Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/C7Heg8nbJh5gPNx3smEmsF9i1rg.roa
File: C7Heg8nbJh5gPNx3smEmsF9i1rg.roa (raw, json)
Hash identifier: tvX4saAC2lDOGizl6LS7T8WHcp1UVuikBaA2xfEmzko=
Subject key identifier: 0B:B1:DE:83:C9:DB:26:1E:60:3C:DC:77:B2:61:26:B0:5F:62:D6:B8
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 01A0821E523508D022093E5F33F3DC03AB5B
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/C7Heg8nbJh5gPNx3smEmsF9i1rg.roa
Signing time: Tue 08 Sep 2026 17:43:40 +0000
ROA not before: Tue 08 Sep 2026 17:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219089
IP address blocks: 92.53.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:82:1e:52:35:08:d0:22:09:3e:5f:33:f3:dc:03:ab:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Sep 8 17:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bb1de83c9db261e603cdc77b26126b05f62d6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:f4:88:e7:9f:28:8a:cc:f7:92:77:6c:b4:
33:f4:49:77:76:be:ea:65:ae:ab:64:32:20:bf:6f:
3e:73:05:6a:3b:38:0e:ef:6f:c5:a8:fd:61:6d:13:
1c:20:20:28:85:f6:68:2f:ab:ac:8e:50:ae:f3:2f:
ab:6f:8f:76:96:28:85:9d:df:a7:e2:5c:ca:ba:20:
45:af:62:1b:08:8f:69:fe:61:3a:97:b9:7f:84:e1:
db:28:63:9a:03:ca:29:1d:2e:a4:db:b8:df:d0:70:
a3:63:ab:c2:83:cf:ea:9f:ed:43:64:2d:b9:93:af:
af:d4:f4:06:c2:e7:7e:d8:7a:af:b0:43:37:2e:0d:
59:de:cb:48:63:dc:9a:b9:9f:53:07:87:6d:cb:13:
f0:25:f5:80:d6:61:6d:af:75:f9:ce:c6:3f:fb:c5:
51:e0:77:f0:54:d6:6f:4c:b3:ed:b9:75:ca:f1:a7:
de:38:58:4f:a2:1f:e1:aa:af:c3:bd:fd:91:76:c8:
05:33:93:27:0d:53:ca:3f:32:97:e3:40:1a:75:38:
4b:b7:3d:8e:6e:a6:c7:a8:88:e1:22:31:ec:93:e3:
c4:64:8a:36:bd:f0:0b:f5:6a:4c:c3:0e:18:3c:f6:
57:3e:75:d7:6e:3f:d1:c1:65:e2:ce:03:d4:75:98:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:DE:83:C9:DB:26:1E:60:3C:DC:77:B2:61:26:B0:5F:62:D6:B8
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/C7Heg8nbJh5gPNx3smEmsF9i1rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.53.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:65:08:94:4f:4a:78:27:c5:39:e3:f0:0c:27:c4:d9:d0:9e:
b3:87:6e:85:95:0d:ae:9f:25:fb:f4:51:b5:ce:b4:8f:3b:26:
cc:f4:56:17:81:db:a6:34:64:fe:48:9b:a1:99:ac:72:e5:32:
ab:21:fc:14:31:35:39:f7:c8:cf:b4:8d:ac:2b:2c:d7:83:ba:
fc:ed:9c:7f:0b:1f:d7:fa:50:1f:0d:a3:d5:ed:ff:4d:ec:69:
36:62:22:f8:e7:3a:37:20:05:3a:e6:5e:ed:16:4b:28:43:d5:
a1:e6:40:1e:f4:b4:f8:9c:52:c2:3e:6f:ac:04:36:f4:14:99:
71:1d:a8:7e:dc:9d:54:7e:b7:ab:8f:30:83:64:80:36:0a:f1:
cb:52:00:fc:51:c6:9f:55:45:4a:42:26:20:c2:21:db:9d:5d:
3c:2f:79:91:c4:85:79:f3:ad:b4:a7:68:e4:c1:b5:eb:79:91:
bf:81:2e:9d:45:39:e0:7c:cf:0f:03:11:19:65:e8:d8:ff:f1:
f1:6a:72:5b:00:d8:ac:93:f2:32:92:09:a7:48:23:91:51:d4:
7b:66:46:a0:42:27:b4:f5:13:74:99:3c:f7:dc:98:1b:47:ea:
89:5c:5e:54:6a:8c:db:d1:9e:5e:7d:22:42:12:ae:5e:92:68:
20:01:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:48:07 2026 by rpki-client