Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NS7SGQDbzrfRzMf01GF8Z9mOIG4.roa
File: NS7SGQDbzrfRzMf01GF8Z9mOIG4.roa (raw, json)
Hash identifier: QH91enLAAmJ3FYmonshF/f15S+glu563cMJ35apywfo=
Subject key identifier: 35:2E:D2:19:00:DB:CE:B7:D1:CC:C7:F4:D4:61:7C:67:D9:8E:20:6E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019EDBC8297E79252B0F8B6F920A4695740A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NS7SGQDbzrfRzMf01GF8Z9mOIG4.roa
Signing time: Thu 18 Jun 2026 17:29:48 +0000
ROA not before: Thu 18 Jun 2026 17:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43641
IP address blocks: 188.119.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:c8:29:7e:79:25:2b:0f:8b:6f:92:0a:46:95:74:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 18 17:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=352ed21900dbceb7d1ccc7f4d4617c67d98e206e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:3c:f5:e2:c6:2d:98:07:18:60:9b:e4:e4:
66:52:b3:77:5e:24:93:29:f5:a6:62:16:85:96:24:
0c:ce:df:9d:60:6f:e0:a8:2d:a3:09:5d:1f:7f:3c:
f1:12:87:20:12:14:d5:07:8e:a1:3d:6b:d0:f9:33:
c1:01:b5:69:8c:27:33:45:cd:49:d1:41:47:cf:13:
c3:d8:9e:fb:2b:70:fd:a4:e1:a1:03:66:fa:76:ab:
87:0c:ec:25:43:3e:58:19:eb:77:92:2e:1b:2e:3f:
63:77:e7:b2:d7:ae:7c:c4:af:20:a0:41:31:d1:4c:
57:e5:fc:36:2c:83:69:83:14:a2:01:a9:95:73:d5:
96:7f:4e:45:8a:b8:b8:79:d9:27:bd:2c:01:9a:5c:
82:d7:2f:91:83:98:70:79:1f:50:6e:03:30:59:d4:
34:c8:35:5e:62:58:46:1f:85:b0:3e:36:e9:cf:f3:
21:e0:14:a3:d5:01:a3:c4:a3:e4:12:94:ee:c5:44:
58:1b:a2:c6:0d:4e:d8:34:5b:03:b0:d2:79:6f:bb:
94:e1:ee:07:db:36:82:52:53:4f:30:77:5a:cf:e1:
45:67:6d:03:96:00:b1:1c:38:82:bb:f1:c3:95:6b:
9e:d4:71:5f:60:80:f1:57:2e:8f:6f:77:ee:d6:91:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:D2:19:00:DB:CE:B7:D1:CC:C7:F4:D4:61:7C:67:D9:8E:20:6E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/NS7SGQDbzrfRzMf01GF8Z9mOIG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.113.0/24
Signature Algorithm: sha256WithRSAEncryption
41:78:14:ad:1a:e8:96:1d:71:4c:5a:cb:ad:2d:1f:24:21:95:
3f:a5:91:33:23:73:39:d2:3b:a2:5f:35:2a:5b:1e:66:9c:ac:
f6:cb:16:2d:37:4a:2d:3a:fd:bc:70:b2:c9:68:2d:4d:1a:e0:
8c:7e:7a:65:c0:46:4c:15:ff:fd:0b:1b:46:9d:1d:8b:75:d8:
0a:a6:dc:f2:61:9f:db:af:c7:f4:f4:f3:3b:35:01:38:a3:c1:
80:de:94:d0:ee:48:b3:6a:7c:5b:ac:5f:e2:85:03:38:5f:62:
4e:08:8c:4e:ca:bf:9c:b3:75:d7:e4:a1:c2:ba:38:fd:3f:cd:
aa:b8:3c:4b:75:6e:e6:98:4d:d9:7b:d0:7b:4e:39:a7:b2:7a:
ef:18:56:b8:09:03:96:85:30:3c:30:5b:5b:eb:7a:10:d1:cf:
1c:06:20:5f:4a:3d:4e:57:59:51:31:c1:ae:a4:d9:e2:8a:d3:
13:77:20:71:c7:f7:ae:40:d3:98:83:1b:ec:91:b3:66:47:6c:
5d:2b:37:a2:ec:21:63:de:6a:cf:8d:b5:47:3c:d3:29:5d:3d:
a0:4d:92:f1:4a:b2:78:4a:d2:98:26:03:0c:4c:2d:50:49:7c:
c2:dc:c2:ed:44:9d:2b:6a:e5:b5:28:9c:70:3d:47:4c:84:84:
72:5b:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:55 2026 by rpki-client