Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7Y-WGHeIKmavhhwyUtVSTv4dV74.roa
File: 7Y-WGHeIKmavhhwyUtVSTv4dV74.roa (raw, json)
Hash identifier: 6aCml1iAjI5Ul10/DV9KNxyhcQNoCoHzIBHaF4XKERk=
Subject key identifier: ED:8F:96:18:77:88:2A:66:AF:86:1C:32:52:D5:52:4E:FE:1D:57:BE
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AE1B5A6C27EDACDA966EE209A7B2
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7Y-WGHeIKmavhhwyUtVSTv4dV74.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207018
IP address blocks: 185.168.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ae:1b:5a:6c:27:ed:ac:da:96:6e:e2:09:a7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed8f961877882a66af861c3252d5524efe1d57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:80:54:87:8f:76:c6:94:13:3e:60:c2:ed:
0a:f5:0c:09:df:16:fb:0c:e4:22:37:05:b2:02:c4:
22:08:a2:5b:46:4e:48:f8:dc:cb:db:e2:28:4e:b2:
9b:e5:19:08:24:d4:51:23:6c:66:01:3a:ef:f8:6b:
85:68:5d:43:34:f5:a6:b3:9d:df:59:bc:52:50:9e:
8f:f7:32:b6:f8:74:06:53:b3:8e:8f:a7:f2:6a:ad:
b7:c7:aa:63:1b:c3:c7:ed:e2:92:9e:2a:21:e4:17:
40:1a:1e:b8:42:9e:43:d9:ad:1f:c6:96:c4:ae:10:
c5:8e:12:1b:f9:dc:76:27:52:25:5b:23:84:82:cf:
6c:aa:60:9d:ef:22:fb:24:b8:de:97:ab:70:39:f2:
eb:4a:ce:37:e3:d9:17:f5:02:64:7e:8a:2b:9d:2d:
5c:b6:b9:c2:34:f1:c5:d2:1a:b8:ad:38:bf:99:a6:
8d:de:e5:7b:4f:6d:7a:7b:1e:e4:e8:bf:6e:f3:3e:
22:9b:4f:07:71:07:e0:fb:0d:9d:08:b3:82:2f:6f:
f7:62:02:c0:ba:e5:5e:51:5a:be:4b:4e:f5:0f:48:
1c:bf:04:21:b1:fa:ae:fb:24:51:2a:9d:d4:9c:95:
25:fb:82:1b:6a:a6:1f:51:12:c8:64:0a:23:e3:4e:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8F:96:18:77:88:2A:66:AF:86:1C:32:52:D5:52:4E:FE:1D:57:BE
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/7Y-WGHeIKmavhhwyUtVSTv4dV74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.24.0/22
Signature Algorithm: sha256WithRSAEncryption
31:38:53:ce:87:dc:1d:69:b8:02:37:6c:7a:f2:54:2f:57:29:
97:2c:9b:79:58:cb:78:72:a3:f4:9f:82:cc:16:77:1b:c0:4c:
90:ec:8a:dd:06:8d:ad:53:66:50:d4:69:ee:eb:70:91:b4:21:
57:c2:3a:81:41:bc:c1:91:39:ce:a9:39:81:5f:9b:e5:1c:7b:
5c:b8:1d:97:f3:0d:01:a4:5e:c8:9a:74:40:02:13:77:37:1a:
a9:d4:bd:af:db:bf:06:27:63:14:03:be:22:e9:29:7a:e1:f7:
25:08:d4:3f:b6:c9:d4:15:d8:40:cd:75:19:ce:95:13:4b:9a:
49:30:69:16:24:05:c8:a9:03:8e:ec:b8:e8:4a:df:a3:9e:8a:
64:40:3e:39:4c:3a:50:9c:43:c4:67:69:23:f8:f5:60:2a:44:
ba:60:b9:aa:37:9e:35:66:19:25:50:e5:2c:76:ae:24:33:01:
55:95:ec:83:47:38:1c:74:9f:80:46:70:73:1a:92:51:cb:4c:
a7:65:08:0a:ec:66:75:b1:bc:53:e4:94:e8:ec:cb:df:61:dd:
35:ae:e1:45:33:6e:63:18:cf:22:fd:6c:19:15:55:17:b0:68:
9a:99:b9:c7:9a:0a:f6:2d:30:40:75:41:90:95:91:12:aa:0a:
86:a1:31:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:12 2026 by rpki-client