Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MS-7_DZo5J-eO5mlcLoHsHK4Xsk.roa
File: MS-7_DZo5J-eO5mlcLoHsHK4Xsk.roa (raw, json)
Hash identifier: r2pnYwlrKylXQaWniQCVDFWS/5Pn6Y+HV4avaon2rvs=
Subject key identifier: 31:2F:BB:FC:36:68:E4:9F:9E:3B:99:A5:70:BA:07:B0:72:B8:5E:C9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019C46CFDD03E76C767663F30F3E3F84565A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MS-7_DZo5J-eO5mlcLoHsHK4Xsk.roa
Signing time: Tue 10 Feb 2026 09:09:13 +0000
ROA not before: Tue 10 Feb 2026 09:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201716
IP address blocks: 159.148.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:cf:dd:03:e7:6c:76:76:63:f3:0f:3e:3f:84:56:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Feb 10 09:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=312fbbfc3668e49f9e3b99a570ba07b072b85ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:9b:83:75:2a:91:96:65:ec:0c:3b:be:76:
5c:d4:0e:3f:2f:54:4e:09:74:1e:6d:4e:80:df:ed:
e6:5c:1f:f7:46:60:f9:a5:3d:1e:a7:76:40:50:f6:
6d:68:37:e5:b8:0c:29:29:4f:87:0a:dc:4d:5f:a7:
80:f0:f0:d9:90:21:7d:7e:2c:2e:1c:0f:76:72:86:
b7:a5:47:a8:b2:3f:53:86:38:eb:6c:22:ec:75:a5:
a1:2f:60:b0:d9:cf:b3:91:c8:cc:cb:2a:13:f6:77:
4c:c7:43:4d:51:96:b1:b8:eb:c2:de:67:09:f2:ad:
a4:a9:45:e7:d9:90:3b:22:3f:a6:5d:23:60:2e:48:
a7:db:fc:78:82:ba:c1:01:ee:ed:8d:0b:8c:31:58:
dd:f0:da:50:33:e2:fe:53:5b:07:99:12:8e:32:90:
a3:b3:87:2d:f0:05:f0:a4:98:70:7a:85:64:ce:f4:
74:b5:a2:8b:2f:56:bd:2e:55:dd:b5:12:5c:b0:76:
93:37:a4:72:59:f2:89:ea:38:de:13:fd:87:27:63:
72:82:1b:46:28:d6:22:64:78:e2:69:5e:00:a6:50:
cc:2c:9f:2b:05:f1:e7:e8:fa:6e:5e:c4:c8:20:3d:
b4:05:95:9e:6b:c9:bf:0d:1a:7f:c4:0c:52:b8:6a:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2F:BB:FC:36:68:E4:9F:9E:3B:99:A5:70:BA:07:B0:72:B8:5E:C9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/MS-7_DZo5J-eO5mlcLoHsHK4Xsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:36:dc:b8:9c:b0:06:2a:2d:27:77:3f:4b:26:70:15:bf:53:
87:7c:79:00:4c:70:dd:7b:70:7a:4c:dc:bc:9b:2e:11:ef:c3:
6a:11:dc:52:65:74:87:82:e2:da:7c:c2:ec:91:96:12:93:d0:
f3:39:40:f1:ff:3f:93:2a:5b:e1:06:70:00:c2:77:73:eb:bd:
b7:f5:d2:78:be:78:04:fd:0c:cb:3f:6f:45:25:bd:d9:f5:e0:
08:a3:b6:3e:22:e5:ff:71:c2:4a:a5:7c:f4:d8:41:74:18:5f:
40:b2:af:fb:7a:16:9a:c9:82:9c:52:29:bf:a4:3c:bc:95:8c:
d1:eb:cf:fb:e8:e8:a7:93:37:b1:9d:38:61:e3:6f:00:22:fd:
4c:d1:40:1f:a4:92:93:1a:48:3a:84:48:97:67:87:aa:94:b6:
cf:49:c5:51:68:74:1a:8a:f2:0f:0f:2d:de:f4:6c:46:4d:3f:
64:e4:81:44:8c:26:b0:66:f2:ae:45:79:30:c5:31:e3:dc:20:
ea:06:82:7a:c1:b5:7a:06:ee:ed:74:25:5c:3c:0d:b7:10:96:
26:98:50:31:64:a0:64:ad:89:51:e7:e1:fa:e3:24:34:ed:bc:
69:67:13:d8:bf:b0:c1:7d:62:c2:5f:89:6d:60:7a:c5:ec:20:
63:47:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:26 2026 by rpki-client