Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/7OwsFlnHxpebmwPMUCt2me-zyWI.roa
File: 7OwsFlnHxpebmwPMUCt2me-zyWI.roa (raw, json)
Hash identifier: 0Ig1S0d5NpWXySpctyJbfop5unyTsBugYNuECPwIRTg=
Subject key identifier: EC:EC:2C:16:59:C7:C6:97:9B:9B:03:CC:50:2B:76:99:EF:B3:C9:62
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019F60D47428EE2558F4DB7AC29C7227AA8B
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/7OwsFlnHxpebmwPMUCt2me-zyWI.roa
Signing time: Tue 14 Jul 2026 13:32:43 +0000
ROA not before: Tue 14 Jul 2026 13:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 95.170.22.0/24 maxlen: 24
95.170.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:d4:74:28:ee:25:58:f4:db:7a:c2:9c:72:27:aa:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jul 14 13:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecec2c1659c7c6979b9b03cc502b7699efb3c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:56:3c:ec:e2:ba:a7:c4:8e:45:7a:b7:fa:51:
5b:90:e5:b3:a8:f4:69:48:72:20:b4:5c:ce:e8:0c:
c7:e4:9d:92:91:93:09:cd:e0:55:f5:9f:a5:e5:e7:
54:91:d3:06:93:e3:d1:84:6f:b9:d6:b0:ae:4e:f1:
63:8c:75:6d:6b:92:3b:2d:79:59:bd:4f:9f:a7:f8:
bd:f9:f8:5c:7b:58:85:3c:6c:27:ec:25:55:0a:f1:
39:b9:1c:89:4d:3d:83:17:ad:74:7d:da:f8:3d:c0:
5b:da:88:af:5c:5a:b4:ec:ee:53:ee:06:ab:51:b6:
5d:af:16:ad:89:ba:84:71:41:06:61:f1:f9:7c:84:
b7:a1:01:4e:0a:4d:3d:d5:fc:d8:05:2d:66:9a:da:
a5:45:b7:c6:0e:d6:58:80:b6:33:98:8a:c5:87:31:
89:b7:25:82:b4:75:f0:f1:b4:f5:2f:8a:f6:d0:d3:
a1:89:ca:f5:77:97:46:bd:cb:1c:f5:8d:b7:e0:4a:
19:9a:76:61:b6:83:65:21:ef:75:ba:c8:86:dc:59:
34:dc:52:41:8d:e8:88:97:3f:f0:f9:38:3b:98:6a:
b6:21:db:da:e6:aa:28:7c:63:44:20:f1:1d:d7:d7:
a9:a7:22:03:d8:4e:28:36:3f:8a:4b:0a:67:56:7b:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EC:2C:16:59:C7:C6:97:9B:9B:03:CC:50:2B:76:99:EF:B3:C9:62
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/7OwsFlnHxpebmwPMUCt2me-zyWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.170.22.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:8d:7e:b8:31:69:43:4f:5f:25:59:57:4e:c6:b8:ab:94:bf:
43:dd:ab:c6:34:76:1b:d8:55:b1:33:ba:bb:ee:ce:ac:1a:33:
7c:f3:f7:5f:04:00:90:7d:ed:79:37:b0:9f:6c:96:34:13:2d:
f7:d7:a0:0f:6a:ad:68:b1:2f:8b:ae:33:32:82:28:0f:14:3c:
5a:2f:ce:94:eb:5a:6c:8b:cc:29:ff:fb:0e:9d:47:a0:c2:14:
53:fa:03:3c:c1:4b:9e:e8:ac:91:ae:6f:58:7b:7f:14:bc:ac:
77:34:fe:a3:0f:16:a5:b5:f7:03:7f:d8:8e:d3:36:e7:24:c2:
61:02:3c:a9:ad:a4:56:ea:69:9d:83:2c:79:63:78:df:63:61:
26:c2:0b:5a:04:8c:b7:0e:f9:bb:3b:6a:41:ae:26:1a:be:2e:
f6:22:41:66:f9:fb:be:3c:58:67:82:7c:14:09:ce:f6:5a:d7:
c3:aa:cb:34:f3:ca:c9:77:f8:5b:0b:b9:78:18:07:0a:fa:ed:
f5:6b:82:0e:e5:ad:87:17:42:ed:f6:50:0c:fe:32:98:c9:4c:
f5:4f:bf:39:95:2e:d9:a9:10:49:56:ac:2d:41:10:bf:98:b9:
f2:0d:f9:5e:53:f0:b1:95:22:90:48:eb:52:2a:67:24:23:29:
0a:e6:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:15 2026 by rpki-client