Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/rc7mjVS-EYcSXpO7PsGOY4JUjkk.roa
File: rc7mjVS-EYcSXpO7PsGOY4JUjkk.roa (raw, json)
Hash identifier: 7u4fLGtxPLAQ+xrwYYbIqaC8pLMYfy/m/Mw8rDqLffM=
Subject key identifier: AD:CE:E6:8D:54:BE:11:87:12:5E:93:BB:3E:C1:8E:63:82:54:8E:49
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019F6B2B88127F0AFFA73F665657B37B2E56
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/rc7mjVS-EYcSXpO7PsGOY4JUjkk.roa
Signing time: Thu 16 Jul 2026 13:44:02 +0000
ROA not before: Thu 16 Jul 2026 13:44:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35362
IP address blocks: 37.17.240.0/22 maxlen: 22
62.84.248.0/21 maxlen: 21
95.158.0.0/18 maxlen: 18
146.0.80.0/21 maxlen: 21
176.113.168.0/21 maxlen: 21
185.11.28.0/22 maxlen: 22
2a07:1080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:2b:88:12:7f:0a:ff:a7:3f:66:56:57:b3:7b:2e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jul 16 13:44:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=adcee68d54be1187125e93bb3ec18e6382548e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:5a:0c:ba:84:64:2f:0d:29:aa:2a:dd:a7:
bc:f0:3b:de:13:5f:ab:88:71:70:99:ee:8e:ea:78:
e5:0e:55:b4:40:21:30:9c:91:bd:13:8e:db:1e:35:
24:bc:02:c4:d4:a7:67:ab:0c:42:13:3a:87:af:0c:
b8:b0:88:29:fe:cc:fb:46:a8:28:4d:bc:57:a4:96:
65:39:d1:0d:62:e5:58:cb:91:7d:19:69:c6:40:cf:
f6:5c:c0:f7:44:f1:88:2c:00:cb:94:e6:93:d4:88:
ef:47:2a:e3:fa:e0:f3:5d:f6:9a:46:3f:56:85:ec:
fa:98:81:d1:a7:b8:fd:6b:4c:6f:85:e3:49:be:d9:
90:63:94:6d:3c:70:1c:90:36:19:65:a7:e4:ff:9b:
6c:0a:51:b3:2b:5f:1d:c1:80:6d:02:3c:55:ef:84:
89:cb:07:74:0c:48:67:c4:bf:a8:5f:43:56:81:25:
5d:58:f3:df:da:81:ce:1d:d6:fc:5d:7c:4f:d7:ba:
77:b5:02:d7:51:ba:62:9d:84:c3:62:02:59:2b:7b:
de:f6:6e:75:9d:af:c2:ae:91:e1:23:74:98:cd:4e:
46:6e:48:4d:36:df:fa:a6:cb:c4:29:4d:0a:cd:fd:
d5:49:1b:59:87:18:07:87:61:44:94:12:78:93:18:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:E6:8D:54:BE:11:87:12:5E:93:BB:3E:C1:8E:63:82:54:8E:49
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/rc7mjVS-EYcSXpO7PsGOY4JUjkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.240.0/22
62.84.248.0/21
95.158.0.0/18
146.0.80.0/21
176.113.168.0/21
185.11.28.0/22
IPv6:
2a07:1080::/29
Signature Algorithm: sha256WithRSAEncryption
5b:be:05:7b:52:44:46:60:a6:66:72:b0:6c:d1:92:62:df:b9:
a6:53:3f:b3:a9:98:b5:f6:2f:f8:99:c2:80:d4:5e:16:9b:2b:
53:cf:7d:29:8c:03:58:9b:ec:a6:53:db:3b:9f:e8:e2:ee:7b:
87:71:89:3d:4c:c4:3b:a8:97:fe:bf:11:b2:f6:d2:46:db:3d:
7f:70:f3:21:74:33:f2:b3:2e:2d:d4:85:1d:65:66:e5:db:ca:
41:0a:e6:18:51:e3:89:bd:f2:b9:49:b7:84:b5:b5:36:f8:80:
8d:67:6f:45:cd:a6:1c:81:a8:58:e5:7a:01:97:6e:8c:b2:ad:
11:a7:73:42:ab:b7:22:61:a5:63:79:3c:32:78:3b:38:45:43:
ae:3c:73:8d:0d:4e:fe:43:33:30:af:50:44:31:f9:c3:d3:6b:
c0:d2:eb:03:bc:53:03:00:73:7e:25:82:bc:64:fa:ed:74:47:
1a:dc:36:32:39:8f:9c:a9:6b:06:b7:dd:b4:63:b2:34:eb:7d:
fd:8b:f8:33:53:4f:13:14:b1:72:71:87:05:43:d1:22:34:73:
e6:a9:67:fa:34:22:89:87:18:a2:83:c8:c0:0c:4f:01:35:35:
bc:c3:fe:57:0d:4b:d3:2e:83:04:54:95:b9:3b:7c:b4:28:8b:
aa:39:dc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:33 2026 by rpki-client