Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7aadFBthJDyRQokVjXSNIVlep8Y.roa
File: 7aadFBthJDyRQokVjXSNIVlep8Y.roa (raw, json)
Hash identifier: KQAgcbF+M8CSWiOXEQEIGdq+Cg4hNVChgiG9+pR/fMU=
Subject key identifier: ED:A6:9D:14:1B:61:24:3C:91:42:89:15:8D:74:8D:21:59:5E:A7:C6
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019CD1BB92B6146616787E4216D6C620E9DC
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7aadFBthJDyRQokVjXSNIVlep8Y.roa
Signing time: Mon 09 Mar 2026 08:34:16 +0000
ROA not before: Mon 09 Mar 2026 08:34:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 62.43.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:bb:92:b6:14:66:16:78:7e:42:16:d6:c6:20:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Mar 9 08:34:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eda69d141b61243c914289158d748d21595ea7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:31:d6:bc:a9:fd:19:66:c7:2f:52:a8:8c:90:
be:42:9b:5d:b8:a5:6b:c3:88:a9:ac:4e:64:e7:75:
06:4f:10:3a:02:0f:de:f3:ec:67:e9:f6:41:5f:73:
2d:a2:fb:60:80:f1:bd:fd:bc:cd:bc:3f:6f:d7:2f:
44:f3:5f:1a:5c:2c:bf:95:4b:86:a7:14:e0:30:e1:
ed:98:e2:f4:81:2b:3a:3d:e0:70:76:a1:ba:0b:f5:
c5:86:08:be:75:c8:9b:f1:33:79:db:a4:72:cc:88:
ac:dc:ae:37:21:cb:82:50:94:dd:60:a6:a6:8c:5f:
97:90:0f:75:6f:b8:f4:d6:81:2e:30:29:bd:30:3a:
a5:71:93:ac:42:3a:45:ea:dc:26:af:0c:11:60:b6:
57:fc:f6:d9:50:d2:06:1e:3b:8e:4e:c3:2d:1a:c7:
b6:48:11:b2:b9:41:bc:64:37:76:da:54:46:9f:0b:
fb:43:5c:b8:5a:73:31:eb:64:96:17:0b:d7:8f:6a:
5d:15:25:c3:1f:62:11:a9:ee:9b:db:24:25:b4:52:
b6:3f:0c:0d:93:aa:97:90:2b:fd:af:18:a1:2b:7f:
3e:bb:af:f0:17:83:09:53:0b:c2:6c:48:46:8f:98:
78:95:6d:52:b7:5e:d3:11:0e:d2:7c:7a:35:71:83:
f9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:9D:14:1B:61:24:3C:91:42:89:15:8D:74:8D:21:59:5E:A7:C6
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7aadFBthJDyRQokVjXSNIVlep8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
95:1b:79:73:a3:64:a2:36:1e:73:33:cd:05:43:ed:e5:27:cf:
ba:1a:6f:97:9b:6e:a4:9c:9a:2f:0b:f5:30:03:3d:cf:ea:a5:
44:5b:62:65:ec:8d:40:9c:86:a9:fe:11:c2:f9:05:9e:93:14:
2a:07:81:67:f7:ec:87:1c:d8:e2:89:e0:b7:a4:5a:e1:66:49:
19:1d:6e:99:3a:58:b7:d1:b0:7b:e5:69:23:07:91:01:67:e2:
b1:8c:0f:92:cf:c7:5d:06:27:62:7f:94:17:10:8b:fe:72:47:
e5:7a:f3:e0:fa:5e:fa:e1:42:f8:da:60:75:6d:0c:75:f7:92:
f2:12:0c:72:81:1c:4c:dc:c0:9c:0d:a0:83:0b:6b:0a:88:50:
53:92:60:86:1a:c2:56:e8:af:16:56:de:aa:04:0d:39:14:2e:
b1:1b:85:24:ae:38:07:2d:a4:e1:cf:6a:0e:f5:34:10:cc:13:
7a:4f:71:43:e4:af:ab:f9:b5:a7:c1:d6:62:fa:51:1c:55:92:
44:08:0c:06:ac:99:6b:db:d0:44:e2:12:3e:22:01:ea:1a:04:
d4:96:64:77:20:e4:5c:9a:31:6f:c4:5a:55:73:3d:80:93:05:
0e:1f:cb:19:4a:c9:0e:73:18:31:48:d8:f2:18:22:f6:1d:7e:
13:82:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:17:57 2026 by rpki-client