Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7EW_6qeNzinsC7yuu1Y6MeAuG-s.roa
File: 7EW_6qeNzinsC7yuu1Y6MeAuG-s.roa (raw, json)
Hash identifier: pJqPTmCKkNe4S/CEkOleEtTiFmA74C+DK4kRUkMwgW4=
Subject key identifier: EC:45:BF:EA:A7:8D:CE:29:EC:0B:BC:AE:BB:56:3A:31:E0:2E:1B:EB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D8B95C22FF84B809B376E412FC1A1B239
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7EW_6qeNzinsC7yuu1Y6MeAuG-s.roa
Signing time: Tue 14 Apr 2026 10:42:20 +0000
ROA not before: Tue 14 Apr 2026 10:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201749
IP address blocks: 5.175.145.0/24 maxlen: 24
5.175.158.0/24 maxlen: 24
5.175.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8b:95:c2:2f:f8:4b:80:9b:37:6e:41:2f:c1:a1:b2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 14 10:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec45bfeaa78dce29ec0bbcaebb563a31e02e1beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:9f:3b:99:d3:ea:32:8b:f7:7f:e6:5e:f0:
44:47:1f:a6:ca:f6:ad:ee:18:62:1b:c5:cb:33:a4:
f2:52:8a:82:1e:c2:83:84:b4:6f:53:06:2a:49:49:
ad:0f:fa:f1:ac:52:8a:5e:47:da:f4:dd:3b:89:ab:
96:5f:78:c2:38:d5:ee:0a:0a:8f:81:11:49:36:2d:
d3:63:b3:64:7e:8f:c1:71:61:bd:c7:08:1d:a5:a9:
8c:33:cf:79:35:97:1c:3d:31:fa:b3:14:2c:a2:d4:
eb:8d:ac:18:bd:ec:09:ca:c2:03:1e:15:39:38:96:
8e:2d:39:a1:10:d4:8b:f7:98:e9:ae:92:2e:42:76:
a8:08:93:ef:ef:34:30:78:59:23:d9:09:e5:f2:b7:
b0:63:95:6d:91:94:81:0b:1f:5b:bd:be:ce:2a:33:
35:ab:1c:11:45:f0:1f:aa:9a:38:dd:4f:b8:52:50:
76:9f:6e:6c:9c:74:aa:32:b2:25:09:d9:6e:78:41:
e6:2d:7e:b4:e9:c6:26:a4:ee:c6:cf:9f:7d:55:6f:
1f:74:e7:17:da:f8:1f:81:a3:4c:af:ac:f8:ac:5b:
e3:5d:1a:d6:65:19:b8:6a:8b:07:16:f6:99:fe:da:
35:74:b0:e1:64:c6:18:64:29:66:17:92:2e:aa:25:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:BF:EA:A7:8D:CE:29:EC:0B:BC:AE:BB:56:3A:31:E0:2E:1B:EB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7EW_6qeNzinsC7yuu1Y6MeAuG-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.145.0/24
5.175.158.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:7a:c6:53:12:48:ba:d0:04:28:73:77:b7:a2:07:ba:c4:01:
21:c6:a0:f4:e3:5d:05:53:43:bd:8e:3b:34:7f:b3:1b:d0:9c:
aa:2f:87:84:8b:d2:7d:df:63:b3:e7:a3:28:d8:af:8d:11:81:
9d:91:1e:05:5b:e3:c6:3d:4f:80:c9:fe:78:1a:0f:92:e5:a2:
74:65:eb:8f:9e:16:93:fa:1b:9e:14:56:1e:63:24:60:78:3e:
4e:cb:62:c5:51:e2:4e:17:95:11:bd:d9:0a:00:ae:0e:fb:a3:
ad:50:e7:a6:44:b2:da:1c:10:c0:8d:a7:13:45:64:ae:af:c1:
e2:91:d3:8e:09:c1:b3:62:60:91:6d:bc:29:8b:51:ae:e2:2b:
f2:a1:44:d7:52:ce:4e:36:ea:d8:b2:cb:5a:24:35:60:e0:53:
86:d6:da:a0:53:32:c0:6c:a1:83:2e:28:30:c4:ec:6f:5d:3c:
6c:2e:c5:dc:c6:68:e8:bb:3d:7c:08:61:57:30:fa:3b:63:96:
24:9a:25:df:4b:c9:ec:95:b5:e6:27:00:c2:80:4e:48:e1:2b:
51:c1:cc:a9:4d:38:62:d2:58:06:2e:06:37:1f:f2:87:82:50:
31:fe:91:f4:1e:a9:7c:a6:3c:03:ee:f3:b8:a4:77:f8:f5:f9:
2b:65:e7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:23 2026 by rpki-client