Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7WAk-v2WYq1usv62IeUH1Ss8DWI.roa
File: 7WAk-v2WYq1usv62IeUH1Ss8DWI.roa (raw, json)
Hash identifier: lVfateiafLU5mXZ0qPIj9IGWFFul1yW1ZUvskjv3XTo=
Subject key identifier: ED:60:24:FA:FD:96:62:AD:6E:B2:FE:B6:21:E5:07:D5:2B:3C:0D:62
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019CE10735081D91764110B27DEB7D77C7BB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7WAk-v2WYq1usv62IeUH1Ss8DWI.roa
Signing time: Thu 12 Mar 2026 07:51:11 +0000
ROA not before: Thu 12 Mar 2026 07:51:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201317
IP address blocks: 193.235.55.0/24 maxlen: 24
2a01:280:340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:07:35:08:1d:91:76:41:10:b2:7d:eb:7d:77:c7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 12 07:51:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed6024fafd9662ad6eb2feb621e507d52b3c0d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:f7:bd:21:54:20:39:87:5d:66:da:a1:8b:
63:a3:44:4f:4b:33:aa:76:7a:22:ab:83:24:b6:c6:
ab:ba:0b:55:b5:00:05:d6:8f:0d:0a:9b:ca:3c:99:
bf:fa:ca:72:4e:76:99:6c:2d:c6:7a:b5:90:55:7c:
22:9b:37:1f:b4:2d:ba:30:f6:1c:14:cb:3f:4f:6d:
9c:a1:5b:01:46:79:fd:cf:36:28:26:63:d6:fd:e2:
09:be:d6:07:73:6e:e0:0e:fc:16:f7:ad:3e:7d:1d:
5d:89:d5:b3:2b:c8:c3:ae:9b:9f:fc:d1:98:d9:39:
91:76:8b:07:b1:3a:3c:d3:7e:83:bf:2e:f7:bd:c4:
49:9b:7f:ab:a5:aa:b4:8b:a6:06:92:dd:61:57:2f:
2c:2a:dd:3f:09:14:7f:a8:95:3e:1c:d5:e0:08:69:
8c:dc:b8:0f:8f:ff:a7:31:92:48:b4:10:46:ee:bc:
8f:bd:73:79:f1:b9:56:93:a3:1b:78:b1:1f:31:8b:
ab:3b:65:0f:10:8d:ab:3c:ed:d0:46:16:8a:d8:b7:
61:cc:79:20:c4:8d:cc:a9:fa:85:4e:3c:83:e9:d4:
34:6b:7d:7a:66:75:2b:da:b6:7d:d5:7c:0e:0c:b2:
d4:e5:9f:39:1a:2b:1b:6d:0c:b3:26:21:28:a8:35:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:60:24:FA:FD:96:62:AD:6E:B2:FE:B6:21:E5:07:D5:2B:3C:0D:62
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7WAk-v2WYq1usv62IeUH1Ss8DWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.55.0/24
IPv6:
2a01:280:340::/48
Signature Algorithm: sha256WithRSAEncryption
14:a7:eb:4a:50:91:26:af:ab:68:49:d6:15:0a:3b:92:ca:c6:
34:65:2c:99:8d:aa:02:b1:7a:11:92:47:e6:b3:55:38:cb:1e:
9a:29:2b:1b:54:61:44:22:6b:7c:a0:c5:c4:22:35:7e:fd:49:
3b:44:a4:10:69:f8:19:2e:0e:9c:3b:6e:7c:e3:3c:b9:e2:f2:
cb:37:99:08:63:a1:12:60:8b:5f:66:ac:87:68:a1:35:ed:3a:
d3:b0:f9:2c:af:59:ed:fb:0e:c5:4f:1b:c8:38:cf:f3:30:4f:
cc:cd:01:26:10:18:61:08:75:90:0d:4f:70:42:ab:af:2b:21:
54:b8:34:63:0d:54:11:9a:81:df:77:93:5f:d3:75:41:2e:d4:
05:75:16:e0:6a:e0:17:b1:3d:6b:01:e3:dc:f0:9d:05:08:b8:
e1:8c:41:63:5a:22:c1:4a:20:02:e3:f5:8b:bf:84:21:df:9e:
16:f8:0f:54:77:3e:b6:40:b4:6b:fc:57:9e:e3:ed:51:ac:56:
4a:1b:d3:88:8c:ce:c1:aa:f9:d6:d7:03:1f:7a:71:fd:ac:37:
42:19:ab:f6:d0:be:1e:78:44:c9:c9:2c:14:55:b1:17:fb:0e:
4c:e4:4f:77:3f:06:fc:db:67:d7:6a:9a:fb:1b:47:e6:53:c8:
ea:8e:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:36:32 2026 by rpki-client