Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Sl7-Gj6EnnbA3uXupRaztTXD_io.roa
File: Sl7-Gj6EnnbA3uXupRaztTXD_io.roa (raw, json)
Hash identifier: fezcKvQQu+h2ziI78m9/Di/EMv2lyq3BEYWNcQA5EA8=
Subject key identifier: 4A:5E:FE:1A:3E:84:9E:76:C0:DE:E5:EE:A5:16:B3:B5:35:C3:FE:2A
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019D95775C3BCDBD95174DCD1F8477C65029
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Sl7-Gj6EnnbA3uXupRaztTXD_io.roa
Signing time: Thu 16 Apr 2026 08:45:20 +0000
ROA not before: Thu 16 Apr 2026 08:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21062
IP address blocks: 213.184.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:95:77:5c:3b:cd:bd:95:17:4d:cd:1f:84:77:c6:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Apr 16 08:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a5efe1a3e849e76c0dee5eea516b3b535c3fe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:b8:e0:8a:90:75:85:92:02:3d:c9:03:b0:
27:44:75:c2:58:3b:f3:6e:d9:48:e7:41:2b:f4:2f:
a0:c3:1b:3c:60:00:f0:79:a9:1b:f0:9e:f4:53:e4:
12:51:ae:fb:e9:97:e0:f8:f7:3b:c3:6b:60:61:6f:
ce:ad:ba:38:85:c5:12:95:b6:7a:89:f4:66:e2:e6:
f4:bb:d0:93:a4:62:62:33:01:ec:57:a7:8d:af:de:
6e:06:31:a3:ac:ca:1f:e2:b9:ac:4e:75:6d:7d:91:
53:b3:92:43:25:5d:34:ef:77:e6:ff:f3:6b:12:4c:
bf:08:6e:c3:ba:65:3b:b2:55:94:9d:a7:58:c2:1f:
83:00:33:39:f3:37:03:5e:bf:15:fe:8c:08:2c:b9:
d7:07:d1:d1:7f:06:e1:91:ef:eb:d7:8f:08:18:bd:
c9:98:b3:46:b5:0b:bd:2c:de:0c:fc:21:83:e6:e6:
2e:4e:87:61:42:70:30:11:2d:98:8f:cb:b2:85:32:
4b:22:dc:25:3f:3f:79:8d:d2:82:d4:0d:e7:93:50:
72:15:76:14:2f:fe:77:aa:b6:40:33:e0:f5:bb:bc:
e6:4c:a3:37:a3:49:ed:d6:dc:06:67:23:4c:5f:a6:
de:c6:81:63:a8:65:83:ba:9a:39:16:c5:0d:51:ea:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:FE:1A:3E:84:9E:76:C0:DE:E5:EE:A5:16:B3:B5:35:C3:FE:2A
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/Sl7-Gj6EnnbA3uXupRaztTXD_io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.241.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:c0:ec:b7:b7:2b:b8:39:e5:e5:8f:3e:e7:42:73:03:33:
07:99:2a:b6:03:f2:88:08:6b:e2:4b:70:d7:9f:a5:a4:58:b7:
65:21:5d:5f:86:e3:2e:ef:f4:df:47:36:80:b9:65:6b:e2:62:
e1:f0:6a:ec:dc:0e:24:94:2f:fc:3b:9f:fa:c3:30:5d:ff:06:
99:58:bb:ac:dd:64:b8:70:ba:cf:0b:13:55:75:2c:08:8d:d1:
73:da:6c:cf:96:5b:93:4d:66:f7:0e:1e:51:40:38:2c:5c:b4:
37:88:b9:63:8c:7a:46:0b:98:d1:d4:c9:c2:5f:73:0f:51:c1:
e4:49:ca:1f:9f:1a:df:0b:82:20:66:88:c5:ca:13:f9:d5:38:
0b:43:09:24:ed:9c:40:ad:61:cb:6e:52:3c:0b:5a:63:ef:7e:
b0:b0:55:4f:4f:f4:2f:78:0f:e5:68:5f:3c:95:4c:66:f8:b3:
7c:13:cc:40:08:55:59:28:cd:9e:55:23:a4:dc:19:67:5b:70:
7e:7e:06:fe:1e:71:dd:d8:68:62:5e:33:36:a5:fe:64:7e:7b:
0b:36:15:53:4a:5a:32:97:11:06:10:4e:ca:ab:98:b1:bd:30:
16:c7:51:3a:77:2e:d9:be:d1:05:0c:a8:19:e5:d1:97:12:e6:
cf:54:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:36:44 2026 by rpki-client