Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa
File: 7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa (raw, json)
Hash identifier: N3bWUEKlUmd1ZWXFQJ1w3IasK7+KcFP+TddtcfWJbkM=
Subject key identifier: EC:59:A9:5E:E0:07:34:71:83:64:51:51:F8:25:FB:36:FD:9A:C9:CB
Certificate issuer: /CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Certificate serial: 019F2368859E95F11FB4595CA60EEF5D9CB9
Authority key identifier: 2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa
Signing time: Thu 02 Jul 2026 15:18:00 +0000
ROA not before: Thu 02 Jul 2026 15:18:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41957
IP address blocks: 195.114.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:85:9e:95:f1:1f:b4:59:5c:a6:0e:ef:5d:9c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0f125e3f1032ed9b9df566e4c11000692a3f31
Validity
Not Before: Jul 2 15:18:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec59a95ee007347183645151f825fb36fd9ac9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ca:f3:36:66:94:51:fb:8d:0e:d7:d0:f1:90:
8f:b4:f0:43:a5:07:ba:4d:32:ee:c4:52:41:e6:42:
83:d1:ab:9e:19:14:fc:0d:59:a3:47:b7:fe:1f:48:
0a:f7:91:d2:6c:88:69:d4:bf:6f:55:a6:dd:6b:51:
16:46:16:9c:1b:92:f0:36:ad:96:ea:64:59:6f:e1:
d1:e1:28:43:ec:83:71:9f:1e:bf:37:86:3b:ec:9e:
0e:d4:41:ab:4b:ca:69:58:99:ef:ad:fc:3c:a4:03:
70:83:26:d4:e7:46:7c:7d:68:ac:63:86:71:79:e5:
f4:84:93:86:7e:1f:e8:37:95:7b:5b:27:36:96:65:
1b:c4:2c:a5:22:92:7a:b1:f4:70:d4:4c:ef:e1:f7:
af:a7:ba:d6:98:c1:c3:12:92:65:d3:fc:04:af:86:
eb:53:92:34:d1:e9:55:a7:bb:a3:0d:0a:73:3a:2f:
55:63:c7:51:9c:1d:74:09:88:3e:78:5c:94:3a:3a:
a4:7b:db:22:2d:d5:19:91:95:b7:e0:66:14:0c:60:
5c:c9:db:3b:be:f0:1c:dc:ca:38:77:11:f4:13:21:
68:2c:26:ca:21:9f:dd:a1:08:99:bf:d1:ff:6f:16:
73:5b:39:fd:8a:02:5a:78:f4:70:d2:a9:3e:9b:c2:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:59:A9:5E:E0:07:34:71:83:64:51:51:F8:25:FB:36:FD:9A:C9:CB
X509v3 Authority Key Identifier:
keyid:2E:0F:12:5E:3F:10:32:ED:9B:9D:F5:66:E4:C1:10:00:69:2A:3F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/7FmpXuAHNHGDZFFR-CX7Nv2aycs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6df87f-1e3c-47c5-85de-0d8ebce86cac/1/Lg8SXj8QMu2bnfVm5MEQAGkqPzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0d:2b:65:7d:de:01:f5:82:10:7a:e7:e6:30:f2:ce:4b:44:
f0:5d:04:fa:d7:ce:a3:bf:78:79:a2:5e:59:c8:88:f7:60:be:
73:36:1f:17:1e:4d:7b:1d:2f:c7:e5:06:b0:08:00:4a:3c:a4:
de:2e:ce:a8:a6:b4:8d:a3:5c:3a:94:a0:61:b4:99:c2:60:1f:
db:b0:de:ab:c1:dd:76:06:c9:bf:4a:3d:22:c5:2e:a1:c1:8e:
8e:7b:44:a5:51:52:21:fb:a1:42:d5:8b:f3:d2:61:3c:9b:43:
da:a4:25:2e:fb:72:b7:b9:6c:2a:77:43:b4:6a:1b:93:8c:c3:
d9:e6:1b:77:3d:7c:9a:d1:2f:40:55:c6:6d:14:82:36:80:ca:
ca:63:58:36:ce:b3:2c:ca:db:9a:9b:76:98:ed:77:53:21:a3:
4e:7b:ba:1a:8c:78:52:fc:e7:46:34:4e:05:9b:58:5c:2c:b3:
bd:bb:55:6a:fa:c9:24:e9:42:06:19:8b:0c:8c:45:4b:bb:63:
fc:ee:2c:70:84:f8:0b:7b:31:96:7f:57:d3:58:16:f2:93:85:
e0:ea:0f:88:0d:f0:5f:e2:69:6a:73:16:06:9e:30:bf:d1:2f:
38:41:c0:41:9c:07:f5:8b:17:ae:e8:05:f6:3f:a1:a9:d1:8d:
cb:31:14:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaIWelfEftFlcpg7vXZy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGYxMjVlM2YxMDMyZWQ5YjlkZjU2NmU0YzExMDAwNjky
YTNmMzEwHhcNMjYwNzAyMTUxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzU5YTk1ZWUwMDczNDcxODM2NDUxNTFmODI1ZmIzNmZkOWFjOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcrzNmaUUfuNDtfQ8ZCPtPBDpQe6
TTLuxFJB5kKD0aueGRT8DVmjR7f+H0gK95HSbIhp1L9vVabda1EWRhacG5LwNq2W
6mRZb+HR4ShD7INxnx6/N4Y77J4O1EGrS8ppWJnvrfw8pANwgybU50Z8fWisY4Zx
eeX0hJOGfh/oN5V7Wyc2lmUbxCylIpJ6sfRw1Ezv4fevp7rWmMHDEpJl0/wEr4br
U5I00elVp7ujDQpzOi9VY8dRnB10CYg+eFyUOjqke9siLdUZkZW34GYUDGBcyds7
vvAc3Mo4dxH0EyFoLCbKIZ/doQiZv9H/bxZzWzn9igJaePRw0qk+m8IRNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOxZqV7gBzRxg2RRUfgl+zb9msnLMB8GA1UdIwQY
MBaAFC4PEl4/EDLtm531ZuTBEABpKj8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGc4U1hqOFFNdTJibmZWbTVNRVFBR2txUHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUt
MGQ4ZWJjZTg2Y2FjLzEvN0ZtcFh1QUhOSEdEWkZGUi1DWDdOdjJheWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS82ZGY4N2YtMWUzYy00N2M1LTg1ZGUtMGQ4ZWJjZTg2Y2Fj
LzEvTGc4U1hqOFFNdTJibmZWbTVNRVFBR2txUHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3J1MA0G
CSqGSIb3DQEBCwUAA4IBAQCLDStlfd4B9YIQeufmMPLOS0TwXQT6186jv3h5ol5Z
yIj3YL5zNh8XHk17HS/H5QawCABKPKTeLs6oprSNo1w6lKBhtJnCYB/bsN6rwd12
Bsm/Sj0ixS6hwY6Oe0SlUVIh+6FC1Yvz0mE8m0PapCUu+3K3uWwqd0O0ahuTjMPZ
5ht3PXya0S9AVcZtFII2gMrKY1g2zrMsytuam3aY7XdTIaNOe7oajHhS/OdGNE4F
m1hcLLO9u1Vq+skk6UIGGYsMjEVLu2P87ixwhPgLezGWf1fTWBbyk4Xg6g+IDfBf
4mlqcxYGnjC/0S84QcBBnAf1ixeu6AX2P6Gp0Y3LMRTZ
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:17 2026 by rpki-client