Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/7CXsCgAfCOJLALBOGkx3gQa_WW4.roa
File: 7CXsCgAfCOJLALBOGkx3gQa_WW4.roa (raw, json)
Hash identifier: BPY9s5jDNjWqu3tOt7+z02RZaquMjrvdU5SFJ4t+o2c=
Subject key identifier: EC:25:EC:0A:00:1F:08:E2:4B:00:B0:4E:1A:4C:77:81:06:BF:59:6E
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 019D821448443073943B16C79B3CDD40A62A
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/7CXsCgAfCOJLALBOGkx3gQa_WW4.roa
Signing time: Sun 12 Apr 2026 14:24:20 +0000
ROA not before: Sun 12 Apr 2026 14:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 185.11.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:14:48:44:30:73:94:3b:16:c7:9b:3c:dd:40:a6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Apr 12 14:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec25ec0a001f08e24b00b04e1a4c778106bf596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:ff:93:4d:fd:ff:a6:da:6c:31:8c:f5:21:
72:0f:14:ce:2e:4f:64:44:39:33:ad:8f:dc:96:c2:
4b:37:e6:f5:c1:b9:cf:af:bd:d1:27:0d:84:fe:7b:
d5:fe:49:66:a3:12:e6:39:ac:ee:ff:d7:3a:26:50:
2f:4d:f7:12:1e:3f:93:29:c2:a8:6c:38:d0:eb:3a:
55:23:ba:69:14:7e:bf:b2:12:97:71:8e:01:b7:7f:
4b:fe:48:83:70:95:fd:db:b7:23:22:c6:80:32:d5:
db:d5:3e:24:e9:e2:79:18:c9:f6:5e:46:59:f2:33:
26:da:84:cb:80:0f:99:90:54:1e:76:02:0b:10:4b:
20:7c:4d:ee:7a:22:9c:a8:15:b8:9a:65:06:b2:24:
10:b2:ca:3e:5c:48:35:ac:4a:22:ca:b1:50:ca:76:
24:61:42:f6:91:b8:bc:bf:cf:db:14:a3:2f:38:51:
f0:05:67:97:57:a6:9d:b4:9a:20:f1:5a:5f:5a:cb:
fb:80:13:34:71:6b:a0:91:52:c4:39:b2:81:9e:f8:
b2:72:02:72:f4:1d:ed:17:3f:29:c5:e0:e7:91:42:
9d:d4:f7:b2:59:02:2e:9d:96:c7:6f:e8:5e:86:b8:
dd:32:75:3a:1a:53:db:f1:37:41:ea:bf:4d:53:45:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:EC:0A:00:1F:08:E2:4B:00:B0:4E:1A:4C:77:81:06:BF:59:6E
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/7CXsCgAfCOJLALBOGkx3gQa_WW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
51:69:7f:8f:7b:c1:2a:ec:d7:7f:17:34:82:12:dd:a6:a6:91:
0e:da:4a:30:45:4a:20:4e:bc:e4:91:fc:12:9e:6b:1d:b7:e2:
b5:23:dd:64:66:43:98:d1:5a:ee:23:1b:6e:9b:e9:42:b0:d0:
53:2d:09:f7:de:f8:4d:19:92:f6:74:8e:2a:33:80:fe:f7:06:
32:67:26:71:1c:dc:66:17:b4:7b:df:dd:4b:c2:19:1b:59:33:
69:5a:ae:1f:44:1f:98:32:e9:60:03:a4:b2:ca:97:d5:85:89:
76:e7:a5:df:64:9b:2d:d4:21:2e:19:a0:8e:5b:32:fa:b8:bb:
68:7e:e2:bd:59:3e:81:d9:6e:bf:e7:9e:55:38:ad:22:e8:5a:
b3:ac:72:c6:bd:da:d6:2c:74:fc:f0:48:cb:7c:e8:81:22:9b:
e3:fd:8c:a8:c1:0a:07:33:0d:0e:2a:42:75:e0:d8:54:c5:47:
d2:f2:c7:99:05:8c:9b:99:eb:fb:0e:8d:a4:29:7c:57:9d:aa:
39:da:f8:ef:86:d2:cf:6b:a7:d7:07:51:cb:1c:99:4c:3e:88:
fb:b4:08:fe:2b:0a:4d:9e:44:c7:1c:f6:06:eb:20:e4:d2:1f:
55:ab:8d:96:43:ed:d7:3f:44:b8:06:a8:b5:11:d5:85:6a:0c:
04:00:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:44 2026 by rpki-client