Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7NuKOIx2N6cCR-BbRM3-xYumC8g.roa
File: 7NuKOIx2N6cCR-BbRM3-xYumC8g.roa (raw, json)
Hash identifier: MvnbzvuoGjdD5urWboJ+vbaG/5CXLP/zXZ98k/eTnD8=
Subject key identifier: EC:DB:8A:38:8C:76:37:A7:02:47:E0:5B:44:CD:FE:C5:8B:A6:0B:C8
Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial: 01A05BBF3417B5A8105A3C048A00BCCCAC6D
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7NuKOIx2N6cCR-BbRM3-xYumC8g.roa
Signing time: Tue 01 Sep 2026 06:54:12 +0000
ROA not before: Tue 01 Sep 2026 06:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 91.201.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:bf:34:17:b5:a8:10:5a:3c:04:8a:00:bc:cc:ac:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Validity
Not Before: Sep 1 06:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecdb8a388c7637a70247e05b44cdfec58ba60bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b2:1f:7c:26:83:31:99:7c:73:7b:ea:f4:f3:
03:4d:92:b9:36:8c:ff:8c:37:e8:09:c7:de:3a:42:
57:3c:90:66:38:a0:b9:30:bd:b8:d5:c4:e5:55:64:
e8:be:aa:c7:7d:de:27:98:6b:20:f3:49:d4:d7:ec:
7d:a3:ec:1e:3d:95:04:86:2a:fe:35:fd:f4:95:1e:
a3:b8:36:79:1c:d8:83:00:95:e3:47:71:e8:64:5b:
ca:66:9b:b3:cf:cb:a8:84:17:47:89:14:d1:7b:17:
50:40:b9:da:fa:8a:5b:df:d6:7a:0e:f1:15:08:69:
4d:e3:fe:7a:f6:d8:d7:40:b4:1b:c0:40:da:2e:c8:
56:c9:5a:2a:9b:87:ed:0c:23:2d:93:31:58:b5:8b:
d6:93:f2:75:56:51:6c:59:75:5e:eb:a2:8d:82:1f:
8a:b5:b0:18:63:4d:e3:58:e9:a2:36:1f:d7:67:77:
21:2e:3f:d5:83:3e:55:ef:af:f1:c5:35:1a:ef:e3:
fa:c7:32:f3:77:59:df:f7:72:3e:7e:a6:83:c2:08:
02:eb:ac:d1:79:92:f3:9b:c1:1e:b3:56:2f:2c:ce:
ca:55:36:ff:c9:bf:1a:c5:d1:2a:46:66:ee:47:69:
10:a9:97:8f:65:66:c9:5f:4e:11:c7:06:31:50:6e:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:8A:38:8C:76:37:A7:02:47:E0:5B:44:CD:FE:C5:8B:A6:0B:C8
X509v3 Authority Key Identifier:
keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7NuKOIx2N6cCR-BbRM3-xYumC8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a0:16:57:35:e0:5a:90:4e:ad:e8:eb:a7:b0:33:1d:ff:13:
06:3e:14:df:17:0e:72:c8:c9:f6:e0:21:0b:0e:7a:56:bb:1b:
a9:e7:3f:3e:e1:e8:82:3a:d0:e9:66:43:fb:fd:5c:82:c4:ec:
81:5b:51:e2:21:ac:f9:98:a2:4d:9d:ea:88:38:2e:df:c3:12:
98:91:21:ba:8b:2b:0d:8c:86:a3:10:d0:f7:23:95:54:25:a9:
18:70:3f:c4:8b:da:ec:93:e2:f6:78:83:c1:20:89:8f:88:63:
07:e3:0f:12:9e:14:a7:bd:89:70:ca:38:2e:d1:f0:97:41:5b:
a9:43:6e:8c:58:9f:a0:ec:92:6f:83:f2:e8:0e:91:83:72:2d:
ef:ee:18:8f:1f:e6:b5:3f:fc:f1:07:15:1c:55:38:c1:db:6d:
ec:20:a6:c9:3f:a8:25:d4:a6:9e:ea:1e:04:ca:ad:7b:a3:40:
cb:39:1a:8a:12:a4:69:e1:53:99:d7:22:95:45:8e:47:4d:5d:
4a:21:6d:9b:96:75:52:67:c3:2b:69:e3:a1:8c:e4:e2:98:e2:
79:e6:31:35:25:fc:22:cf:80:cf:6d:71:5c:9a:8c:1f:a2:55:
78:da:71:f5:25:ca:df:4f:41:eb:b7:8c:1a:82:5a:5c:cb:9f:
4e:70:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:05:46 2026 by rpki-client