Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/7MivRKwecPf4p_p83oy4g2NQ_wE.roa
File: 7MivRKwecPf4p_p83oy4g2NQ_wE.roa (raw, json)
Hash identifier: 5Xg/I9J81wzibSVznXd6mpzebre3Nd+C9mlp9+i0NK0=
Subject key identifier: EC:C8:AF:44:AC:1E:70:F7:F8:A7:FA:7C:DE:8C:B8:83:63:50:FF:01
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 019E013EF2713490F362D1A7283F43092E24
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/7MivRKwecPf4p_p83oy4g2NQ_wE.roa
Signing time: Thu 07 May 2026 07:02:42 +0000
ROA not before: Thu 07 May 2026 07:02:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198605
IP address blocks: 5.45.56.0/21 maxlen: 24
31.14.72.0/24 maxlen: 24
37.156.184.0/22 maxlen: 24
69.94.64.0/20 maxlen: 24
77.234.40.0/21 maxlen: 24
77.234.40.0/24 maxlen: 24
91.213.143.0/24 maxlen: 24
185.51.228.0/22 maxlen: 24
185.167.64.0/24 maxlen: 24
185.189.92.0/22 maxlen: 24
185.189.94.0/24 maxlen: 24
195.74.76.0/24 maxlen: 24
2001:67c:284::/48 maxlen: 48
2a0b:e180::/29 maxlen: 48
2a0b:e181:604::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:01:3e:f2:71:34:90:f3:62:d1:a7:28:3f:43:09:2e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: May 7 07:02:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecc8af44ac1e70f7f8a7fa7cde8cb8836350ff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:ab:22:d8:6c:22:60:3c:ea:e9:8f:2b:90:
8d:a0:25:ac:b4:40:ab:5e:f8:b2:85:1c:41:c8:b2:
ed:4f:08:94:11:fa:97:4e:e7:14:bd:b7:3a:73:0d:
6d:95:65:02:84:f6:1a:90:e2:92:df:40:08:d7:10:
ad:44:e9:28:50:69:d9:d5:72:88:db:c8:08:91:37:
03:58:9c:21:b6:a4:17:cd:3a:e0:2a:19:b0:e5:9a:
5a:ca:82:cf:ce:88:a0:57:04:50:20:8a:0c:bc:4e:
34:7f:b2:af:46:17:f3:1f:d6:49:01:30:a2:ac:d7:
57:bf:89:24:cb:84:1b:15:93:0d:fb:e0:63:d1:40:
0d:5b:17:d1:3b:10:27:ac:e3:5e:a7:4b:d9:39:d2:
44:15:c1:70:62:36:e3:4c:42:05:b8:46:76:a7:16:
f7:6d:57:f8:80:e8:08:68:21:bf:61:83:2a:ec:57:
c5:90:8d:80:c9:78:bb:e0:71:fb:5b:aa:28:5f:9b:
a4:b2:48:89:44:88:4b:6b:60:f0:1f:e5:aa:c5:39:
c5:e8:08:79:2b:8c:34:89:b1:c2:d7:52:e4:05:08:
19:14:5d:86:b1:81:03:a8:d7:02:48:fa:39:ed:ec:
f2:76:47:31:be:a4:dd:f4:9a:e8:ea:3a:9d:1f:31:
c3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C8:AF:44:AC:1E:70:F7:F8:A7:FA:7C:DE:8C:B8:83:63:50:FF:01
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/7MivRKwecPf4p_p83oy4g2NQ_wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0/24
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/24
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a0b:e180::/29
Signature Algorithm: sha256WithRSAEncryption
1d:d7:de:2e:9d:37:3f:60:4c:66:a5:44:4f:ee:b3:de:99:cf:
a2:c8:a2:08:80:f3:46:da:0a:55:ed:a6:c1:15:7e:f0:02:5b:
13:b5:d0:c6:c9:89:63:64:d3:d3:70:31:39:6e:fb:f3:92:96:
c4:5d:dd:da:ed:3b:2a:56:5b:0d:49:54:8d:60:2a:d9:8e:a6:
56:89:00:42:e6:67:e4:cf:b9:c5:11:10:67:57:55:3d:b7:a2:
2d:e3:c9:a4:5e:7e:6f:63:9c:f1:3e:bc:2e:d4:73:af:c8:1f:
e3:97:57:9b:25:44:af:0b:6f:ce:4a:ae:b0:0d:e0:62:ff:77:
21:4b:c9:94:af:d3:5f:7b:2d:90:c9:3f:81:61:89:5c:77:42:
00:7f:e5:e2:97:ad:77:ac:30:f1:a0:f1:0b:26:0a:64:9f:62:
53:07:f2:85:de:5f:2b:27:43:83:5f:ba:2a:da:5b:17:8c:33:
2e:67:71:ab:50:53:d6:9b:a8:44:3c:30:73:fe:bb:91:8f:c5:
cf:1f:36:01:df:12:83:f8:87:e9:2a:4e:98:8d:b8:39:5c:54:
5e:52:bb:ef:e7:d4:51:1c:70:57:d7:2c:fd:22:af:c8:a8:d9:
83:8d:03:a8:cb:37:45:76:b0:fd:e7:e4:34:3b:36:60:f7:60:
58:f6:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:35 2026 by rpki-client