Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/Sha7dvKI_ys3oreApv6p2F77Geg.roa
File: Sha7dvKI_ys3oreApv6p2F77Geg.roa (raw, json)
Hash identifier: uLl3N8g2CNQN041JnaOmOps7w4qWjtX3Lsc132gfkBY=
Subject key identifier: 4A:16:BB:76:F2:88:FF:2B:37:A2:B7:80:A6:FE:A9:D8:5E:FB:19:E8
Certificate issuer: /CN=e294e36796949f08f8b67f55df59396eeb678baa
Certificate serial: 019F2368D5BB4268E3F0C85CA8E28846F921
Authority key identifier: E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/Sha7dvKI_ys3oreApv6p2F77Geg.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 193.207.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:bb:42:68:e3:f0:c8:5c:a8:e2:88:46:f9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e294e36796949f08f8b67f55df59396eeb678baa
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a16bb76f288ff2b37a2b780a6fea9d85efb19e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:07:b7:cf:87:1b:88:d4:ca:33:95:e9:e7:
51:5c:b8:99:d2:10:fa:cd:b4:53:f5:a9:66:34:65:
c4:cb:d5:92:3d:86:4d:8d:2f:09:4e:e3:44:8b:24:
8a:c9:86:1f:cc:61:bb:23:ee:e1:84:c4:ae:18:a6:
bf:66:ad:2e:de:ff:a5:d3:ed:63:ab:7c:f4:0a:e2:
62:56:ec:6b:06:35:bb:fe:c5:09:3c:f7:c3:79:39:
ee:1c:fc:2b:75:26:53:eb:f1:9a:23:8a:f4:e6:2e:
fb:59:8e:bb:76:1d:57:2c:aa:75:c4:b2:93:e9:3b:
25:71:c9:b1:97:12:e4:c0:3a:6d:64:10:93:1a:84:
5f:20:2f:22:5b:1d:80:dc:84:dc:d6:bb:a3:ef:a4:
e9:47:f8:3b:3d:f8:26:2b:2f:79:99:a7:fb:bd:1a:
2a:03:39:ca:bf:92:c9:24:ee:3e:af:3e:20:a5:4b:
a1:13:ce:1f:5d:b9:1e:ad:88:9f:6d:4a:3b:0a:f6:
26:fc:10:e9:8f:35:c8:27:c1:78:0e:7a:e9:c4:c2:
1f:fe:96:15:5f:ad:9d:6a:67:9e:8d:d7:7a:72:d7:
86:fd:28:16:36:14:e9:73:86:aa:61:ed:05:4b:b8:
d2:cd:20:3b:ce:09:19:41:54:80:8d:e3:c1:39:8d:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:BB:76:F2:88:FF:2B:37:A2:B7:80:A6:FE:A9:D8:5E:FB:19:E8
X509v3 Authority Key Identifier:
keyid:E2:94:E3:67:96:94:9F:08:F8:B6:7F:55:DF:59:39:6E:EB:67:8B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pTjZ5aUnwj4tn9V31k5butni6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/Sha7dvKI_ys3oreApv6p2F77Geg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/4pTjZ5aUnwj4tn9V31k5butni6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ba:fc:a0:43:1b:62:ee:93:a5:63:65:a0:34:0f:98:0a:80:
05:01:e0:ae:70:e3:55:aa:4b:15:54:28:23:5b:f9:05:2f:7e:
26:ac:54:96:14:0b:f1:5f:c4:58:db:1a:14:d8:99:39:ca:cb:
e8:80:c6:45:af:64:98:d0:30:b2:95:fe:30:c5:58:24:1c:a4:
8b:e3:32:4c:14:86:7b:ea:43:c0:f9:ec:e6:48:5a:1a:ec:7f:
6a:61:6b:fe:6f:96:c8:88:bd:5b:15:dc:eb:d5:c0:97:48:70:
15:c1:22:16:51:5a:1b:2d:00:6f:0e:24:a6:d8:10:00:ea:69:
ab:8f:20:0f:87:85:4b:98:ab:92:7b:4f:18:50:21:ae:c8:7c:
4d:ac:87:64:67:9f:47:a2:15:88:03:26:ff:5f:2b:29:52:bb:
dc:4f:47:70:88:e6:5d:64:15:0b:5d:12:4c:11:50:02:89:65:
0b:e3:b6:c7:9c:07:16:ba:6f:37:0b:4b:9e:e7:d2:55:41:a6:
4f:77:3e:98:fa:b1:77:10:12:4f:85:7f:a3:2d:e6:b4:84:d1:
ab:f5:ce:cd:92:77:c6:d8:ee:da:80:d6:26:d5:61:98:75:c4:
6d:00:95:dc:31:c0:7b:d4:6f:de:1d:85:30:07:99:84:45:ff:
48:d1:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:52 2026 by rpki-client