Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa
File: 7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa (raw, json)
Hash identifier: evgW7hhbeIzJbe2wQVkcrOjUE5xE8nomQXZ1TrKMAc0=
Subject key identifier: EC:78:D0:65:C9:F2:3C:6C:D3:05:BA:D7:54:3A:48:CC:64:F1:4C:04
Certificate issuer: /CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Certificate serial: 019F236836E0781FB7DE34A07B5706F37CC3
Authority key identifier: 67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15851
IP address blocks: 212.127.64.0/19 maxlen: 19
213.231.192.0/18 maxlen: 18
2001:a48:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:36:e0:78:1f:b7:de:34:a0:7b:57:06:f3:7c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cfad7c24e5c6b4af581c3dec0b9e2fb0c131c4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec78d065c9f23c6cd305bad7543a48cc64f14c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:02:7c:da:88:8b:76:a3:ff:b8:f8:ab:d2:
a9:e1:43:d7:61:96:df:5a:ea:12:64:cd:9b:b3:69:
b2:60:63:8a:0d:d3:ca:78:c8:10:ca:1b:ea:26:17:
2e:b5:f0:0b:65:9d:30:5a:11:4d:cf:0e:c3:3e:82:
80:91:ad:ae:0c:59:82:b0:f7:5e:c5:a6:fd:00:7d:
25:14:e3:c4:5b:1b:ec:3e:f8:d9:a0:05:38:72:6b:
af:9e:90:dd:ad:e4:8b:62:5a:07:51:bf:c4:d9:a3:
87:40:a3:2c:95:8a:f1:04:9b:5e:c8:d4:56:40:25:
39:59:a4:10:a3:3b:84:39:93:78:da:cd:66:c2:ec:
52:0e:f6:da:bb:33:e0:8d:5b:8e:8d:57:a8:f1:ce:
0d:39:34:54:04:7e:54:26:97:ce:a0:02:af:10:73:
d7:dc:8c:d6:75:f8:a0:29:c4:95:a5:da:b4:d1:07:
74:f8:ad:52:97:81:8f:48:de:45:64:d1:94:96:50:
df:39:0b:e2:08:0b:91:0b:d2:b5:d1:35:32:a1:16:
38:10:23:62:86:7a:06:2b:c8:04:92:0d:ff:db:52:
dd:c5:3b:a3:67:45:18:8f:1a:94:67:2b:8a:23:d5:
98:27:7d:d9:cc:64:8f:2f:01:a4:1a:63:1e:f9:e4:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:78:D0:65:C9:F2:3C:6C:D3:05:BA:D7:54:3A:48:CC:64:F1:4C:04
X509v3 Authority Key Identifier:
keyid:67:CF:AD:7C:24:E5:C6:B4:AF:58:1C:3D:EC:0B:9E:2F:B0:C1:31:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8-tfCTlxrSvWBw97AueL7DBMcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/7HjQZcnyPGzTBbrXVDpIzGTxTAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/Z8-tfCTlxrSvWBw97AueL7DBMcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.127.64.0/19
213.231.192.0/18
IPv6:
2001:a48:8000::/36
Signature Algorithm: sha256WithRSAEncryption
46:52:11:c8:c7:08:8e:e0:1c:7c:da:5a:10:d8:8f:80:c4:0b:
3e:04:c0:b3:d2:8c:05:ae:49:1a:7a:9f:50:f7:c4:f3:73:72:
eb:71:84:17:2f:13:dd:30:53:e0:65:c4:ee:3e:71:78:41:c0:
e3:ac:1f:df:92:ee:d7:3a:fa:96:26:a6:1a:d5:21:1c:fd:56:
6e:45:7d:e5:bc:dc:74:3c:7e:60:1a:83:0a:2e:e6:b6:5e:ce:
bd:0e:23:82:a9:86:2b:a1:21:f3:1e:4a:fd:78:b1:3c:f5:09:
71:ec:4e:ec:8a:e8:0e:81:d2:81:78:8f:ea:ec:28:ef:8d:3e:
50:fe:00:ac:57:c7:57:0c:bf:39:d6:98:c1:d4:2d:cf:e9:2e:
e4:a0:46:3b:0a:55:fb:75:03:fa:12:ab:47:6f:a2:2f:c1:c0:
5e:74:1b:40:95:c4:de:5e:71:f0:2d:7d:e9:a0:2d:69:c1:83:
31:75:04:cd:38:a8:e7:2c:46:c7:f6:e7:b7:40:52:9f:ff:22:
a1:77:23:d8:19:fe:8a:f6:4f:5a:84:34:dc:b3:ff:2b:bc:31:
af:d5:18:55:a2:af:ae:3e:5c:93:08:cc:1b:0b:1b:9a:6b:d2:
6a:e2:86:5b:5b:8e:ea:06:e3:aa:45:00:4a:90:42:a7:3f:ca:
8b:a6:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:33 2026 by rpki-client