Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/7WOSlFPLYKbaSc0AywlRaUbStyY.roa
File: 7WOSlFPLYKbaSc0AywlRaUbStyY.roa (raw, json)
Hash identifier: uO8CfwrbWZwCpJPs/hwdVR7Fs/7M1x6qs0VxV8ncyjU=
Subject key identifier: ED:63:92:94:53:CB:60:A6:DA:49:CD:00:CB:09:51:69:46:D2:B7:26
Certificate issuer: /CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Certificate serial: 01A068A58B97DC334EE30D5553D9FD2CE7F9
Authority key identifier: 07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/7WOSlFPLYKbaSc0AywlRaUbStyY.roa
Signing time: Thu 03 Sep 2026 19:01:14 +0000
ROA not before: Thu 03 Sep 2026 19:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 161.145.169.0/24 maxlen: 24
161.145.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:a5:8b:97:dc:33:4e:e3:0d:55:53:d9:fd:2c:e7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Validity
Not Before: Sep 3 19:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed63929453cb60a6da49cd00cb09516946d2b726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:30:42:9b:ca:78:b9:e1:1e:75:09:fc:7e:
7d:86:d2:84:55:88:db:17:ae:59:e5:43:62:5c:35:
68:02:26:ff:37:53:88:1a:f5:55:30:4e:fb:02:c8:
74:68:99:4a:89:94:22:f3:7b:d2:62:3f:a0:3c:49:
80:af:aa:2a:b9:3f:9a:6f:8e:cc:c9:b3:1b:96:46:
f0:eb:b4:5b:87:40:a3:35:98:12:0d:ac:81:3e:d8:
44:b2:a3:5a:5f:a3:0d:ca:27:21:94:ce:cb:cf:fb:
e2:a7:e4:a0:96:56:04:f9:91:b8:0e:f8:69:6d:05:
01:0d:18:15:58:40:25:be:b5:05:4c:d0:03:af:c3:
50:a9:09:ee:b3:da:ed:d4:f8:85:1a:4c:8f:6b:18:
06:f1:f3:7b:15:db:48:80:d3:c7:3f:80:14:0e:b0:
e6:0c:05:ca:49:ba:b7:36:3b:39:a9:18:8c:a0:9b:
0f:71:1f:72:55:f8:1c:7d:f2:a9:58:d5:bd:87:c0:
c9:8d:01:a3:85:62:fc:67:5f:ab:f1:25:e3:bf:38:
fa:92:ec:b8:40:c6:a6:70:e5:d7:6c:0b:5b:40:fd:
a8:77:53:93:c3:5d:8b:85:39:7e:f5:b9:d8:75:e5:
93:01:e9:16:12:89:7d:da:14:ff:de:4e:c8:4d:3b:
c2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:92:94:53:CB:60:A6:DA:49:CD:00:CB:09:51:69:46:D2:B7:26
X509v3 Authority Key Identifier:
keyid:07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/7WOSlFPLYKbaSc0AywlRaUbStyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.145.169.0-161.145.170.255
Signature Algorithm: sha256WithRSAEncryption
8d:d4:cf:a8:48:0c:41:60:e0:be:b7:5e:4c:f8:5d:2d:be:50:
96:19:e3:df:66:ea:33:c4:0f:92:2f:02:6e:ea:55:31:5a:a4:
90:80:9c:cf:0d:81:59:69:c5:15:20:58:50:2f:a6:29:14:cc:
79:ae:ac:be:84:f8:b6:94:e2:af:69:21:dd:8e:4d:cb:ef:31:
17:ce:ca:8e:37:ca:e3:d9:55:f5:67:87:76:98:ef:76:5e:7d:
6a:d4:82:8a:19:5b:ff:c9:bb:95:ce:2b:9f:d5:39:24:58:c9:
ef:ae:22:01:1c:7e:41:59:03:43:75:40:82:5f:a6:16:90:ed:
54:73:86:b3:f8:19:9e:c4:3f:81:2c:de:2c:32:56:a7:5b:54:
aa:49:5f:c6:32:37:34:c3:07:b7:81:bc:a4:c8:56:56:db:f8:
6e:34:de:57:82:36:57:4c:5c:14:64:2b:f6:d6:bb:92:71:10:
bb:3a:6d:65:d7:7a:fe:0f:f4:57:8f:bc:df:5f:ea:a2:e5:bb:
ed:15:b7:12:64:2f:a2:9f:e1:ec:5c:ff:6b:63:2c:c7:05:74:
ef:29:41:50:d0:28:c3:45:d7:6a:f2:3e:03:d0:1f:78:a0:9d:
9b:66:67:79:d6:47:93:fb:22:dd:87:81:49:48:af:01:7c:c7:
df:31:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:04 2026 by rpki-client