Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/7_skAVHjgsLF5yurP5Hs70so6lU.roa
File: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (raw, json)
Hash identifier: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=
Subject key identifier: EF:FB:24:01:51:E3:82:C2:C5:E7:2B:AB:3F:91:EC:EF:4B:28:EA:55
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019B7F1389A47616791965830554A2053841
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/7_skAVHjgsLF5yurP5Hs70so6lU.roa
Signing time: Fri 02 Jan 2026 14:19:05 +0000
ROA not before: Fri 02 Jan 2026 14:19:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199816
IP address blocks: 194.180.197.0/24 maxlen: 24
194.180.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:13:89:a4:76:16:79:19:65:83:05:54:a2:05:38:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 14:19:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=effb240151e382c2c5e72bab3f91ecef4b28ea55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5a:0e:44:69:f4:e6:53:a9:99:34:56:aa:27:
9f:a2:4d:cb:bc:06:6e:66:44:25:9d:77:7e:af:b8:
c3:31:70:69:a2:ec:23:d6:86:7c:db:90:20:1e:22:
ad:88:bd:90:7e:fb:33:ee:67:9b:9b:75:63:18:fe:
64:18:6b:08:49:82:0e:c1:31:65:4d:94:3f:8e:08:
50:96:ee:ce:e6:88:a2:10:54:00:7a:18:50:eb:40:
b6:f3:b4:31:74:44:02:1c:7a:19:23:10:09:de:92:
5e:b2:1e:fb:22:ac:f2:1a:4d:d6:99:56:f2:35:5e:
66:dd:52:8d:cd:76:f0:4f:b0:dd:b0:99:51:7c:a0:
91:f9:d3:06:bd:32:94:99:a7:12:3a:d3:c3:40:c6:
ac:60:03:51:e5:3d:3f:1f:6e:f1:e1:79:7f:89:9c:
62:d9:29:0f:f7:cb:ea:77:43:ae:02:7b:8d:8d:7f:
af:c6:05:19:82:d5:9c:fa:12:37:ed:fe:c6:af:8e:
03:9a:d7:2c:32:0e:ee:16:bf:0e:ed:12:16:ed:4e:
a8:10:26:fd:f2:2d:54:b2:2b:a3:1b:b6:69:f4:45:
2d:ca:a5:12:b9:1a:e7:fd:31:86:6d:fa:17:7b:c5:
41:0c:aa:b8:1d:cf:ed:29:f1:91:f2:eb:f7:c9:9a:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:24:01:51:E3:82:C2:C5:E7:2B:AB:3F:91:EC:EF:4B:28:EA:55
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/7_skAVHjgsLF5yurP5Hs70so6lU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.197.0/24
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:50:da:2a:ca:05:f6:8f:9a:94:0d:f4:0f:14:cc:ff:7a:75:
53:0e:55:74:26:70:fa:12:5f:8c:85:f2:27:fc:bf:b7:9a:3d:
98:a5:32:e2:cc:42:a7:15:20:01:a4:0a:d2:fe:a8:d7:e5:fd:
6e:7a:a2:2e:06:4f:2c:46:c9:f0:f4:86:e6:f9:47:10:e3:29:
6d:5d:d0:ec:b2:8c:ae:26:47:f3:8f:1a:2c:1a:90:2d:02:6d:
65:db:23:f7:e3:18:e6:23:4a:e9:f1:cc:19:51:81:c6:2f:ec:
38:b8:3e:64:8d:11:a0:52:4e:16:cf:9f:20:1f:b9:5a:1e:76:
20:b7:82:c1:8c:83:04:f8:53:4a:88:ff:27:f8:ba:00:54:b8:
37:e3:38:3f:e3:22:c9:99:37:74:64:d9:ba:51:37:c8:df:85:
2c:e9:3d:5b:6f:f2:8e:68:46:77:8c:ff:ef:a5:2d:e9:a6:06:
95:4f:ef:35:3b:0e:4a:e3:49:f2:7a:86:93:17:72:a7:28:ab:
70:8c:10:57:e8:82:e5:6f:5f:22:6d:e8:d6:f4:3d:76:19:f4:
24:0b:6b:97:cc:d2:b3:4b:7f:3f:d7:30:98:f0:c9:b3:89:ff:
8d:e0:44:2f:c3:87:05:ca:b9:a7:89:b8:72:6f:3c:a4:37:1a:
3a:10:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:32 2026 by rpki-client