Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7l-sgrIhavro2SpPOFtgONrk5QA.roa
File: 7l-sgrIhavro2SpPOFtgONrk5QA.roa (raw, json)
Hash identifier: X9fi/U55KuWyLJlSIBJLR9VeaEuygBRKeTfxzhD0sdk=
Subject key identifier: EE:5F:AC:82:B2:21:6A:FA:E8:D9:2A:4F:38:5B:60:38:DA:E4:E5:00
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 019F1D0AA0DC47FFE1569618C6869020F7AE
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7l-sgrIhavro2SpPOFtgONrk5QA.roa
Signing time: Wed 01 Jul 2026 09:37:43 +0000
ROA not before: Wed 01 Jul 2026 09:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209870
IP address blocks: 79.140.195.0/24 maxlen: 32
85.8.234.0/24 maxlen: 32
2a0e:5140::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:0a:a0:dc:47:ff:e1:56:96:18:c6:86:90:20:f7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Jul 1 09:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5fac82b2216afae8d92a4f385b6038dae4e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:0a:44:8e:4d:af:66:f8:0f:96:3b:c2:4a:
2e:12:a5:f9:72:25:b1:fc:50:fa:13:6e:68:81:ad:
e3:8b:6e:22:fa:08:49:c6:a3:53:1c:9a:58:4a:f6:
24:c2:52:7e:82:80:ae:f8:b7:40:cb:ba:73:a9:14:
df:a1:e9:0d:48:38:58:22:c4:a1:3b:a9:79:5f:70:
bf:e6:ed:d6:7c:f8:ba:f1:5f:d9:70:7e:b4:f8:fb:
3e:ec:15:7f:9a:04:67:0b:ea:48:58:09:ae:4d:28:
b7:76:4c:46:66:45:28:4b:23:60:c1:32:6d:8c:99:
be:25:37:38:7c:a5:a2:06:05:d0:98:ca:1b:f8:97:
77:27:f3:42:02:ef:7f:67:d7:3f:ef:2c:ab:c9:8f:
d0:f6:84:40:6d:61:51:87:e0:4c:a0:09:95:8f:31:
40:f9:10:62:0d:4c:d2:29:bb:87:dc:25:f1:89:bd:
80:0d:4a:cb:76:ae:2a:e1:19:47:bc:2b:64:21:7f:
9c:4e:83:d8:c0:3c:f5:eb:ea:67:2d:26:cf:24:f4:
9e:33:68:99:4c:38:b4:8a:77:e1:e5:87:9d:ca:5c:
09:58:5f:cf:d6:c6:59:81:b5:c1:a7:47:a3:3c:ce:
e0:5b:60:eb:a2:c3:c8:f6:18:b3:3d:b8:db:21:89:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:AC:82:B2:21:6A:FA:E8:D9:2A:4F:38:5B:60:38:DA:E4:E5:00
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/7l-sgrIhavro2SpPOFtgONrk5QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.195.0/24
85.8.234.0/24
IPv6:
2a0e:5140::/29
Signature Algorithm: sha256WithRSAEncryption
01:1b:8f:8b:9f:d3:e2:33:ef:e9:d2:04:9b:ca:48:ef:2e:ca:
52:79:8d:6e:17:d4:70:12:59:20:6d:20:26:94:c6:c0:4c:6b:
96:58:c0:1b:0d:1e:2c:92:41:ea:20:93:36:d0:77:c2:5e:eb:
c4:3a:4c:c2:5b:ab:b5:5c:70:9b:fb:f6:e8:3a:00:6a:32:1b:
0a:40:2e:ab:0e:df:5e:d0:51:fc:a2:2f:d5:e9:c7:cf:8e:a4:
aa:be:1e:f9:58:ed:77:10:20:d5:34:0f:87:d6:78:5b:a1:5e:
58:93:53:56:8f:16:e3:c4:10:e7:a3:af:27:18:e1:2b:04:39:
e3:a9:5f:b5:98:5a:e7:91:f5:64:19:55:47:8a:2b:dc:fe:c9:
81:02:d0:6e:9a:5b:7c:59:29:af:cf:5f:38:14:2f:17:f2:dd:
09:c3:30:f8:c2:1d:63:74:9d:a4:7f:9d:9c:79:60:80:6c:07:
38:26:85:68:53:20:77:45:97:e6:3b:e6:e7:7c:a4:2a:a5:ee:
e1:5f:26:a5:cc:9a:95:f4:73:6d:ed:f6:01:3d:c2:10:4e:0e:
b3:45:a9:3f:a5:77:77:82:0a:25:73:dc:4e:ad:72:26:51:8f:
8b:21:04:46:de:1e:67:dc:20:5e:c6:fe:40:be:8c:2c:79:5d:
ac:16:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:12 2026 by rpki-client