Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa
File: 7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa (raw, json)
Hash identifier: VfC3vcI2ofuIQtRz8HrlekZCngt14Y4U47LgFaOVG7o=
Subject key identifier: EE:7C:AE:E4:5A:FC:FA:A6:41:8C:31:C4:51:FA:BA:FC:FC:22:5C:2F
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 01A066DD44EF927A7F44FE7964E3B8277E51
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa
Signing time: Thu 03 Sep 2026 10:42:52 +0000
ROA not before: Thu 03 Sep 2026 10:42:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43289
IP address blocks: 178.17.160.0/20 maxlen: 24
178.175.128.0/19 maxlen: 24
193.200.160.0/24 maxlen: 24
2a00:1dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:dd:44:ef:92:7a:7f:44:fe:79:64:e3:b8:27:7e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Sep 3 10:42:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee7caee45afcfaa6418c31c451fabafcfc225c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:79:3f:9e:46:cd:8b:65:fe:82:36:a6:de:
51:2b:2f:6a:f7:ac:2f:13:31:63:7d:ac:06:88:42:
72:7c:02:3a:27:aa:e0:24:b7:3f:54:06:5a:00:a9:
fa:67:5c:9f:33:e6:e8:ba:ff:a3:d6:68:13:21:c4:
c9:6d:91:d0:3d:24:97:dc:11:04:ff:51:85:06:86:
19:54:5d:71:8d:b6:9f:76:3c:50:85:be:58:eb:84:
6c:e5:6d:07:5c:20:e7:e6:ed:48:1a:cc:d7:f9:30:
58:5c:ec:31:1d:42:15:9c:4e:af:33:71:17:36:92:
cf:80:3a:e2:5a:26:5d:8a:f1:05:0f:1e:7c:81:1f:
b5:19:d5:f6:cc:4e:45:fd:72:c2:e2:bc:91:18:23:
a8:ed:a4:1c:a4:f8:d5:49:67:ef:e4:d1:64:e8:26:
ac:6a:ea:e3:5e:a2:92:8a:40:b3:58:2a:32:61:c2:
7a:13:ad:38:3c:7c:77:29:33:50:b4:5d:96:c4:ea:
9f:4c:80:56:cd:27:15:e2:07:0b:e1:81:1a:e6:68:
db:ce:eb:56:ee:36:5a:1f:31:78:bc:5a:de:d0:1a:
86:a2:cd:ec:ba:83:76:37:11:f9:05:f0:ea:1a:a6:
74:d2:22:ef:3f:d3:04:9f:e7:1a:1f:56:19:af:1b:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7C:AE:E4:5A:FC:FA:A6:41:8C:31:C4:51:FA:BA:FC:FC:22:5C:2F
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/7nyu5Fr8-qZBjDHEUfq6_PwiXC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.17.160.0/20
178.175.128.0/19
193.200.160.0/24
IPv6:
2a00:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
82:8e:1c:0d:0d:6b:71:2c:6a:8f:f3:07:7f:95:bc:be:58:75:
a3:23:74:d9:8a:29:d6:13:7a:1c:e5:fb:de:99:96:73:af:32:
12:d6:0b:61:07:d1:4e:8f:53:06:16:c4:d8:eb:77:c4:7f:e7:
68:4e:15:69:02:1d:83:a7:e3:15:39:d1:a7:e1:d3:e9:45:46:
94:17:91:1e:03:cf:d0:39:e1:46:8f:a3:ea:6e:13:54:92:ab:
21:20:4c:a9:9b:5f:3b:3b:48:4d:ec:a2:dc:60:96:d8:70:7c:
6d:3d:35:6b:2c:28:04:c0:e0:e0:b1:e5:22:bf:bd:31:c3:45:
2d:e3:f4:c9:88:71:9a:a7:78:d8:05:10:df:4f:54:c4:e8:2c:
66:52:ec:a5:46:bf:f8:63:95:84:68:30:9a:20:35:61:f7:f6:
ca:b7:2d:9e:c1:9f:11:32:4c:62:04:54:30:61:62:b8:fd:d5:
ed:52:a9:66:38:7d:65:fb:91:a0:28:8f:d2:5d:7d:55:7c:3a:
39:64:2d:89:c3:f0:05:3a:1c:52:84:b1:24:7c:56:6f:54:e9:
6c:53:ed:ac:1c:e9:e7:7e:46:d8:58:ca:c3:63:58:cc:ce:10:
16:c7:a9:f9:26:d0:b0:86:26:d7:57:7f:13:f7:52:f0:c6:dd:
23:ad:0b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:11:33 2026 by rpki-client