Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/P7qWrs2V2AQezp3eeUtgLDcatjI.roa
File: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (raw, json)
Hash identifier: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=
Subject key identifier: 3F:BA:96:AE:CD:95:D8:04:1E:CE:9D:DE:79:4B:60:2C:37:1A:B6:32
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 019C3D4450D640E11C3567B14322F106507C
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/P7qWrs2V2AQezp3eeUtgLDcatjI.roa
Signing time: Sun 08 Feb 2026 12:40:13 +0000
ROA not before: Sun 08 Feb 2026 12:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 109.95.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:3d:44:50:d6:40:e1:1c:35:67:b1:43:22:f1:06:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Feb 8 12:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3fba96aecd95d8041ece9dde794b602c371ab632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2e:6f:22:aa:88:2f:a0:0e:b5:b8:b0:e9:be:
db:b9:2f:36:04:a4:f7:75:b5:a1:c6:6a:9a:7c:a5:
d0:0e:fe:78:67:a7:2c:66:9c:09:ed:9e:fd:38:72:
8a:43:e9:d5:d6:9e:fd:ad:94:cb:3c:cd:6b:5d:35:
a1:6a:1b:bf:4b:b5:eb:33:49:4b:69:5f:4f:7f:fd:
fe:41:ec:7c:23:92:50:cf:d2:f6:a2:31:b9:f4:50:
ce:3d:3d:ba:e0:62:bf:e1:ed:6e:8c:fa:15:4f:5d:
ef:06:04:60:4c:df:a1:64:2d:3c:09:1c:97:65:53:
65:5d:af:df:52:54:84:6a:d0:c3:f1:bd:5c:31:65:
b6:e5:33:54:ee:71:37:57:93:8d:78:64:3f:72:ea:
1e:32:28:14:ad:df:aa:00:2f:33:5d:8f:a4:70:67:
f8:5e:10:20:37:fa:91:da:4b:b7:25:92:91:c2:7c:
42:fa:e2:9f:45:f0:1a:f0:fd:f3:af:0a:76:60:9d:
06:e4:4a:a5:59:96:a4:4f:19:4b:9c:75:9d:aa:ff:
18:37:eb:54:15:c3:7e:b3:9d:b3:9b:fd:04:9a:77:
74:5c:ed:38:42:a1:31:47:41:05:68:93:71:9c:8c:
25:4b:8a:8b:e1:bb:d6:db:06:09:00:67:16:2b:10:
c0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BA:96:AE:CD:95:D8:04:1E:CE:9D:DE:79:4B:60:2C:37:1A:B6:32
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/P7qWrs2V2AQezp3eeUtgLDcatjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.186.0/23
Signature Algorithm: sha256WithRSAEncryption
32:08:8e:11:b8:35:b6:8f:8d:83:cc:73:c8:13:9a:67:b3:2b:
87:13:c4:56:58:3f:ae:2c:0c:96:5f:dc:dd:46:75:b9:ce:eb:
75:08:88:02:e8:b5:93:4a:b1:c0:b5:b4:75:99:50:a4:f4:a9:
3e:a8:ed:26:aa:43:3f:e6:c5:2b:9c:67:b2:81:d4:17:53:95:
02:ad:d7:b6:f9:c0:96:ef:da:d0:bd:5b:26:92:fc:55:3e:82:
af:c0:c1:64:3d:48:1b:b9:63:53:b1:75:8f:46:b5:b3:c4:b5:
b1:78:38:75:71:c8:05:a7:73:4e:ba:52:6c:bf:91:b1:8c:ae:
6f:4b:43:9c:c7:c0:13:7f:38:bd:4b:e8:15:9f:38:fb:d8:ed:
e3:9e:e2:dc:29:41:12:f8:31:1c:a5:a2:44:39:c0:1b:78:0b:
33:a4:61:75:53:89:0d:01:1b:d3:56:60:3b:1b:90:7e:c6:89:
a1:07:e2:62:4d:1a:70:50:40:83:8a:bf:c8:ff:7e:8b:85:44:
58:3f:60:11:13:bf:a2:66:8b:9f:5d:48:c6:e2:98:ba:11:60:
a8:49:d8:29:45:ca:f4:df:5c:f1:6d:c8:67:a7:f1:95:cd:57:
1d:58:0e:48:de:2f:a2:d3:d5:af:19:7f:05:72:46:d0:26:9f:
5e:f5:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:21 2026 by rpki-client