Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/e7Fl4H2i3mxxVNDEooqw16LpBh8.roa
File: e7Fl4H2i3mxxVNDEooqw16LpBh8.roa (raw, json)
Hash identifier: Mc9nZVgH7CJHLOy42VICmVEXyck/8wjoayN/sss2Qm8=
Subject key identifier: 7B:B1:65:E0:7D:A2:DE:6C:71:54:D0:C4:A2:8A:B0:D7:A2:E9:06:1F
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019C2DFFED76AC408AEB201E759B8B4C1CD2
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/e7Fl4H2i3mxxVNDEooqw16LpBh8.roa
Signing time: Thu 05 Feb 2026 13:31:12 +0000
ROA not before: Thu 05 Feb 2026 13:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 93.127.148.0/23 maxlen: 24
93.127.152.0/23 maxlen: 24
93.127.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:ff:ed:76:ac:40:8a:eb:20:1e:75:9b:8b:4c:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Feb 5 13:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb165e07da2de6c7154d0c4a28ab0d7a2e9061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:23:fc:3d:a0:5b:d4:72:0f:4e:7e:cf:9a:
3c:de:fc:f8:74:9a:a7:20:b8:9f:09:20:2c:ea:e8:
74:a1:22:97:dd:b9:cf:5d:b4:a6:c4:85:26:aa:44:
05:7f:54:3d:12:15:fb:73:42:3c:33:0a:cd:2c:fe:
99:70:39:93:19:c9:65:f3:93:d8:0d:20:a4:a3:a6:
19:ab:1a:89:15:e2:b8:af:a4:fc:4c:3f:5b:a4:73:
fb:0e:f0:6d:2c:06:0d:f4:0e:d4:d0:7a:92:6e:c7:
83:e4:61:c4:2a:09:50:1b:a2:70:d2:4d:52:a8:95:
5f:86:86:64:b9:b3:3a:1a:9b:b0:4a:c5:35:8c:1f:
40:da:ae:26:30:72:59:b9:d8:57:5b:9e:01:34:77:
3d:03:25:c7:4e:24:f8:78:de:7b:08:aa:0a:f8:6d:
a3:9d:0a:6d:ec:80:3e:50:32:37:0f:34:88:f6:3a:
34:4a:7e:6c:61:69:6f:0e:7d:0f:7b:ac:2b:c4:1f:
fe:37:f8:b1:6d:8d:68:06:47:da:2c:8e:da:79:fb:
e0:27:0b:a3:86:2d:c5:61:3f:be:2f:f4:05:c7:5a:
07:6d:ac:f5:05:90:af:8d:cf:83:7e:86:6b:63:84:
bd:ec:84:2f:ee:d6:fc:f2:2b:07:df:1c:1d:a5:94:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:65:E0:7D:A2:DE:6C:71:54:D0:C4:A2:8A:B0:D7:A2:E9:06:1F
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/e7Fl4H2i3mxxVNDEooqw16LpBh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.148.0/23
93.127.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:ba:12:8c:45:7a:bc:74:c3:8f:ff:95:ad:4a:36:6b:fa:e6:
bd:f5:e7:37:d8:1e:87:d7:ab:42:0d:db:dd:88:a8:94:29:0b:
a6:17:01:0f:47:d2:86:28:c9:bd:06:43:ca:02:0a:73:6f:68:
74:0b:d8:97:78:7b:5c:6b:bf:52:61:4a:a4:35:cd:5d:81:62:
a1:15:1f:d6:dc:42:23:73:52:57:c1:ef:f5:49:a1:7b:56:e8:
6c:19:ad:5f:31:d3:d1:31:38:f3:28:7b:35:4e:2a:b2:2a:7e:
49:64:a8:e0:1c:bf:69:65:dd:93:ca:59:47:80:bb:5c:2d:75:
73:20:21:71:a9:4a:a6:65:dd:6e:6f:2f:80:9b:db:2d:24:09:
1f:fe:af:74:f0:d8:0c:74:e4:b4:18:e8:d3:66:77:15:3a:c2:
77:b1:fa:82:bb:3f:2a:14:66:56:3a:a6:1f:ca:16:9a:a8:d2:
d1:7b:d4:68:cc:d3:a9:1f:15:3a:04:54:4b:d8:c6:ae:04:ff:
b5:f9:1c:35:87:2a:ab:37:08:7e:98:a2:e6:0d:ae:d5:a2:eb:
4c:2a:3f:aa:ba:b6:31:27:ba:29:60:05:6d:0b:5c:1e:73:5f:
aa:52:c0:1a:75:65:81:7e:6c:fb:0b:ed:d1:9c:4e:05:32:86:
92:83:ed:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwt/+12rECK6yAedZuLTBzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjYwMjA1MTMzMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmIxNjVlMDdkYTJkZTZjNzE1NGQwYzRhMjhhYjBkN2EyZTkwNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8gj/D2gW9RyD05+z5o83vz4dJqn
ILifCSAs6uh0oSKX3bnPXbSmxIUmqkQFf1Q9EhX7c0I8MwrNLP6ZcDmTGcll85PY
DSCko6YZqxqJFeK4r6T8TD9bpHP7DvBtLAYN9A7U0HqSbseD5GHEKglQG6Jw0k1S
qJVfhoZkubM6GpuwSsU1jB9A2q4mMHJZudhXW54BNHc9AyXHTiT4eN57CKoK+G2j
nQpt7IA+UDI3DzSI9jo0Sn5sYWlvDn0Pe6wrxB/+N/ixbY1oBkfaLI7aefvgJwuj
hi3FYT++L/QFx1oHbaz1BZCvjc+DfoZrY4S97IQv7tb88isH3xwdpZRrqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHuxZeB9ot5scVTQxKKKsNei6QYfMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvZTdGbDRIMmkzbXh4Vk5ERW9vcXcxNkxwQmg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXX+UAwQC
XX+YMA0GCSqGSIb3DQEBCwUAA4IBAQDAuhKMRXq8dMOP/5WtSjZr+ua99ec32B6H
16tCDdvdiKiUKQumFwEPR9KGKMm9BkPKAgpzb2h0C9iXeHtca79SYUqkNc1dgWKh
FR/W3EIjc1JXwe/1SaF7VuhsGa1fMdPRMTjzKHs1TiqyKn5JZKjgHL9pZd2TyllH
gLtcLXVzICFxqUqmZd1uby+Am9stJAkf/q908NgMdOS0GOjTZncVOsJ3sfqCuz8q
FGZWOqYfyhaaqNLRe9RozNOpHxU6BFRL2MauBP+1+Rw1hyqrNwh+mKLmDa7VoutM
Kj+qurYxJ7opYAVtC1wec1+qUsAadWWBfmz7C+3RnE4FMoaSg+1u
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:33 2026 by rpki-client