Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/7XxLz5qNDL2H7uPtkWtQKCrGPL4.roa
File: 7XxLz5qNDL2H7uPtkWtQKCrGPL4.roa (raw, json)
Hash identifier: ip83J6AGXhu47HDuu0xVvJdsFKRruT8e3fNUtYYItuI=
Subject key identifier: ED:7C:4B:CF:9A:8D:0C:BD:87:EE:E3:ED:91:6B:50:28:2A:C6:3C:BE
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01A0A613C01D01247B92705ED90CC07B91CB
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/7XxLz5qNDL2H7uPtkWtQKCrGPL4.roa
Signing time: Tue 15 Sep 2026 17:18:27 +0000
ROA not before: Tue 15 Sep 2026 17:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35574
IP address blocks: 185.40.12.0/22 maxlen: 24
194.187.172.0/22 maxlen: 24
194.187.174.0/24 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:13:c0:1d:01:24:7b:92:70:5e:d9:0c:c0:7b:91:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Sep 15 17:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed7c4bcf9a8d0cbd87eee3ed916b50282ac63cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:e9:93:8e:51:ed:0c:c7:e7:e2:3f:0c:93:
39:3a:b6:05:4a:b7:c4:e2:26:64:de:97:b3:fd:96:
76:9d:1b:24:f7:43:94:6c:03:cb:fd:ad:ba:d5:93:
7e:8e:3c:d5:02:43:e0:78:d0:17:a3:c4:00:39:ba:
3a:2e:b5:31:c3:2d:f7:26:a4:6e:ab:6a:fb:25:f7:
92:7b:ed:91:d9:66:94:96:53:ec:5a:9c:56:09:f9:
f7:07:77:c8:d1:0a:9c:27:f7:e0:41:71:a9:8b:4c:
45:88:a5:7f:21:e2:f4:19:b4:c1:f2:7c:b8:91:6c:
9c:c0:6d:86:90:b0:e1:64:90:39:23:3a:d8:11:d9:
fd:fc:55:8c:c9:4a:a4:39:92:1d:d4:15:63:de:43:
a4:94:fb:ed:a5:a1:8c:e6:68:00:c0:fe:c1:49:5e:
7d:e6:dd:26:49:78:0f:56:65:77:ae:ce:a2:3d:a2:
03:8d:a4:7a:cb:4e:79:cf:6a:ca:10:a1:67:8a:11:
f0:a5:63:a7:b6:7c:42:87:83:01:46:08:82:f1:c4:
6a:bf:74:ad:88:46:e7:03:0a:72:50:0b:ce:35:22:
93:c1:86:aa:70:75:55:2f:16:7c:ee:97:47:ea:4e:
99:98:0b:ec:61:09:8a:1c:ba:1d:67:c8:a0:a2:33:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7C:4B:CF:9A:8D:0C:BD:87:EE:E3:ED:91:6B:50:28:2A:C6:3C:BE
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/7XxLz5qNDL2H7uPtkWtQKCrGPL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.12.0/22
194.187.172.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:71:7e:a3:7b:83:df:5c:49:b1:04:23:73:d6:b0:e5:e7:36:
b1:1a:40:37:47:51:52:0c:0c:0d:ea:5e:92:3c:30:18:80:09:
ff:2d:07:41:68:68:8f:7c:56:2e:07:d3:9e:92:49:1b:7e:2b:
6f:37:a5:13:ff:b8:d0:90:2d:15:12:63:4d:00:d6:d7:b1:f4:
59:4f:a1:d5:10:54:59:9c:97:35:68:40:eb:f8:dd:8c:ee:c4:
4f:c8:12:11:84:99:cc:fd:eb:44:7a:30:1d:62:1d:dc:56:6e:
0d:54:51:43:20:ed:26:36:69:b2:78:26:f0:38:56:91:04:32:
75:42:cc:c1:cc:23:51:72:5a:ca:0d:84:60:9e:3c:fa:79:d1:
c9:81:fd:02:6d:d2:71:d3:bc:33:c2:54:a5:c3:42:6d:44:64:
6f:8c:47:18:52:81:85:49:2c:26:b0:c0:89:4e:ba:16:73:ba:
7c:e9:42:b5:25:7b:85:27:45:b3:79:2b:41:58:83:46:b8:36:
b2:51:59:d6:06:3d:f8:be:23:0a:1b:f5:e3:66:95:d2:5a:c3:
1a:35:d6:af:9f:f1:8c:db:22:2d:5d:a6:e9:d0:82:0e:4f:c4:
3d:5b:6e:c4:ec:f6:85:b2:f9:ab:83:36:53:b9:95:ea:40:7b:
91:24:5b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:23 2026 by rpki-client