Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/7vR5Q4m_T61PHPMKP_nErvCFyBE.roa
File: 7vR5Q4m_T61PHPMKP_nErvCFyBE.roa (raw, json)
Hash identifier: gq1L8G0x7ivAnw58QCU9tDfYfjdILP3qn6SNIqxyess=
Subject key identifier: EE:F4:79:43:89:BF:4F:AD:4F:1C:F3:0A:3F:F9:C4:AE:F0:85:C8:11
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019F2881CF21FE4D3BF148AB38CF4B334D2E
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/7vR5Q4m_T61PHPMKP_nErvCFyBE.roa
Signing time: Fri 03 Jul 2026 15:03:43 +0000
ROA not before: Fri 03 Jul 2026 15:03:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214748
IP address blocks: 31.210.137.0/24 maxlen: 24
157.22.222.0/24 maxlen: 24
157.22.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:81:cf:21:fe:4d:3b:f1:48:ab:38:cf:4b:33:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Jul 3 15:03:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef4794389bf4fad4f1cf30a3ff9c4aef085c811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:eb:c7:ff:19:21:99:00:3b:46:31:ed:4a:
ae:cd:26:69:d0:49:91:d9:22:d6:70:10:d2:4e:dc:
10:75:b1:91:18:84:d0:3d:39:46:e2:00:ca:04:a2:
95:05:56:25:15:00:50:45:97:ec:bb:97:87:b9:99:
37:64:7a:8c:d1:e3:3c:47:56:7d:ab:c9:d6:a6:c3:
0e:fd:da:bd:59:23:6d:1f:a0:f4:60:c6:51:12:4f:
a1:8c:ed:e7:07:88:cb:8e:d9:c5:7b:a3:46:0e:4a:
c7:7f:36:d9:62:63:b0:30:5a:65:dc:2f:e5:8c:d0:
d2:ad:7e:3a:53:35:e2:d9:9f:d2:3f:99:08:e6:d5:
69:c7:5d:07:81:98:6a:b4:b0:ea:7c:62:8d:84:40:
3c:a8:f0:6e:0c:0f:55:2e:2f:5c:3a:8a:f4:dc:98:
3b:b0:71:e9:2c:83:4e:f9:32:89:03:36:6a:a4:b3:
ad:7f:f7:c7:a3:77:85:b6:a7:97:ef:27:1c:74:d3:
6a:20:05:d6:f4:d9:d1:9c:70:ae:6d:e5:57:2e:18:
a3:4c:b2:66:47:1c:e3:bd:76:66:c3:b2:e2:99:cf:
98:31:d1:1c:fa:c8:72:fe:a1:15:c8:d5:9f:bf:74:
36:aa:bd:6e:e2:55:98:33:6c:bc:4f:27:76:2c:cd:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:79:43:89:BF:4F:AD:4F:1C:F3:0A:3F:F9:C4:AE:F0:85:C8:11
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/7vR5Q4m_T61PHPMKP_nErvCFyBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.137.0/24
157.22.222.0/23
Signature Algorithm: sha256WithRSAEncryption
69:6d:49:42:fe:67:86:80:6a:bf:b3:95:e4:c6:ad:c2:2c:2d:
68:9f:98:74:26:09:0c:2e:75:2c:3e:31:db:63:c9:bb:94:b6:
21:79:b2:34:3c:43:f1:35:ef:70:79:dc:67:f7:22:73:b4:8f:
c0:77:4a:5a:2b:93:ed:bc:61:68:5e:96:da:1e:dd:c0:4b:2c:
52:97:8c:6f:58:08:12:6b:e0:c6:9c:91:df:92:4e:b5:51:db:
bb:9c:59:16:d1:d1:d4:38:96:c0:ca:af:a9:c7:85:17:02:af:
e4:23:5f:23:be:d6:51:08:47:cd:ce:4e:69:f2:91:73:72:31:
ff:c4:99:78:a1:5d:51:3c:c8:95:3d:9c:dd:d7:af:c8:87:03:
0e:d5:ea:7c:5d:e1:ac:6d:91:35:a0:bb:0c:3b:9c:dd:11:02:
ca:d6:12:75:ce:df:d5:30:d6:42:76:24:d3:aa:c4:80:ff:1a:
49:1a:00:fd:ff:88:f8:54:96:00:eb:13:8d:52:49:a0:89:c3:
c5:d0:d9:8f:59:02:82:c8:a7:0c:2f:04:c6:7e:e3:19:7d:a7:
9e:0f:81:bf:8c:cb:dd:46:0c:6b:1f:5e:fe:44:fc:89:0a:16:
75:dc:1f:f5:2e:0d:35:b1:59:6c:73:eb:45:d2:31:38:9b:8a:
a0:c1:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:40 2026 by rpki-client