Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/r7X848yOsMLAWCps4RFGUNqeVps.roa
File: r7X848yOsMLAWCps4RFGUNqeVps.roa (raw, json)
Hash identifier: xew4extflEyzwcFzFw7/R0LSDzXNfuSjZMgYv5CBRTk=
Subject key identifier: AF:B5:FC:E3:CC:8E:B0:C2:C0:58:2A:6C:E1:11:46:50:DA:9E:56:9B
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 019F360CE8DDBA0C87212D148F17E9100E87
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/r7X848yOsMLAWCps4RFGUNqeVps.roa
Signing time: Mon 06 Jul 2026 06:10:43 +0000
ROA not before: Mon 06 Jul 2026 06:10:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197648
IP address blocks: 91.217.246.0/24 maxlen: 24
91.223.208.0/24 maxlen: 24
185.106.100.0/22 maxlen: 22
185.106.100.0/24 maxlen: 24
185.106.101.0/24 maxlen: 24
185.106.102.0/24 maxlen: 24
185.106.103.0/24 maxlen: 24
185.205.184.0/22 maxlen: 22
185.205.184.0/24 maxlen: 24
185.205.185.0/24 maxlen: 24
185.205.186.0/24 maxlen: 24
185.205.187.0/24 maxlen: 24
193.164.222.0/23 maxlen: 23
193.164.222.0/24 maxlen: 24
193.164.223.0/24 maxlen: 24
2a06:3c80::/29 maxlen: 29
2a0c:5cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:0c:e8:dd:ba:0c:87:21:2d:14:8f:17:e9:10:0e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jul 6 06:10:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afb5fce3cc8eb0c2c0582a6ce1114650da9e569b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:fc:af:83:5b:e0:b8:e2:ce:27:1f:e3:b0:
fb:bf:aa:4e:6e:bf:3d:38:6e:1c:23:c8:2c:c2:a1:
12:a1:4b:03:ed:6c:03:8b:1e:1b:ba:1a:cf:dc:7f:
c3:59:0d:b7:1b:f2:b3:bc:f3:11:c0:d5:2c:4d:c2:
53:c8:a1:b6:48:67:6d:2b:43:02:68:34:f3:e2:8d:
35:e5:f7:f4:27:f8:94:f9:66:b4:54:cd:90:13:31:
3d:8c:a7:33:00:81:53:4e:c7:20:4a:80:bd:d9:7b:
57:51:fd:bb:d1:0c:10:3f:ee:10:86:08:d0:a6:31:
8e:54:dd:d9:1c:d9:36:40:f0:78:d4:81:e0:15:66:
08:53:13:3d:2f:0d:bd:d2:f2:5d:e7:00:d6:fb:94:
7e:1d:e7:bd:a9:43:84:3b:46:f7:c9:20:2d:78:67:
84:68:e2:88:cd:c5:54:a9:e0:0a:52:b1:3e:8d:58:
9a:2e:86:28:ea:9f:54:8f:63:dd:43:1c:22:c9:db:
4e:ad:bd:c0:b5:30:82:47:6c:a7:45:51:b1:30:66:
4b:d1:ed:c4:6b:38:4e:c5:3f:4b:56:97:6d:8a:fc:
83:a3:c3:75:f1:95:66:85:1c:7d:0a:ac:1b:ee:cd:
4d:20:51:03:6e:01:d0:35:96:51:e7:d2:68:a3:a4:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:FC:E3:CC:8E:B0:C2:C0:58:2A:6C:E1:11:46:50:DA:9E:56:9B
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/r7X848yOsMLAWCps4RFGUNqeVps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.246.0/24
91.223.208.0/24
185.106.100.0/22
185.205.184.0/22
193.164.222.0/23
IPv6:
2a06:3c80::/29
2a0c:5cc0::/29
Signature Algorithm: sha256WithRSAEncryption
40:13:5b:76:a3:c6:68:63:90:45:4f:02:73:3e:76:7c:37:ad:
dd:30:14:f4:0a:08:2b:f8:7b:85:44:89:5f:84:12:5e:6b:90:
40:8c:32:a1:d8:1d:87:e1:82:75:23:fe:80:12:32:c3:56:8a:
e2:f4:d7:2f:2a:51:a2:5e:f9:90:e7:c1:05:46:06:c1:d8:3e:
61:09:1a:25:fe:3a:c3:43:22:b1:11:be:69:33:01:c5:4a:6a:
a3:37:01:65:a8:c3:a1:c1:49:a8:f3:90:76:15:2b:d2:38:33:
de:60:a5:25:e3:ae:3e:7a:07:09:2e:42:03:b2:52:7a:10:c8:
94:f9:02:f3:38:2e:d0:60:fb:05:6a:ca:af:f6:28:02:ea:ef:
69:eb:8f:b5:75:6d:ed:0a:2b:4e:56:1c:b8:64:ae:cd:bd:74:
23:56:2f:70:a6:eb:17:e8:ea:09:88:a4:19:ef:bc:5c:fe:49:
38:b8:f4:82:4d:9c:71:07:13:f0:bc:de:f4:7a:09:cb:c3:2c:
52:51:10:b1:77:80:51:30:30:3a:77:db:d7:79:4d:a7:6e:c5:
01:65:11:9d:37:86:e8:c1:cb:91:df:44:b2:ca:70:c1:f8:14:
cd:91:31:20:80:be:c1:71:46:47:b6:41:c1:5a:d5:83:94:4a:
43:44:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:56 2026 by rpki-client