Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7hNT6aWpNmqplaBo3KoesTfxY78.roa
File: 7hNT6aWpNmqplaBo3KoesTfxY78.roa (raw, json)
Hash identifier: HsnDzmhqGmnh/ZVxmNwmNc6rCmF6A3shjZVm3dawEEk=
Subject key identifier: EE:13:53:E9:A5:A9:36:6A:A9:95:A0:68:DC:AA:1E:B1:37:F1:63:BF
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019F61A446D85A0F091649AD2AA74F972E91
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7hNT6aWpNmqplaBo3KoesTfxY78.roa
Signing time: Tue 14 Jul 2026 17:19:43 +0000
ROA not before: Tue 14 Jul 2026 17:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45691
IP address blocks: 185.217.5.0/24 maxlen: 24
193.56.180.0/24 maxlen: 24
2a12:f8c2:200::/40 maxlen: 40
2a12:f8c3:4000::/36 maxlen: 36
2a12:f8c4::/32 maxlen: 32
2a12:f8c5::/32 maxlen: 32
2a12:f8c6::/32 maxlen: 48
2a12:f8c7::/32 maxlen: 32
2a13:fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:a4:46:d8:5a:0f:09:16:49:ad:2a:a7:4f:97:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jul 14 17:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee1353e9a5a9366aa995a068dcaa1eb137f163bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:08:a7:75:1a:9c:6b:cd:55:78:7b:c1:45:99:
f4:3d:a4:da:1f:9f:8c:2e:32:88:2b:36:e2:96:f7:
dd:b7:46:46:fa:29:66:d5:86:06:1e:2c:92:37:e9:
03:05:80:6f:df:e2:84:d9:60:97:d4:26:c6:aa:57:
51:97:e3:67:f5:b0:cf:b8:92:03:29:f9:44:5c:1b:
6b:b2:2e:a9:2a:50:af:15:33:4f:32:91:ed:46:16:
87:6b:eb:35:99:d9:5b:a4:ee:76:58:02:f4:ed:1b:
90:9e:ec:12:6f:31:a1:b9:2e:a6:ed:7a:47:61:0f:
fb:b7:fa:7f:93:3d:50:82:5b:78:fb:dc:ef:90:2f:
20:9c:de:f3:c2:4b:1d:47:62:13:c7:69:ee:1b:5c:
16:0e:95:3f:04:b0:7e:0f:9f:7f:43:f5:9a:e2:49:
1f:bc:82:c6:14:24:86:f2:55:be:18:b1:06:24:e8:
3f:80:e5:c8:d7:15:26:3b:e0:3d:7a:f5:68:bf:24:
b2:be:79:f9:d7:3c:79:13:e2:93:96:b9:cc:d0:0d:
3e:a0:55:14:b0:63:79:d8:a4:2d:18:96:c2:eb:a2:
fb:72:c1:d4:63:87:b3:bf:d8:6e:88:cc:f2:df:38:
d7:e8:4a:3b:ef:19:a5:bc:fd:00:45:16:d9:69:ba:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:13:53:E9:A5:A9:36:6A:A9:95:A0:68:DC:AA:1E:B1:37:F1:63:BF
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/7hNT6aWpNmqplaBo3KoesTfxY78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
193.56.180.0/24
IPv6:
2a12:f8c2:200::/40
2a12:f8c3:4000::/36
2a12:f8c4::/30
2a13:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
28:38:17:30:9a:67:64:ad:9c:bb:09:fb:54:b1:96:4e:75:00:
ce:9a:04:ef:16:5a:4e:4b:b8:7f:4d:76:63:25:2c:b4:f0:ef:
3f:4b:7c:45:cd:f5:d5:54:6d:92:e9:a6:3b:31:bd:a7:5c:24:
44:c1:68:bc:b9:af:2e:3e:7a:68:db:bc:0b:34:fa:c4:d2:c6:
23:ca:7c:a9:f1:f2:32:60:56:4c:a0:07:40:49:95:c6:05:e7:
fd:b0:72:9a:31:e3:d8:93:23:17:07:49:c7:49:19:66:cb:bb:
b8:95:28:1d:a4:e8:36:b6:8a:22:b5:9c:ab:7c:05:ae:5f:a5:
78:22:e3:89:c2:d1:99:76:38:74:ae:3e:a5:24:57:32:57:1a:
5c:65:98:4c:af:98:6d:68:27:9c:bb:22:cb:85:37:47:93:c9:
03:ea:7c:e2:b1:9c:68:bb:e4:f8:ae:f5:b6:b0:5d:2b:39:e6:
3b:da:f7:18:78:ad:80:5a:31:bd:02:28:bb:f7:a0:3a:43:39:
61:38:6f:1c:12:14:21:38:72:94:b9:ce:ec:20:e3:ac:d3:ba:
e8:1a:5a:bd:b0:5e:27:ed:28:6c:f7:76:d0:33:d3:dc:9f:86:
b8:04:fa:b8:a8:29:51:21:8b:e8:6b:4d:4b:68:ca:7d:f2:b5:
a2:c0:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:10 2026 by rpki-client