Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/7MWrSKdEmt_KvsVn1wCa40GQvZo.roa
File: 7MWrSKdEmt_KvsVn1wCa40GQvZo.roa (raw, json)
Hash identifier: GfjKe1qpCh2floSl6pe5xQjH6bPFI/79DRvpHWVwdEE=
Subject key identifier: EC:C5:AB:48:A7:44:9A:DF:CA:BE:C5:67:D7:00:9A:E3:41:90:BD:9A
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A0BE19F47223EDBE90AD1BB49CFE426376
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/7MWrSKdEmt_KvsVn1wCa40GQvZo.roa
Signing time: Sun 20 Sep 2026 09:16:07 +0000
ROA not before: Sun 20 Sep 2026 09:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 194.61.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:19:f4:72:23:ed:be:90:ad:1b:b4:9c:fe:42:63:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Sep 20 09:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecc5ab48a7449adfcabec567d7009ae34190bd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:51:9a:ac:1b:9f:78:01:a3:5c:df:25:54:
08:0a:16:0a:85:ec:50:65:f6:e9:97:0c:bb:48:6d:
8a:c8:09:84:6f:e2:ea:3e:45:4b:91:c7:22:ed:87:
65:01:0d:13:c0:50:bf:1b:5d:ae:2e:b2:44:2a:6f:
5d:cb:df:b9:d4:75:92:cf:19:ba:64:18:be:7c:cc:
08:4f:ed:b7:2f:9d:f8:9b:c4:77:6b:37:2c:62:a1:
ec:6b:f8:47:93:f3:31:9d:d8:50:61:b1:64:f7:8b:
92:55:dc:91:69:fd:80:19:a8:b7:53:44:fc:fc:11:
2c:22:e8:78:83:ed:b3:5b:7a:cd:db:6d:8e:7c:96:
a6:ea:18:5c:ec:ab:97:3c:a9:27:aa:0f:6d:54:48:
39:4c:22:09:39:da:05:9e:89:d0:b8:97:54:57:34:
04:fb:b5:76:06:9d:67:a4:33:db:c7:ad:6c:d2:8f:
8a:be:82:e7:f8:18:9c:3b:b0:ea:95:75:a3:e6:f1:
ef:8b:49:7a:7e:b2:9e:45:9e:84:c7:b6:4b:36:5e:
5f:cd:39:70:b9:4e:f7:d0:de:67:f8:fc:dd:9a:06:
c5:48:da:b5:a6:40:b4:dc:03:12:89:33:ea:d4:cd:
d5:c9:b4:a3:d4:8c:ca:74:3d:f7:d7:a3:28:e1:30:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:AB:48:A7:44:9A:DF:CA:BE:C5:67:D7:00:9A:E3:41:90:BD:9A
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/7MWrSKdEmt_KvsVn1wCa40GQvZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.237.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b2:e7:8a:a6:ed:98:bf:d5:57:3f:68:92:2a:c3:d6:76:5a:
f0:47:73:61:48:0a:92:6a:55:26:9a:88:42:8d:b5:31:d1:80:
8f:71:cd:aa:63:09:71:a2:f3:ce:b4:c0:7c:37:de:13:c4:9e:
51:06:16:01:3f:74:56:59:d8:ec:1e:f2:9d:f4:56:22:f1:49:
3d:20:e7:8f:41:02:80:29:5f:2b:3e:5f:13:41:ad:0c:df:4e:
a5:d6:d5:f6:7d:2a:63:7b:ea:76:76:10:5f:6a:e8:2d:14:c1:
85:88:03:c2:00:39:38:c2:d7:bc:4f:d9:95:ab:85:e0:2f:47:
14:6d:7b:b9:87:9e:52:4b:31:af:71:ed:e3:c2:3c:fe:02:13:
3b:be:4f:aa:23:6d:79:25:b9:85:2e:2a:0d:50:48:34:50:f2:
28:1a:f2:c7:48:ee:e7:d6:47:20:d4:d3:5e:6a:c1:0b:88:1f:
df:e3:a5:42:0e:1d:cb:df:0b:68:99:61:74:37:38:a9:52:ab:
fb:4b:f2:72:8e:51:a0:d7:a1:8a:80:97:78:ca:d6:69:2a:19:
06:28:d4:ba:c4:41:0b:01:c5:32:2b:94:3a:c8:79:c6:ae:d1:
1a:05:8c:30:2b:df:20:60:2e:66:c8:03:30:94:60:ac:ca:8d:
b5:a4:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:20 2026 by rpki-client