Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7HIZYeHbugZG1i2OT1LA3Yi5yIc.roa
File: 7HIZYeHbugZG1i2OT1LA3Yi5yIc.roa (raw, json)
Hash identifier: cAYBAZ41OEoexKNgyWuDs5pIXssc5eW+lHojgErnTUQ=
Subject key identifier: EC:72:19:61:E1:DB:BA:06:46:D6:2D:8E:4F:52:C0:DD:88:B9:C8:87
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A11A64F6C84BA6DC00D64939633310DF54
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7HIZYeHbugZG1i2OT1LA3Yi5yIc.roa
Signing time: Thu 08 Oct 2026 07:23:06 +0000
ROA not before: Thu 08 Oct 2026 07:23:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 79.175.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:64:f6:c8:4b:a6:dc:00:d6:49:39:63:33:10:df:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Oct 8 07:23:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec721961e1dbba0646d62d8e4f52c0dd88b9c887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:59:bf:bf:68:33:6b:26:1d:75:83:25:9c:
a6:19:72:9b:72:c3:ee:7a:61:49:43:ca:83:79:23:
14:a7:c1:76:ba:c1:b1:67:3e:a5:3e:15:bb:4a:f8:
23:91:25:c4:93:9a:85:da:61:52:95:8d:cf:dd:b9:
c0:ef:ff:0a:08:d7:d0:6e:5e:6e:45:cd:3a:9a:01:
50:13:70:30:b7:de:b8:a6:e8:7f:8e:5e:b6:41:e3:
3f:29:16:1d:25:27:c1:76:af:f4:e1:b2:25:c5:1d:
13:97:aa:f3:3c:09:3c:eb:26:db:65:8b:c7:0c:57:
ec:5c:84:b2:68:10:88:3c:50:73:2b:c0:16:2d:e7:
88:f1:10:f7:03:ad:d4:4f:a4:f7:a0:70:f3:55:90:
77:3e:aa:0b:61:43:6c:64:42:28:2e:1f:5c:06:b9:
36:60:aa:31:8b:49:6f:b8:80:bd:fd:19:03:88:dc:
b9:be:28:51:cf:ba:5f:9a:cd:b9:fd:fe:88:59:90:
de:0b:c4:72:88:65:98:8f:a8:a0:92:29:d8:78:45:
e0:39:50:ed:11:bc:96:da:53:59:80:fc:ba:3f:85:
71:04:43:ce:d8:a5:8c:1e:6f:d1:8c:0a:26:13:03:
b5:8c:4b:3f:93:19:a4:f5:c3:d2:46:f1:d5:38:3b:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:19:61:E1:DB:BA:06:46:D6:2D:8E:4F:52:C0:DD:88:B9:C8:87
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/7HIZYeHbugZG1i2OT1LA3Yi5yIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.102.0/24
Signature Algorithm: sha256WithRSAEncryption
78:43:27:8a:a2:70:c7:3b:04:93:39:b6:12:f9:38:ba:da:f8:
c7:9c:58:15:fa:4d:34:90:d9:4b:4a:7b:71:e4:b2:89:d3:bb:
d2:37:89:4d:13:3d:8f:17:d9:64:a6:e4:04:be:73:b8:f5:8f:
5a:a8:58:16:e3:e4:57:ea:9d:f5:d2:30:9a:d5:6f:3f:9b:41:
ab:87:1d:b0:9e:af:e1:3c:52:e3:16:65:9e:94:cb:d0:6e:91:
63:ab:ca:5e:1a:5b:91:fb:7f:4b:3a:41:5f:6e:6b:42:5a:69:
f7:63:e2:02:c2:6b:57:45:cb:70:bc:78:da:a2:cf:5b:42:08:
de:63:8c:4e:14:22:0e:14:64:d1:aa:26:4d:13:ec:b1:97:0c:
18:d5:7e:2e:4b:a5:26:4f:a4:4e:28:01:3f:db:c8:5e:94:19:
f7:30:fc:62:ac:86:32:ed:f4:a9:cd:9b:4d:00:6c:4e:a3:8d:
dd:0a:9c:2b:b1:8f:48:a3:64:42:87:6d:7e:0c:3e:c6:19:48:
db:1c:38:18:f1:c3:97:dd:36:10:b2:20:da:52:e4:7f:7a:43:
91:71:2d:d4:01:da:51:f6:f2:dd:55:b1:bc:ee:34:85:b1:ab:
f4:f7:67:e9:3c:ac:8a:f1:8b:ae:2e:e3:8c:f4:f7:72:72:b1:
4f:2c:18:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:14:53 2026 by rpki-client