Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7g_MXx_Rtgkg3Q-Mu4Qj2luYEjs.roa
File: 7g_MXx_Rtgkg3Q-Mu4Qj2luYEjs.roa (raw, json)
Hash identifier: F6w2vzqWEXihYnX1JmzleoPBPc+S+5A30ciLhetjKJ0=
Subject key identifier: EE:0F:CC:5F:1F:D1:B6:09:20:DD:0F:8C:BB:84:23:DA:5B:98:12:3B
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A18DD67995F76F3D46C1718EC240136C87
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7g_MXx_Rtgkg3Q-Mu4Qj2luYEjs.roa
Signing time: Fri 30 Oct 2026 17:23:25 +0000
ROA not before: Fri 30 Oct 2026 17:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 193.108.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:d6:79:95:f7:6f:3d:46:c1:71:8e:c2:40:13:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 30 17:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee0fcc5f1fd1b60920dd0f8cbb8423da5b98123b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:62:b5:9e:5b:fb:37:0d:0e:bf:1b:ae:3d:
57:0a:de:ac:05:d1:be:b1:b3:39:b7:04:bd:31:e0:
22:f7:db:96:18:79:cb:d2:8e:eb:e9:5a:32:dd:d5:
8d:68:52:6a:8e:0a:68:0e:88:e4:59:c4:7f:36:62:
c3:77:48:77:cd:50:d7:83:9e:d6:ca:05:d2:d8:c4:
c6:75:97:46:87:93:81:96:03:8f:aa:3c:bd:4d:a6:
bd:eb:5f:6c:8f:10:3b:65:aa:f8:4f:24:8b:cd:c6:
06:8c:61:81:3d:a7:60:11:26:15:9f:6a:c8:8c:c2:
03:07:45:92:6f:d1:eb:69:6d:9c:26:ab:02:2b:5e:
16:34:9c:84:76:59:1b:ae:ce:38:ab:f5:03:88:67:
02:03:a1:ce:6f:96:ef:91:8d:51:29:1e:ee:7d:54:
a7:b5:02:73:5a:83:6b:84:d0:c9:fc:16:d4:56:ce:
2f:39:1b:1e:6d:f3:e3:d2:08:9e:40:74:80:1d:79:
d8:a9:be:20:53:de:91:51:21:6d:5e:dc:bb:4b:55:
84:a7:f2:52:cd:2e:e3:25:3f:ab:57:0a:35:50:1f:
1f:7f:06:81:7b:64:97:59:9e:0d:86:99:59:99:45:
cd:59:7f:26:1b:32:ad:4a:db:f4:d3:ce:69:ea:84:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:CC:5F:1F:D1:B6:09:20:DD:0F:8C:BB:84:23:DA:5B:98:12:3B
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7g_MXx_Rtgkg3Q-Mu4Qj2luYEjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:de:37:b2:d7:5d:76:58:cc:2e:1b:e0:32:d8:de:f7:36:92:
a3:61:83:27:c5:9b:0d:a4:9f:ec:69:dd:50:e0:aa:9e:08:66:
62:77:70:c5:e0:32:c9:08:23:fd:2b:41:2d:c0:eb:1d:06:6a:
53:0c:7e:2c:6e:38:51:27:6d:07:20:16:3e:7b:eb:78:7e:37:
7a:48:18:d9:08:35:a3:ec:0f:7a:85:78:be:e4:07:db:24:f2:
04:e0:a5:61:0f:63:16:e5:8d:86:26:15:f1:97:05:e0:58:27:
88:6e:2c:40:1c:cc:2d:db:98:70:cb:e7:3e:9c:56:82:16:a0:
0f:7a:53:53:6d:4a:54:03:e5:ee:ca:77:53:dc:18:2a:1b:51:
a0:b3:d1:2b:cb:e1:ad:ec:9f:80:ca:33:3b:da:1f:7a:01:4c:
f0:77:78:75:25:52:ff:6a:db:7f:c5:52:24:85:71:56:d2:3e:
05:ad:49:65:d7:d0:9d:9f:32:82:24:4d:20:dc:0b:2a:37:88:
42:96:ab:37:bb:4d:99:77:97:84:46:ef:6a:a9:3b:55:4a:53:
23:ea:1d:9d:61:4a:ea:b7:f4:f6:3d:df:68:08:bb:a2:34:be:
60:96:76:a1:da:69:40:64:39:17:1d:de:05:cd:4d:b4:7b:02:
af:d5:77:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGN1nmV9289RsFxjsJAE2yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjYxMDMwMTcyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTBmY2M1ZjFmZDFiNjA5MjBkZDBmOGNiYjg0MjNkYTViOTgxMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu15itZ5b+zcNDr8brj1XCt6sBdG+
sbM5twS9MeAi99uWGHnL0o7r6Voy3dWNaFJqjgpoDojkWcR/NmLDd0h3zVDXg57W
ygXS2MTGdZdGh5OBlgOPqjy9Taa9619sjxA7Zar4TySLzcYGjGGBPadgESYVn2rI
jMIDB0WSb9HraW2cJqsCK14WNJyEdlkbrs44q/UDiGcCA6HOb5bvkY1RKR7ufVSn
tQJzWoNrhNDJ/BbUVs4vORsebfPj0gieQHSAHXnYqb4gU96RUSFtXty7S1WEp/JS
zS7jJT+rVwo1UB8ffwaBe2SXWZ4NhplZmUXNWX8mGzKtStv0085p6oT6uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO4PzF8f0bYJIN0PjLuEI9pbmBI7MB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvN2dfTVh4X1J0Z2tnM1EtTXU0UWoybHVZRWpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw4MA0G
CSqGSIb3DQEBCwUAA4IBAQAa3jey1112WMwuG+Ay2N73NpKjYYMnxZsNpJ/sad1Q
4KqeCGZid3DF4DLJCCP9K0EtwOsdBmpTDH4sbjhRJ20HIBY+e+t4fjd6SBjZCDWj
7A96hXi+5AfbJPIE4KVhD2MW5Y2GJhXxlwXgWCeIbixAHMwt25hwy+c+nFaCFqAP
elNTbUpUA+XuyndT3BgqG1Ggs9Ery+Gt7J+AyjM72h96AUzwd3h1JVL/att/xVIk
hXFW0j4FrUll19CdnzKCJE0g3AsqN4hClqs3u02Zd5eERu9qqTtVSlMj6h2dYUrq
t/T2Pd9oCLuiNL5glnah2mlAZDkXHd4FzU20ewKv1XdG
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:02:28 2026 by rpki-client