Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/7X15JsRrJkgKCJLXjiSs1bdhruU.roa
File: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (raw, json)
Hash identifier: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=
Subject key identifier: ED:7D:79:26:C4:6B:26:48:0A:08:92:D7:8E:24:AC:D5:B7:61:AE:E5
Certificate issuer: /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial: 019D8205A0B9CE867EA61CE61809D7489400
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/7X15JsRrJkgKCJLXjiSs1bdhruU.roa
Signing time: Sun 12 Apr 2026 14:08:20 +0000
ROA not before: Sun 12 Apr 2026 14:08:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 91.229.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:05:a0:b9:ce:86:7e:a6:1c:e6:18:09:d7:48:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Validity
Not Before: Apr 12 14:08:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed7d7926c46b26480a0892d78e24acd5b761aee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:14:b0:6a:79:8d:52:08:e4:e4:9d:f3:1c:
93:14:5c:d6:7c:66:5b:42:53:90:91:62:fb:54:c6:
ba:6a:96:b0:f0:37:e4:07:c2:90:21:c7:2b:e3:aa:
0c:7a:ae:a6:d3:59:d8:28:a3:e7:54:a2:63:d1:2d:
b1:23:96:67:7e:a7:29:7a:68:4a:17:56:d1:f1:48:
63:57:92:8d:2d:a6:70:23:37:0b:09:07:25:69:9e:
3f:ae:47:9f:b1:74:03:a0:4d:ed:1f:3e:19:f7:fb:
f1:94:f3:3b:38:29:e4:5c:f5:59:89:08:d8:fe:a8:
24:33:1c:05:c6:a0:fa:eb:17:00:97:fa:8d:e8:c2:
4e:69:ca:d7:bc:7e:90:e4:e6:1f:fc:00:54:be:51:
c9:4d:cd:54:c1:bc:01:76:f6:7e:df:7c:d3:64:7d:
20:32:ff:d9:14:a3:6d:32:3f:4f:83:b6:cc:33:f4:
c4:b6:1d:b0:83:f5:e6:4d:52:8a:1e:4c:68:da:47:
54:27:99:52:90:5e:ef:74:5a:fc:f3:89:6b:be:89:
bc:3a:4f:78:d6:30:a8:51:c5:05:81:c9:01:e2:4f:
ad:2b:79:37:a8:87:bc:5f:cd:0c:77:75:59:61:aa:
8e:0c:ae:21:9c:0f:3e:aa:50:6b:fc:80:97:a3:1f:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7D:79:26:C4:6B:26:48:0A:08:92:D7:8E:24:AC:D5:B7:61:AE:E5
X509v3 Authority Key Identifier:
keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/7X15JsRrJkgKCJLXjiSs1bdhruU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.102.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:83:20:b7:ee:b2:64:b3:a3:25:10:07:cf:83:b0:bf:7e:21:
05:8c:4e:9a:7d:7a:a5:2a:40:3f:60:37:3b:51:c5:b1:46:c3:
ce:9d:2f:f8:70:bf:f5:07:27:54:95:41:fb:18:e2:50:a2:c7:
1b:f6:e4:52:91:4a:f5:3f:68:15:3f:5b:c6:1e:98:e3:eb:f1:
6d:fd:82:5d:7d:80:8c:48:59:7a:6a:1e:8a:c1:02:ef:6c:12:
68:bd:2a:f9:3d:54:69:21:03:7b:23:74:65:ea:2e:b1:e0:a0:
6e:11:8b:37:25:3f:25:10:aa:56:ce:b9:13:52:8c:18:74:70:
0a:fe:b4:d3:bb:c2:ef:f4:7f:44:7f:58:72:fb:1a:2a:d5:07:
06:7c:0f:e8:a1:6b:b7:08:18:5f:44:c5:b9:a9:a7:76:d7:96:
60:02:32:35:99:b1:fa:7c:49:56:1b:b8:f3:01:1c:db:c2:18:
7f:f9:7d:2e:b3:eb:a2:05:ee:17:34:86:94:c4:e2:7e:ae:87:
a8:5b:35:2b:f7:0e:b7:45:1a:f9:1e:b5:f9:e8:81:8f:85:38:
12:13:55:b4:fb:3a:85:2c:8c:b6:91:6d:8f:df:c2:32:c8:e3:
1a:a9:82:93:1c:00:c6:ec:93:d8:f8:ac:f1:cb:25:5f:21:a9:
c1:a3:f2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:15 2026 by rpki-client