Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa
File: 7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa (raw, json)
Hash identifier: y5TlPBhDp/P3UW7VHo9Ke01pzrHP6whRVTrTY5Gd794=
Subject key identifier: EF:1D:A6:FA:55:3A:14:D4:B9:CA:AB:F9:97:0C:86:15:A7:3F:5F:86
Certificate issuer: /CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Certificate serial: 019B77C755FFBBBFEAFAED4D416A9D8E3835
Authority key identifier: DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa
Signing time: Thu 01 Jan 2026 04:18:30 +0000
ROA not before: Thu 01 Jan 2026 04:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52204
IP address blocks: 176.118.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:55:ff:bb:bf:ea:fa:ed:4d:41:6a:9d:8e:38:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de7c82b2276cbdf130ccad046b65feab2c27ed49
Validity
Not Before: Jan 1 04:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef1da6fa553a14d4b9caabf9970c8615a73f5f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fd:bc:a4:b6:40:36:ab:ff:80:ba:ad:1c:e1:
04:df:eb:08:01:87:5c:80:8c:8d:1e:a5:32:eb:3e:
da:a8:74:43:6e:af:d8:13:fc:e8:df:b9:16:3e:1a:
28:3f:00:93:30:0b:17:42:c6:b4:ed:1c:60:82:d1:
12:08:43:ce:a3:23:e6:86:48:02:bf:d4:d7:bc:33:
1a:b0:19:72:ac:0d:a1:9e:a8:35:4d:9c:4b:48:30:
5a:c9:93:30:1f:e8:37:34:87:e5:2a:db:ac:be:7e:
ca:18:6d:28:ff:70:d8:0c:30:8b:bc:55:07:75:9b:
02:09:20:14:05:bd:2e:c5:f7:7d:59:27:60:97:98:
d5:3a:89:3e:1a:a1:7b:13:f2:d0:2a:ba:a3:e7:cf:
ac:76:ac:a0:14:59:14:ce:a5:9b:38:3f:e4:0e:e5:
ed:7f:05:98:64:e4:19:fb:80:50:ad:31:59:15:78:
4b:aa:24:f6:9b:dd:c5:87:d2:2c:c9:ba:7f:c2:89:
01:bf:2a:fb:4c:1c:14:84:b5:fe:09:95:7f:6f:b0:
9e:ef:e7:f1:34:a2:55:c0:66:34:f6:11:1c:74:2f:
26:7a:64:b0:e8:1d:19:f2:80:c2:99:9f:73:80:63:
46:f8:48:8b:a1:35:32:c8:96:2c:90:8f:fe:e8:e2:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:A6:FA:55:3A:14:D4:B9:CA:AB:F9:97:0C:86:15:A7:3F:5F:86
X509v3 Authority Key Identifier:
keyid:DE:7C:82:B2:27:6C:BD:F1:30:CC:AD:04:6B:65:FE:AB:2C:27:ED:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3nyCsidsvfEwzK0Ea2X-qywn7Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/7x2m-lU6FNS5yqv5lwyGFac_X4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6fa5df-fb9f-4ae5-ba89-7faf7c1de7b0/1/3nyCsidsvfEwzK0Ea2X-qywn7Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.184.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ed:6e:66:9e:27:e7:ab:01:94:ca:ce:01:ad:0e:da:3a:f9:
b4:68:45:94:dc:f3:b4:03:7d:e4:bf:8b:dd:7e:46:9e:01:0f:
c9:74:5f:9e:03:af:d5:84:20:60:2f:20:18:ae:14:a5:74:a2:
4c:46:05:0c:b9:a3:de:8f:54:bc:bf:94:a1:c1:05:a8:cf:a1:
de:8d:b1:b6:61:5d:fa:5a:bd:3d:05:88:ac:c2:e5:b2:2c:05:
b8:a1:64:e4:d5:6d:1e:93:42:35:47:2b:a6:0e:6e:8e:77:99:
5d:50:3a:cd:f2:e9:5e:48:9e:7a:a5:e9:fb:0d:ae:28:0d:4e:
7f:21:22:64:08:89:a3:22:86:21:f9:7d:42:fc:6a:99:f0:7f:
e0:bc:b6:fc:cf:d2:49:d1:37:2b:8d:92:64:46:47:fa:af:f5:
56:98:9b:09:3b:43:94:36:d4:0e:12:2c:49:ac:8c:26:c6:fe:
5c:1c:0a:eb:88:27:01:a8:0c:ee:62:3c:56:90:86:02:a7:0e:
43:26:38:3f:57:2a:00:2d:71:fa:d9:3a:68:99:ed:d8:b9:38:
80:20:d3:c2:a4:c9:fd:11:02:d9:2b:4f:e9:a9:76:a0:f5:a5:
42:b5:10:52:f2:ab:47:f1:a9:41:83:5b:33:a4:fa:c1:06:10:
db:b2:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:40 2026 by rpki-client