Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p7xTGK_mAK75WItXXXQSDp9vexI.roa
File: p7xTGK_mAK75WItXXXQSDp9vexI.roa (raw, json)
Hash identifier: /Y/S2EC80NTuRf4gIft/41QKYZgruN+amhxO7YypzNo=
Subject key identifier: A7:BC:53:18:AF:E6:00:AE:F9:58:8B:57:5D:74:12:0E:9F:6F:7B:12
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019C7F76F0BD157C36405FFE3B963F7BB4D9
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p7xTGK_mAK75WItXXXQSDp9vexI.roa
Signing time: Sat 21 Feb 2026 09:10:27 +0000
ROA not before: Sat 21 Feb 2026 09:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.23.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7f:76:f0:bd:15:7c:36:40:5f:fe:3b:96:3f:7b:b4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Feb 21 09:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7bc5318afe600aef9588b575d74120e9f6f7b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:8a:77:e0:6d:5c:32:43:3e:f3:34:1a:e2:
c8:64:58:2a:fa:02:bc:e8:d7:86:6e:04:89:1f:d3:
80:48:f7:91:93:6f:f8:38:1e:cc:41:52:dc:6a:b1:
5e:73:34:0f:9b:fc:f1:fa:6a:b5:f8:ed:86:f4:f7:
fc:54:16:a0:2b:1b:34:49:2d:13:cb:b7:e2:3c:8b:
4e:7f:91:57:ef:1c:bb:1b:b2:f0:21:ce:62:b8:c0:
6a:cd:a4:34:8c:2d:67:82:01:5a:79:a5:a5:5b:d2:
70:ff:30:f4:25:af:8a:f6:59:30:00:8c:c6:4b:e8:
4f:04:d8:dd:4c:ac:cb:55:da:2d:ae:5d:9b:fd:d4:
24:78:f9:da:f7:eb:80:c8:42:ea:f2:23:ec:99:79:
00:d7:cb:af:f6:b9:2d:46:11:9e:4b:9b:aa:50:6e:
f5:8c:df:7a:71:ea:fd:d8:a3:0e:fd:83:0c:23:48:
1e:0a:05:ea:df:5e:d9:7b:74:38:8e:0d:69:97:7b:
e1:9b:19:96:b2:e0:12:de:7f:93:09:63:8a:7b:7f:
a8:22:50:50:e9:ae:07:5f:4d:b1:cc:23:64:e2:22:
ca:75:48:b0:73:25:74:3e:28:ad:99:d6:0d:07:cf:
c9:24:e5:9e:55:7f:15:35:b5:a0:af:4f:cc:e4:c6:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BC:53:18:AF:E6:00:AE:F9:58:8B:57:5D:74:12:0E:9F:6F:7B:12
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/p7xTGK_mAK75WItXXXQSDp9vexI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.93.0/24
Signature Algorithm: sha256WithRSAEncryption
29:1d:40:ae:da:b6:cf:1a:9a:38:b8:17:e8:3c:82:e9:ae:41:
77:7c:27:92:25:f9:4f:60:bf:5a:dd:d5:4e:bc:ac:23:b6:7a:
b1:52:85:2c:ef:42:ad:29:ae:26:48:a6:18:f1:17:50:f2:e3:
13:4e:e5:a4:65:4d:17:dc:3e:bd:77:54:d5:d8:cd:8f:5c:98:
f9:88:69:85:54:a0:9e:34:12:8b:62:ff:c4:21:fc:1c:6c:07:
3a:da:fe:ce:4e:18:8b:e6:de:0d:11:17:cd:81:60:d4:28:d8:
b8:27:c8:00:8e:ea:ae:a3:7c:c3:cd:a1:89:10:3b:e6:4d:82:
da:2d:32:ba:67:d5:f1:1f:8a:99:23:a3:d0:e3:01:c7:87:23:
26:1f:95:4b:dc:fa:7c:de:bc:55:9a:2b:5d:8b:1c:11:1d:b5:
e9:ed:3c:81:c7:c5:b0:0c:34:9d:29:00:e5:d9:6f:60:ab:68:
af:ee:67:6c:a6:5b:b9:7f:b7:d8:81:15:a9:ce:59:eb:93:88:
05:8e:1b:4d:9b:77:74:cb:0f:0d:8c:ee:f2:80:a6:bd:37:33:
dd:45:a0:24:55:bc:51:85:00:81:82:78:fa:6f:e5:ba:e1:cb:
ca:b6:32:8b:04:1c:50:39:6f:36:d8:91:40:22:cb:cb:f0:55:
c8:45:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:03 2026 by rpki-client