Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/7M1lI4YMAFJOI48HyCagOBCBslA.roa
File: 7M1lI4YMAFJOI48HyCagOBCBslA.roa (raw, json)
Hash identifier: stXzixjVqCCnGGdCyZumqUF4HhQbWS12UlJGaDGSUYw=
Subject key identifier: EC:CD:65:23:86:0C:00:52:4E:23:8F:07:C8:26:A0:38:10:81:B2:50
Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320
Certificate serial: 01A1D56699FFE0F348806EF5B400B3498FE6
Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/7M1lI4YMAFJOI48HyCagOBCBslA.roa
Signing time: Fri 13 Nov 2026 14:53:53 +0000
ROA not before: Fri 13 Nov 2026 14:53:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 87.199.154.0/24 maxlen: 24
136.148.151.0/24 maxlen: 24
2a05:3a81:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:66:99:ff:e0:f3:48:80:6e:f5:b4:00:b3:49:8f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320
Validity
Not Before: Nov 13 14:53:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eccd6523860c00524e238f07c826a0381081b250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:70:d4:ea:16:dd:b6:6b:90:e9:e3:a4:ab:
fa:78:29:b1:2f:4c:7e:c9:0a:0b:a5:a3:49:16:7a:
b7:e7:d6:fc:20:7f:7d:df:f5:7f:3b:b2:92:cb:93:
a2:94:3a:09:62:83:35:fc:b9:38:2b:70:a9:b5:5a:
05:b0:b7:fa:85:bf:d5:fe:7a:8e:f5:43:dd:fa:d6:
8d:dd:35:7e:fe:44:7b:95:34:8b:be:8d:ec:bc:1e:
2d:3b:15:0c:e6:54:48:af:4b:e5:41:36:68:12:05:
30:fc:29:71:d9:9f:da:5c:36:8c:ad:c7:8d:42:b8:
91:a7:d6:be:59:a6:24:63:9c:51:91:8e:cf:25:87:
f5:9d:8c:3f:24:c4:8c:98:0d:17:0f:ae:78:19:37:
c9:a8:00:df:5d:f5:ee:f1:b7:29:36:c1:db:2c:59:
c4:f3:f5:bd:dd:99:43:cb:77:9f:41:32:48:dd:d1:
62:d6:29:3e:26:1e:8d:e7:59:be:14:63:0e:9f:6b:
70:8f:4e:92:4c:c0:74:87:de:e5:0e:be:88:74:6f:
cb:3f:d0:2d:ba:79:cd:64:0c:b5:46:dd:fc:01:24:
b0:36:bd:bc:ae:27:f0:f1:c4:15:d2:6f:11:a5:57:
5e:3b:05:6e:05:63:e0:a9:61:cc:cb:4e:4b:38:53:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CD:65:23:86:0C:00:52:4E:23:8F:07:C8:26:A0:38:10:81:B2:50
X509v3 Authority Key Identifier:
keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/7M1lI4YMAFJOI48HyCagOBCBslA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.154.0/24
136.148.151.0/24
IPv6:
2a05:3a81:1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b4:86:97:b9:07:40:be:ea:04:db:1b:01:f3:17:5d:3c:cd:
71:74:40:dd:77:9c:04:83:60:03:89:97:66:15:97:a4:58:15:
cc:0f:23:47:73:06:0d:57:f1:f8:ef:54:73:9d:f4:0f:ea:cb:
de:35:84:36:78:96:76:36:ab:8b:10:6f:b2:15:60:c4:4b:95:
81:c6:28:30:c3:55:f5:44:74:f0:45:87:e3:08:78:fa:c4:7a:
4a:91:4d:50:2b:83:26:b0:f1:7c:38:bb:60:34:7f:c4:08:12:
e0:36:6c:ac:00:5a:a0:fa:7f:63:48:3e:8d:e9:27:8c:a6:a9:
a2:54:33:39:d4:7b:e3:0d:28:55:ee:fe:91:63:fe:81:ef:e8:
ae:46:81:2f:17:9c:e0:45:fe:62:c2:07:df:b2:1c:72:64:5b:
fb:11:47:eb:29:73:00:23:1f:6b:18:af:d6:02:09:db:f2:bc:
6e:7c:66:f3:b9:db:ea:76:cc:7b:d3:31:5e:12:ed:1c:d0:1a:
28:65:f8:b0:05:d6:97:62:2d:e8:28:1d:4e:45:60:98:1d:cd:
43:cc:88:25:04:4c:32:d7:da:ab:a3:9e:69:57:b0:d2:7f:a5:
4c:a5:cb:c1:fc:8c:38:3f:b1:22:ee:6d:b8:55:3f:9e:a4:e9:
90:7c:87:c0
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaHVZpn/4PNIgG71tACzSY/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy
ZjAzMjAwHhcNMjYxMTEzMTQ1MzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2NkNjUyMzg2MGMwMDUyNGUyMzhmMDdjODI2YTAzODEwODFiMjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOlw1OoW3bZrkOnjpKv6eCmxL0x+
yQoLpaNJFnq359b8IH993/V/O7KSy5OilDoJYoM1/Lk4K3CptVoFsLf6hb/V/nqO
9UPd+taN3TV+/kR7lTSLvo3svB4tOxUM5lRIr0vlQTZoEgUw/Clx2Z/aXDaMrceN
QriRp9a+WaYkY5xRkY7PJYf1nYw/JMSMmA0XD654GTfJqADfXfXu8bcpNsHbLFnE
8/W93ZlDy3efQTJI3dFi1ik+Jh6N51m+FGMOn2twj06STMB0h97lDr6IdG/LP9At
unnNZAy1Rt38ASSwNr28rifw8cQV0m8RpVdeOwVuBWPgqWHMy05LOFNkOQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOzNZSOGDABSTiOPB8gmoDgQgbJQMB8GA1UdIwQY
MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt
NjRkMWIyZDU2ZTk1LzEvN00xbEk0WU1BRkpPSTQ4SHlDYWdPQkNCc2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1
LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAV8eaAwQA
iJSXMA8EAgACMAkDBwAqBTqBAAEwDQYJKoZIhvcNAQELBQADggEBAG60hpe5B0C+
6gTbGwHzF108zXF0QN13nASDYAOJl2YVl6RYFcwPI0dzBg1X8fjvVHOd9A/qy941
hDZ4lnY2q4sQb7IVYMRLlYHGKDDDVfVEdPBFh+MIePrEekqRTVArgyaw8Xw4u2A0
f8QIEuA2bKwAWqD6f2NIPo3pJ4ymqaJUMznUe+MNKFXu/pFj/oHv6K5GgS8XnOBF
/mLCB9+yHHJkW/sRR+spcwAjH2sYr9YCCdvyvG58ZvO52+p2zHvTMV4S7RzQGihl
+LAF1pdiLegoHU5FYJgdzUPMiCUETDLX2qujnmlXsNJ/pUyly8H8jDg/sSLubbhV
P56k6ZB8h8A=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:50:34 2026 by rpki-client