Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7hXt0G-jAewVo9SLLBLF8mSNTRw.roa
File: 7hXt0G-jAewVo9SLLBLF8mSNTRw.roa (raw, json)
Hash identifier: RGVhqfDwwLv2X0LaWx7Lzm4mlYckos+0jolSCL9fUm4=
Subject key identifier: EE:15:ED:D0:6F:A3:01:EC:15:A3:D4:8B:2C:12:C5:F2:64:8D:4D:1C
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019EF0E71145AD7C325F991290760B8030FB
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7hXt0G-jAewVo9SLLBLF8mSNTRw.roa
Signing time: Mon 22 Jun 2026 19:55:35 +0000
ROA not before: Mon 22 Jun 2026 19:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:e7:11:45:ad:7c:32:5f:99:12:90:76:0b:80:30:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jun 22 19:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee15edd06fa301ec15a3d48b2c12c5f2648d4d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:7b:46:69:ba:00:ce:05:69:c3:fd:a7:a1:
32:23:8b:59:e3:da:1f:2e:e0:3f:34:58:23:6a:04:
5f:ec:cc:06:e7:87:7f:04:b3:67:5b:93:f8:5b:a7:
29:b9:5f:c8:17:c4:36:93:c4:3a:61:b6:f6:13:06:
9d:02:94:40:f8:98:df:73:b5:18:cb:c7:16:dd:ac:
5c:54:31:62:9b:b0:bc:c1:5f:8d:72:d3:36:10:4c:
49:d3:1b:57:e3:c6:54:72:f2:ec:7b:63:7e:61:de:
17:f4:fe:d6:79:94:85:c7:32:75:84:9c:91:de:6b:
36:da:d2:04:85:a0:3c:11:3a:cd:16:82:7c:dc:49:
91:0a:e9:63:b2:04:cd:27:b8:a7:dd:81:a7:3e:81:
f1:0d:83:47:8b:9c:ab:ed:9e:a3:2a:2a:3d:af:18:
78:87:ce:57:a2:41:8e:81:e7:08:4b:7a:76:f0:81:
96:35:04:14:f2:7a:c4:49:6f:64:d8:7b:26:28:2f:
1b:ce:4b:b3:79:79:81:47:ab:ea:fa:1a:12:f1:99:
8f:15:54:7d:fc:e7:4a:7a:cd:6f:9f:2d:91:5c:da:
6a:46:07:d7:9c:cc:67:a6:5e:2f:f4:fe:89:95:a3:
1f:09:d6:7f:08:e7:f4:29:b1:8f:0b:72:af:e9:a1:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:15:ED:D0:6F:A3:01:EC:15:A3:D4:8B:2C:12:C5:F2:64:8D:4D:1C
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7hXt0G-jAewVo9SLLBLF8mSNTRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c1:f6:93:76:e2:c6:e2:c8:68:7b:0d:ab:d7:3a:9a:6c:eb:
53:17:57:b2:ba:84:b8:54:1c:a2:8c:d8:3c:a3:aa:d0:81:39:
67:c2:87:4c:3a:15:aa:ee:dc:6c:93:68:db:fe:49:a3:43:64:
d9:fc:68:0a:1b:8d:69:3c:fb:ff:b7:67:2a:65:95:f6:70:cb:
9b:c5:34:5c:4e:10:55:87:50:b7:f6:bf:72:bf:21:b7:d1:1a:
64:47:2b:15:af:c3:1e:a6:4c:ff:ee:15:20:dd:12:3e:0b:b7:
80:7d:38:1b:f0:02:3e:e9:d3:f6:35:8c:ce:14:ed:44:a4:6c:
5e:a0:55:bd:3d:05:7c:36:c6:e3:39:f0:14:47:05:80:df:ff:
40:d5:d2:76:8d:a1:7c:4f:e3:12:b1:3f:95:5d:a8:af:45:18:
80:87:5e:1c:3f:6a:53:1f:e2:70:b0:2c:09:72:93:e5:05:2d:
3a:16:bc:a9:f0:ca:ab:f2:61:4f:68:93:b0:d8:93:10:67:e9:
08:d7:ae:2e:08:7c:63:d4:6d:8e:a7:6d:c4:a0:3c:b8:35:b9:
82:74:7f:b5:25:ee:98:da:96:35:6c:44:b8:93:6e:83:50:ba:
fa:5c:47:d4:d6:1c:a0:06:f9:94:0e:97:e6:84:4c:fa:29:64:
77:7a:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:57 2026 by rpki-client