ae:8f:c0:bc:cf:00:48:29:ac:b7:16:36:3d:35:c1:3b:40:af:
d0:8b:42:b5:80:da:b3:3b:8f:ac:22:c6:5c:09:3a:80:aa:5f:
07:9c:55:b1:4a:cd:60:c9:0e:35:af:aa:1e:e0:4a:94:87:c7:
93:b4:b0:48:fa:26:15:d3:d7:f6:24:58:c2:c0:4d:55:1a:a1:
54:96:08:d4:22:dd:cd:13:e3:45:88:a3:4e:0d:56:aa:3d:12:
e3:54:46:d8:8b:32:18:ae:9e:90:72:03:4c:c9:1f:bb:cd:a7:
31:a2:7c:b5:1b:9b:ee:68:0e:9e:4b:b4:55:8c:49:9b:51:4a:
14:62:8b:77:ef:39:23:e3:ed:14:3c:d3:34:7a:28:ab:da:d3:
07:9c:39:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ46vEU5ET2Ga9VZP40TpNVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTQ2M2NjM2MzNDE0NzY2MTE1MTg5ZmQ5YWY4ZTQ0YzVk
Yjk0MTIwHhcNMjYwNTE4MTA1NzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzBlNGNhM2YxYzI0ZjliNDg2MjA3YjkwNGFmNDk1MjEzMjBlNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RqUiie0t1acXNdPNgKOMHBlraHK
sEhNlMv2sDWFNvcqx3T15RTG+bnBENzJzgaCFoHrtgBoCGtry0x6pZGluPWBsguF
gR/6YUQLTHOhoOUalu3GTu7SZq/9sw3waM35Bl/Dtd4N5vsAcCbagjJik/HupgFk
Cj5LLCZlC8SrrJYylUZmTaTg5hxT9RHAismdEQxP36kNy8rrgrRrOSFrPh3YmuWb
we+MRcui2FPPAI4dokLqYAjwrBJ9GvCJiLmgyDTrvqePKD6RiCRl9TomMNkyAli5
r3rDpfEmFT+SzRb96NpIv8p5DVNFboEoflGaal8OdrhS2L+FX/nOnSJEJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOwOTKPxwk+bSGIHuQSvSVITIOR8MB8GA1UdIwQY
MBaAFGoUY8w8NBR2YRUYn9mvjkTF25QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhSanpEdzBGSFpoRlJpZjJhLU9STVhibEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9jYzBkYzUtYjhjYy00M2MzLTg1Yjct
YWM2MmViZmIwNjE2LzEvN0E1TW9fSENUNXRJWWdlNUJLOUpVaE1nNUh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9jYzBkYzUtYjhjYy00M2MzLTg1YjctYWM2MmViZmIwNjE2
LzEvYWhSanpEdzBGSFpoRlJpZjJhLU9STVhibEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjUAMA0G
CSqGSIb3DQEBCwUAA4IBAQCw5ngZ85ZA3hUTdl9Wjwp+YSyxY6e8tM8xdX0+Ixfv
hzJW0LEsGWoVzaUTPwh0aPJIFQga/9sRjow2b1bNBAs+d4BXs6FFX6kLHBSUeVR4
sskl1ii58nngrBYGkcQtaDnzUYvfzI0Do8zNQWeuj8C8zwBIKay3FjY9NcE7QK/Q
i0K1gNqzO4+sIsZcCTqAql8HnFWxSs1gyQ41r6oe4EqUh8eTtLBI+iYV09f2JFjC
wE1VGqFUlgjUIt3NE+NFiKNODVaqPRLjVEbYizIYrp6QcgNMyR+7zacxony1G5vu
aA6eS7RVjEmbUUoUYot37zkj4+0UPNM0eiir2tMHnDnF
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:48:34 2026 by rpki-client