Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/7VD9FedHhDKp3jdPS8TH2m8uSuc.roa
File: 7VD9FedHhDKp3jdPS8TH2m8uSuc.roa (raw, json)
Hash identifier: xZcVVNzE+1lnqo21oPoTvLeW+I9A4gbqd0xRQIvFm5Q=
Subject key identifier: ED:50:FD:15:E7:47:84:32:A9:DE:37:4F:4B:C4:C7:DA:6F:2E:4A:E7
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 01A09C14DAB2588D7E92178EAD222E2D6941
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/7VD9FedHhDKp3jdPS8TH2m8uSuc.roa
Signing time: Sun 13 Sep 2026 18:43:27 +0000
ROA not before: Sun 13 Sep 2026 18:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 176.101.40.0/21 maxlen: 21
176.101.40.0/24 maxlen: 24
176.101.41.0/24 maxlen: 24
176.101.42.0/24 maxlen: 24
176.101.43.0/24 maxlen: 24
176.101.44.0/24 maxlen: 24
176.101.45.0/24 maxlen: 24
176.101.46.0/24 maxlen: 24
176.101.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:14:da:b2:58:8d:7e:92:17:8e:ad:22:2e:2d:69:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Sep 13 18:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed50fd15e7478432a9de374f4bc4c7da6f2e4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:af:e5:aa:e6:81:f0:4e:bc:3b:83:77:8b:
b9:ce:f0:3f:f0:72:38:5b:65:a5:48:a2:c1:23:b7:
cf:ad:55:45:9f:f0:fa:86:a7:67:76:e0:ba:72:3c:
2c:ba:85:64:86:3c:7c:9f:31:8c:bb:d8:0e:1f:2b:
5d:20:f8:69:3d:db:57:6c:17:0c:3f:70:89:44:fc:
65:71:24:3b:c3:59:14:06:c7:11:60:fd:a4:fb:28:
74:b4:a8:cd:80:94:e4:eb:ba:93:33:f7:18:b7:e4:
a9:ec:22:c1:74:a0:fd:d4:6e:41:ae:c7:12:a4:ca:
6b:4a:b4:01:25:39:90:82:0b:6c:91:61:c7:a9:ba:
07:25:e1:05:39:a8:b3:e4:6a:b4:d9:2d:c7:02:b1:
39:71:77:91:6b:6e:4d:72:e3:b7:a7:04:16:bb:58:
84:02:0e:ec:26:6c:53:be:e7:ad:2e:c0:c3:69:1f:
ac:d3:4d:73:fe:06:5b:6d:85:ec:b1:d2:1c:af:61:
0c:44:39:a8:3e:49:34:9c:98:67:2e:b6:f2:f2:84:
05:aa:c6:7d:b0:6d:1d:75:46:11:77:fe:3a:e5:af:
d5:1a:28:99:f9:40:11:0c:9f:56:92:49:08:69:d8:
88:f3:4c:59:62:fb:9d:9e:79:9c:10:78:08:c0:10:
39:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:FD:15:E7:47:84:32:A9:DE:37:4F:4B:C4:C7:DA:6F:2E:4A:E7
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/7VD9FedHhDKp3jdPS8TH2m8uSuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.101.40.0/21
Signature Algorithm: sha256WithRSAEncryption
75:2c:91:a7:d4:1e:a5:67:56:00:e4:74:79:e1:83:91:3e:f0:
e4:4b:54:06:01:3f:d4:14:20:fa:03:7d:f6:d6:db:b9:66:cd:
c2:16:20:13:a8:0b:eb:09:f2:89:bc:97:a8:91:f3:85:94:ef:
70:56:6a:de:a3:36:e6:fb:08:ec:07:57:5f:57:a0:1a:6f:4e:
33:ef:ae:1d:23:66:73:c4:66:18:30:00:da:ad:32:2b:91:e7:
7e:74:c4:19:00:6a:d6:f7:3b:61:d0:2c:37:6d:a1:d3:5c:38:
80:05:59:8b:dc:96:7f:d8:96:b1:3f:8d:76:b9:66:90:17:7c:
b8:05:93:4f:90:06:3d:b0:1e:e9:d0:8c:ea:5f:00:9d:7f:d1:
3f:76:49:12:0c:57:6d:8c:16:ed:f1:3b:b1:30:2f:2b:95:76:
53:37:5f:64:26:fc:4e:55:7a:76:eb:06:42:e6:69:f7:17:4c:
cc:60:ba:d7:9e:3f:49:16:22:3b:dc:1e:5f:46:bf:e6:88:49:
6e:56:ef:df:9d:8a:bc:91:3e:26:3d:60:49:10:40:cb:13:e6:
cf:77:d0:45:69:93:a3:6d:4c:9c:b6:72:43:22:69:d4:3d:d3:
e0:8d:cd:93:1a:45:38:6c:bc:44:59:a6:2f:22:20:7a:63:f4:
d7:3f:05:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:24 2026 by rpki-client