Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/7pW6N95SBaarNHlJ5YSAoacd8ao.roa
File: 7pW6N95SBaarNHlJ5YSAoacd8ao.roa (raw, json)
Hash identifier: AtmfAacFc/GQg4xtQsWYFmleTITIVH1hzZmgjZL4+MI=
Subject key identifier: EE:95:BA:37:DE:52:05:A6:AB:34:79:49:E5:84:80:A1:A7:1D:F1:AA
Certificate issuer: /CN=d1f987af5adb2304d426f540de5d650545231e50
Certificate serial: 019B7C7FF2D8CFB6C3E1F459B265CED9E4E4
Authority key identifier: D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/7pW6N95SBaarNHlJ5YSAoacd8ao.roa
Signing time: Fri 02 Jan 2026 02:18:38 +0000
ROA not before: Fri 02 Jan 2026 02:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202299
IP address blocks: 195.5.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:f2:d8:cf:b6:c3:e1:f4:59:b2:65:ce:d9:e4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f987af5adb2304d426f540de5d650545231e50
Validity
Not Before: Jan 2 02:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee95ba37de5205a6ab347949e58480a1a71df1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:cd:81:17:b2:1b:c9:71:6e:b4:2a:07:cf:
df:f6:e8:8d:88:dc:e0:3e:02:14:52:25:a8:97:0c:
82:6f:47:c1:98:3e:b0:23:0e:f8:9a:89:3f:d2:a7:
a7:e3:bd:6d:52:67:f3:07:3c:99:eb:01:82:68:3b:
c7:12:f0:39:6e:d1:60:2e:69:1a:f0:cc:e1:67:64:
06:96:1c:92:e5:40:61:bb:04:52:1c:da:19:b9:a4:
69:bb:52:6d:f4:4d:6a:27:ad:bd:39:b4:c5:17:cb:
9f:53:86:9b:f0:b2:45:68:51:72:29:7c:13:ba:d7:
cb:1a:53:b8:58:a4:95:7c:25:22:9e:ad:ba:bc:db:
45:f4:b0:50:53:0b:3d:1f:a3:71:e6:4a:3a:51:59:
77:91:86:9c:a6:6e:9d:47:41:90:57:d0:9e:a6:12:
2c:d0:d7:52:34:fa:34:95:08:66:d4:03:87:0b:b6:
b6:0d:c7:3a:e9:36:ad:ee:d4:8a:11:4f:cb:b9:ad:
62:18:c7:b7:01:69:14:a9:b4:76:01:99:6a:15:e2:
2d:9d:c1:ca:d4:46:17:c8:d6:e1:8e:2f:44:be:23:
91:00:b2:67:36:ed:5b:6b:8f:18:ea:4d:08:63:04:
ec:23:dc:ce:f2:a3:1e:ec:35:1f:9c:26:4d:8f:3c:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:BA:37:DE:52:05:A6:AB:34:79:49:E5:84:80:A1:A7:1D:F1:AA
X509v3 Authority Key Identifier:
keyid:D1:F9:87:AF:5A:DB:23:04:D4:26:F5:40:DE:5D:65:05:45:23:1E:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fmHr1rbIwTUJvVA3l1lBUUjHlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/7pW6N95SBaarNHlJ5YSAoacd8ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5ea569-f174-45c5-9db7-2af095ffc9bb/1/0fmHr1rbIwTUJvVA3l1lBUUjHlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
76:68:dc:65:11:df:f8:83:66:7a:34:bd:dc:56:e0:73:5d:ca:
21:6b:12:17:a3:2f:60:25:86:36:e1:7e:91:71:13:6d:25:1c:
9b:0e:59:72:f2:44:35:1b:12:18:df:76:10:25:09:23:35:22:
51:89:a9:9c:e3:10:84:9e:3a:3f:51:75:e2:ba:4f:87:ec:70:
6f:2d:a6:90:6d:1f:d6:57:b4:84:df:ae:97:8d:b4:bb:93:44:
43:62:c0:53:da:73:52:9a:ae:1b:97:16:d6:6d:b3:73:7c:fb:
6b:d8:00:d5:4b:e6:85:7a:5f:21:f7:7e:1d:7d:3e:5b:e9:d0:
be:8b:88:a6:fe:70:8e:1e:0c:ee:fb:9d:ab:d7:46:e8:65:6c:
34:8f:97:78:fd:54:b4:b0:1f:ae:b6:87:cb:bf:a5:76:18:a6:
9a:ae:c3:0f:37:c7:9f:0e:05:aa:ad:8e:d5:09:ad:29:50:df:
cd:2f:47:f7:0e:91:8b:1e:8a:15:15:43:ff:82:12:a2:96:e2:
1d:89:45:81:e0:b6:36:74:cd:4d:22:6d:48:37:ff:af:c8:03:
02:da:82:0b:c7:1a:2b:62:a1:1b:9b:80:95:a6:c9:c2:e2:32:
24:82:0c:4a:b1:e3:d4:39:37:75:8b:1a:bf:7c:b8:d1:9e:fb:
7d:17:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:20:02 2026 by rpki-client