Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/7BjvQpy7047hVApDh8x9Qe4DOoo.roa
File: 7BjvQpy7047hVApDh8x9Qe4DOoo.roa (raw, json)
Hash identifier: kKvjJ/MF8w1jZR9VtACZyBX/W/6HjlaX9dgOqUUswo4=
Subject key identifier: EC:18:EF:42:9C:BB:D3:8E:E1:54:0A:43:87:CC:7D:41:EE:03:3A:8A
Certificate issuer: /CN=010600be698c1ab97863ce5915911265cb5a3c9f
Certificate serial: 019F23685E9392B6A64A6AF77BB9657F46DF
Authority key identifier: 01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/7BjvQpy7047hVApDh8x9Qe4DOoo.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8560
IP address blocks: 62.151.160.0/21 maxlen: 24
62.151.176.0/21 maxlen: 24
82.223.0.0/16 maxlen: 24
93.93.112.0/21 maxlen: 24
94.143.136.0/21 maxlen: 24
185.132.44.0/22 maxlen: 24
217.76.128.0/19 maxlen: 24
2001:ba0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:93:92:b6:a6:4a:6a:f7:7b:b9:65:7f:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010600be698c1ab97863ce5915911265cb5a3c9f
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec18ef429cbbd38ee1540a4387cc7d41ee033a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:5a:66:bb:5e:d5:51:2d:27:86:1f:35:b2:
57:42:90:20:7b:22:a4:4e:3d:e7:0e:52:dc:01:2e:
d0:f2:91:08:41:a2:6a:00:9e:19:93:47:b2:e5:6e:
7c:b1:aa:07:25:c0:2f:07:b3:91:8b:d6:e6:6c:ee:
0f:d2:26:11:58:57:11:8f:29:3a:08:27:ba:23:ad:
b5:be:1b:08:30:29:47:0b:ab:39:62:95:67:c9:0d:
9b:11:0c:24:ca:81:63:17:08:86:10:08:f2:0c:0f:
94:a9:40:ed:c5:cf:6b:dc:51:44:4c:42:7a:bd:bf:
cc:99:a1:f7:4f:d8:79:32:8f:2a:9d:d7:f7:94:3d:
b3:6c:4a:33:02:19:aa:59:1b:fb:9b:23:5e:16:83:
0d:f6:54:3b:ad:40:2f:fe:22:fa:d2:18:9b:b6:5a:
90:e3:e0:d6:f9:58:06:7d:1d:85:d8:b9:20:da:f2:
eb:ba:28:77:2a:f3:e1:ae:b1:a3:97:e1:e3:9d:89:
55:f2:d4:94:b4:15:72:e9:8d:2b:95:e1:5d:b6:1d:
c9:6a:77:76:88:f9:ce:5f:eb:6a:e0:26:77:48:c9:
84:2c:53:1b:32:53:6c:5f:1a:4e:e3:ec:b2:54:41:
3b:9c:86:a9:bd:37:1d:a0:90:88:71:11:d3:2a:1e:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:EF:42:9C:BB:D3:8E:E1:54:0A:43:87:CC:7D:41:EE:03:3A:8A
X509v3 Authority Key Identifier:
keyid:01:06:00:BE:69:8C:1A:B9:78:63:CE:59:15:91:12:65:CB:5A:3C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQYAvmmMGrl4Y85ZFZESZctaPJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/7BjvQpy7047hVApDh8x9Qe4DOoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/AQYAvmmMGrl4Y85ZFZESZctaPJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.151.160.0/21
62.151.176.0/21
82.223.0.0/16
93.93.112.0/21
94.143.136.0/21
185.132.44.0/22
217.76.128.0/19
IPv6:
2001:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:78:7d:97:b1:0d:04:bf:2b:47:f5:60:12:e2:65:53:9f:71:
43:b7:69:08:6d:9d:63:4c:e9:ff:58:18:bb:85:03:25:b1:54:
a4:f1:c3:ab:05:78:3b:95:59:bf:ad:93:44:3a:48:ff:54:dd:
f2:35:0c:1f:98:ea:66:a4:dc:56:9b:cc:ab:c1:85:00:af:8d:
4a:bb:be:6d:32:26:9b:29:ee:86:b8:42:ad:08:eb:ce:b8:27:
90:4b:14:82:36:0e:87:23:95:72:bb:3a:ad:1e:fd:c7:5a:ec:
ba:33:f7:96:34:c6:0c:a7:64:15:7e:de:a0:16:d6:82:e9:da:
c7:2f:b8:8b:e4:90:ea:07:d0:14:57:2f:c4:6f:c4:ec:32:5c:
ef:fb:c6:87:06:12:06:a8:de:57:69:83:a4:95:48:77:71:98:
61:af:a4:da:24:c0:6c:55:cb:cd:57:25:f4:2a:0f:7e:70:8e:
08:72:0d:cf:93:ff:2e:12:87:c8:e8:5d:80:eb:76:74:16:bb:
e8:92:cb:50:8f:6b:a2:d3:17:c8:ba:55:b7:a6:f9:fa:72:47:
a7:d3:3a:d8:ec:25:d9:3e:24:fa:dc:e2:39:2b:2d:83:67:73:
77:6e:f4:f1:3d:97:de:77:d0:99:e6:51:ff:eb:d9:66:ba:f8:
23:4e:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:29 2026 by rpki-client