Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/sj7z-OE7wtWIbAsLlk0f8070JJA.roa
File: sj7z-OE7wtWIbAsLlk0f8070JJA.roa (raw, json)
Hash identifier: fCvU62phFkPvYGJbKu7jFDsWbZSEAX8kQ2AkhH7Ekk4=
Subject key identifier: B2:3E:F3:F8:E1:3B:C2:D5:88:6C:0B:0B:96:4D:1F:F3:4E:F4:24:90
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 019B7911297D4B6B3CA8DDD181F345C7DE87
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/sj7z-OE7wtWIbAsLlk0f8070JJA.roa
Signing time: Thu 01 Jan 2026 10:18:46 +0000
ROA not before: Thu 01 Jan 2026 10:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210061
IP address blocks: 176.118.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:29:7d:4b:6b:3c:a8:dd:d1:81:f3:45:c7:de:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jan 1 10:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b23ef3f8e13bc2d5886c0b0b964d1ff34ef42490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:82:3a:0c:3e:44:82:ef:fb:a1:7c:1b:c7:
57:5d:2f:97:ee:2a:47:26:fc:23:f6:fd:3d:c1:8e:
78:88:f6:fa:13:9c:dd:8d:28:bb:a8:1e:ea:e0:a2:
ce:c5:31:17:c5:3a:1c:23:fe:78:fb:80:b8:89:a1:
11:f1:7f:84:02:e3:af:e7:d3:ab:3f:bb:86:82:13:
b0:dc:0f:7c:d1:73:4c:35:12:20:43:0c:89:a1:cd:
ec:5b:50:5e:53:07:67:21:e0:a6:2f:07:e2:d0:79:
c9:60:91:bd:ab:a0:74:a9:58:56:ff:c1:98:76:d7:
1e:1f:8d:55:90:a9:aa:8a:66:6e:70:07:ae:c5:29:
0d:84:bb:11:62:c8:2b:c6:81:2d:ac:2b:2e:05:14:
b6:4b:c2:7a:23:1a:ea:84:7d:9c:86:62:20:01:3f:
57:83:30:18:72:29:fd:71:41:8c:10:6b:87:fa:2a:
00:c5:84:6a:91:e6:8e:b3:23:59:2d:a7:bd:7d:82:
6d:d7:ba:66:be:a6:1f:0b:74:3b:09:40:75:00:c2:
56:a5:0e:1e:18:01:08:8f:16:4e:07:37:df:e9:52:
9c:a9:76:73:c9:3c:18:29:c8:53:d4:36:00:6d:93:
f5:e7:60:0f:b8:d0:34:9f:28:da:00:f7:96:0d:d7:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:F3:F8:E1:3B:C2:D5:88:6C:0B:0B:96:4D:1F:F3:4E:F4:24:90
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/sj7z-OE7wtWIbAsLlk0f8070JJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.168.0/23
Signature Algorithm: sha256WithRSAEncryption
17:be:06:18:db:5a:28:90:6f:1d:a5:81:27:a1:39:d1:f1:b0:
6b:49:74:72:2d:e1:9c:5f:12:4b:38:e5:0e:1a:0a:75:55:26:
58:3c:ea:71:2d:08:44:f4:8d:b7:5e:cd:70:51:a6:40:ce:f2:
98:2b:ec:d2:1e:62:8c:e1:b1:23:e9:42:3f:23:b1:02:c6:66:
d1:22:4c:21:3b:25:5d:10:0e:1a:fd:95:de:b7:78:ea:b9:3d:
0b:19:62:6f:dd:cf:89:bc:e8:4e:9e:18:18:04:34:8f:1b:d3:
c9:f4:a2:15:e6:70:f9:1f:60:09:7f:98:9d:bb:d3:59:04:4f:
e0:b7:72:53:79:1c:8a:d0:32:7f:bf:fd:9c:ef:e3:6a:f5:55:
0a:86:3d:ec:21:54:64:21:00:ee:93:7e:60:42:f4:dd:e3:2b:
d9:fa:52:61:11:be:5a:ab:5a:54:d9:73:a5:86:bd:68:4b:42:
7a:6d:12:99:ec:b7:01:91:00:de:c0:d9:24:27:f4:8e:d3:9a:
10:9b:30:80:8c:a5:98:8d:77:08:ba:e8:8e:ea:c4:c3:69:fc:
c5:c4:bd:df:d9:59:75:43:f3:a8:37:e6:87:ae:bf:1d:42:fd:
b0:ce:3b:6b:fb:df:f1:82:8f:f2:6a:6d:24:65:e7:11:4d:c6:
d7:2c:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:59:47 2026 by rpki-client