Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa
File: 7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa (raw, json)
Hash identifier: DzvO5U7AL0VdjxVsRB1zB0EdRmiss6g/L1DoqaojTAE=
Subject key identifier: EC:0A:40:F1:6C:64:CB:24:D2:11:94:91:56:96:CA:2D:B6:E7:DA:C8
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 019D9AEA08AA46AF71085FA8E79762047B76
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa
Signing time: Fri 17 Apr 2026 10:08:42 +0000
ROA not before: Fri 17 Apr 2026 10:08:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 37.220.32.0/21 maxlen: 24
45.82.44.0/22 maxlen: 24
45.88.16.0/22 maxlen: 24
45.93.32.0/22 maxlen: 24
45.129.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ea:08:aa:46:af:71:08:5f:a8:e7:97:62:04:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Apr 17 10:08:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec0a40f16c64cb24d21194915696ca2db6e7dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:f5:5c:23:e3:bc:bc:d3:4c:f1:b6:40:92:
3e:d6:f0:f9:26:0a:7f:1d:54:8d:bd:c7:57:d4:f9:
ca:21:ce:73:dc:f4:43:3d:36:68:bc:e5:9d:e0:c1:
04:58:6d:cc:7f:ca:05:c3:2e:b6:09:05:c9:f4:ca:
8b:3b:2b:fc:2b:23:5c:fd:8a:bf:a8:40:81:cf:a5:
a8:24:de:12:13:92:ea:07:5c:02:91:58:45:65:fb:
a2:02:98:96:99:0c:78:af:00:a6:34:81:cb:34:e1:
ce:40:4e:58:05:6b:80:bb:f4:0d:ff:49:7b:d4:a2:
ae:53:4d:cb:24:5d:19:db:4c:f4:2e:65:99:cb:92:
8f:b2:0f:b4:7b:ac:75:0f:f8:f0:42:5d:22:06:0d:
b4:34:e0:e0:3e:29:4e:85:af:92:f3:12:3e:40:74:
d2:75:46:02:29:03:92:2f:95:75:d0:a0:ce:bd:8f:
a9:08:a1:79:39:30:c9:03:b0:a3:e5:45:fb:31:3e:
1c:9d:9f:e0:94:de:1a:ef:f8:a6:a2:95:34:54:43:
bb:28:66:3b:1d:9c:a3:63:1d:ee:bd:f3:d6:77:6d:
7b:1d:d4:de:9b:32:2a:af:0d:43:82:fd:27:a5:15:
f7:e5:d2:f8:40:eb:9c:0e:8f:87:04:4b:32:60:4d:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0A:40:F1:6C:64:CB:24:D2:11:94:91:56:96:CA:2D:B6:E7:DA:C8
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/7ApA8WxkyyTSEZSRVpbKLbbn2sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.32.0/21
45.82.44.0/22
45.88.16.0/22
45.93.32.0/22
45.129.176.0/22
Signature Algorithm: sha256WithRSAEncryption
00:81:d0:72:22:57:16:a9:8f:5f:b2:74:d8:ad:84:34:b3:dc:
40:cc:5b:a5:82:7f:67:43:43:b7:73:27:13:b1:07:66:30:98:
1b:fb:4e:1f:53:0f:05:bf:28:55:bb:6e:12:99:35:37:79:85:
1e:d4:1b:a6:76:40:ae:40:92:34:05:b9:d5:17:78:17:3d:0a:
d9:d6:9b:77:75:47:d0:9f:c5:de:67:32:97:1d:98:c7:07:1e:
4e:43:c4:b8:e7:b3:af:74:74:32:bb:fe:94:d2:a7:6f:49:21:
69:7c:e8:27:35:4d:cf:25:6c:03:6b:b1:56:b6:dd:54:24:a0:
ee:ab:4a:ce:ab:e8:94:8c:d2:04:77:31:8a:fc:ff:bc:26:49:
68:74:87:ab:4d:a8:2c:0b:c4:66:e1:6b:3e:bf:3d:03:1c:37:
15:a6:3d:f2:dd:5b:4e:62:7a:41:53:89:ab:ec:94:a2:21:88:
85:fe:1a:4a:f9:af:81:72:b0:58:d7:91:a8:cd:c3:7b:1c:b4:
4f:4f:0a:9f:d0:97:b0:9e:22:92:18:fd:09:44:a2:81:f1:c3:
2d:06:fa:9f:34:b0:d3:ca:63:ed:0e:91:28:17:d3:81:9b:82:
7d:a1:a1:47:49:ca:c8:44:9c:bd:2b:75:13:cb:1b:28:cc:89:
52:8d:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:05 2026 by rpki-client