Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/Iphm7z7updBWRc2PNItoZmhVxuU.roa
File: Iphm7z7updBWRc2PNItoZmhVxuU.roa (raw, json)
Hash identifier: ld3zzmRGDXodfmUypvYiol82dEtF61c0SzZg6YzCfrA=
Subject key identifier: 22:98:66:EF:3E:EE:A5:D0:56:45:CD:8F:34:8B:68:66:68:55:C6:E5
Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b
Certificate serial: 019C93E72DFEBF4CF5AD96B8BA89F7756B2F
Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/Iphm7z7updBWRc2PNItoZmhVxuU.roa
Signing time: Wed 25 Feb 2026 08:25:27 +0000
ROA not before: Wed 25 Feb 2026 08:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12857
IP address blocks: 194.147.133.0/24 maxlen: 24
2a00:b400::/29 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:e7:2d:fe:bf:4c:f5:ad:96:b8:ba:89:f7:75:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b
Validity
Not Before: Feb 25 08:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=229866ef3eeea5d05645cd8f348b68666855c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:e7:ae:b0:f1:87:30:77:cb:57:64:e5:06:
94:2f:35:26:c5:1c:f7:32:25:2c:39:b7:61:0b:c5:
ec:a9:36:3c:13:d9:a0:f7:3b:8c:45:c6:08:9e:3d:
97:ee:16:fb:51:36:9a:4d:0e:50:a7:11:e9:8e:a5:
a2:24:93:0e:b2:7c:48:68:ca:77:54:fe:37:d8:53:
e6:44:ae:bd:5e:30:dc:74:8b:f9:99:9d:38:62:4b:
74:53:76:74:ed:73:37:1d:e6:f3:63:c7:e6:db:9e:
f6:c9:09:53:63:e2:35:a5:9f:db:eb:2a:c2:78:ac:
37:72:3e:8d:1e:a2:3e:ba:88:26:47:4b:50:a2:3d:
b1:82:0c:ff:3f:5c:fa:d8:37:50:f1:43:59:74:84:
23:ca:ef:25:e3:0e:28:4c:a7:1f:b2:84:2b:44:df:
fa:05:77:af:03:9c:be:84:b3:4a:05:7a:82:a3:fa:
7c:7b:c9:25:42:df:63:69:e3:21:ab:3b:a5:56:3f:
6e:08:e8:c5:a1:be:f3:8b:cb:1f:95:eb:82:85:c4:
3a:64:bb:bd:44:0e:46:c1:d1:f3:2b:99:6b:94:13:
86:a4:c9:9b:d8:bc:5a:8f:96:82:4d:4e:07:f1:24:
8c:c1:2a:1b:b4:f0:7c:8b:52:f5:13:e7:c8:3f:16:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:98:66:EF:3E:EE:A5:D0:56:45:CD:8F:34:8B:68:66:68:55:C6:E5
X509v3 Authority Key Identifier:
keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/Iphm7z7updBWRc2PNItoZmhVxuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.133.0/24
IPv6:
2a00:b400::/29
Signature Algorithm: sha256WithRSAEncryption
56:c5:45:a3:e4:ad:80:0b:40:4c:8b:ac:a4:b5:eb:cf:cf:13:
56:b7:8d:e3:21:40:15:f0:e2:a5:a5:f8:10:ec:bd:c9:8c:8d:
c1:3e:78:3a:fc:d0:75:52:25:f8:2a:ee:84:7f:88:10:cc:70:
3c:99:15:1b:e7:4c:9c:44:7d:a5:1d:00:46:84:6c:59:f2:a8:
41:31:50:a8:f2:25:20:c9:80:e3:4b:11:c2:bc:30:6c:b2:60:
14:eb:b0:d7:4e:a4:e7:41:25:e3:f9:15:0b:ff:43:b4:08:0e:
97:d1:c1:8a:90:dd:6f:ee:23:91:50:9e:5f:38:ba:f3:cf:b8:
bd:d4:17:94:64:93:7f:b3:85:e7:10:40:4e:4a:1d:4a:e0:d8:
d9:11:d4:72:bd:ad:61:91:ad:1b:15:ed:86:c0:97:ae:d5:a9:
96:55:08:79:8b:9c:53:20:98:4c:0a:e0:1a:bf:f4:64:4b:e5:
10:2d:34:bd:b9:2d:97:24:a8:ba:dd:a4:e5:63:47:4f:f5:83:
ed:66:d4:d2:e0:c9:9f:11:f9:0f:88:ca:64:42:3d:26:c9:4a:
5e:cd:1b:b9:4d:8e:ac:4e:0f:65:ff:ed:07:84:42:96:03:96:
9e:38:5b:ed:89:56:98:12:23:fc:a5:d9:9d:de:bc:e5:df:e6:
a4:30:60:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:37 2026 by rpki-client