Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2Q7L7FQWqc2CN3fIoCFfckFP0Ec.roa
File: 2Q7L7FQWqc2CN3fIoCFfckFP0Ec.roa (raw, json)
Hash identifier: xckUaUnISyQcROpZb/QEyouIhzvJQywjKqm1abKYogA=
Subject key identifier: D9:0E:CB:EC:54:16:A9:CD:82:37:77:C8:A0:21:5F:72:41:4F:D0:47
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019F8FEC384625C523E59A3A88027E3E1DE3
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2Q7L7FQWqc2CN3fIoCFfckFP0Ec.roa
Signing time: Thu 23 Jul 2026 17:00:50 +0000
ROA not before: Thu 23 Jul 2026 17:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206621
IP address blocks: 141.105.133.0/24 maxlen: 24
141.105.136.0/24 maxlen: 24
212.87.170.0/23 maxlen: 23
212.87.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:38:46:25:c5:23:e5:9a:3a:88:02:7e:3e:1d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jul 23 17:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d90ecbec5416a9cd823777c8a0215f72414fd047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:a1:a8:e8:af:ff:6e:d6:6e:78:4c:6a:5a:
59:6b:6d:7b:16:3b:a0:c2:da:a3:16:03:3e:4b:b5:
b5:d4:ac:42:ee:b2:10:94:dc:c7:5f:06:c3:66:02:
2e:7c:80:57:54:9d:99:2b:84:ef:90:02:20:19:dc:
f8:c4:be:21:ac:06:62:ba:26:e4:46:59:1d:f9:70:
47:06:8a:8b:a5:40:82:8e:bb:0f:36:96:d2:f8:86:
33:80:b2:70:a0:20:60:db:02:97:97:c8:1a:2a:12:
5c:b0:9b:40:4e:21:f6:8e:58:f7:90:6c:32:5f:4a:
de:34:3f:2b:01:32:c7:b8:e0:9e:36:f1:e0:55:d0:
a1:aa:2b:93:b8:60:10:1e:8c:4f:cc:a7:9a:ce:51:
c8:e9:cb:70:28:06:1f:57:07:31:f3:eb:5f:89:21:
25:11:ab:70:cd:c2:5f:f8:1a:1b:68:f0:d4:0e:47:
95:d1:69:9c:c8:fe:86:1b:46:6d:bf:b4:6a:73:fb:
69:5e:bc:18:5d:cc:e0:c2:5a:cd:be:95:01:a1:a7:
45:0b:52:17:cd:8f:22:e6:f1:36:a8:5a:be:f8:cb:
3a:a4:f4:12:37:6e:65:7b:19:73:dc:42:ed:69:39:
72:3a:d2:f2:8e:71:20:04:f1:61:6d:33:50:f6:b7:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0E:CB:EC:54:16:A9:CD:82:37:77:C8:A0:21:5F:72:41:4F:D0:47
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/2Q7L7FQWqc2CN3fIoCFfckFP0Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.133.0/24
141.105.136.0/24
212.87.170.0-212.87.173.255
Signature Algorithm: sha256WithRSAEncryption
61:34:2d:56:f9:71:c0:3b:e1:6e:fa:ca:62:78:6b:83:a0:86:
b2:bc:ea:17:9a:1c:58:4e:0c:49:cf:cd:7d:6f:9a:c4:92:e8:
6c:26:8d:3a:4a:54:52:30:7e:d9:37:b9:52:ca:cb:91:46:f3:
b6:73:c9:2b:f2:32:6f:f0:db:cc:0a:3e:b2:7f:ea:77:84:68:
83:00:b7:b5:36:48:55:76:3d:a8:ba:83:93:ad:9f:76:59:f0:
f7:de:47:ef:02:07:4e:3d:56:3e:5c:6d:b4:38:2d:71:42:cd:
c1:75:fc:2a:58:a9:bd:8e:c6:4c:bb:e7:5b:95:c5:26:77:fa:
7d:c4:de:19:dd:93:11:b6:54:68:77:b3:58:ad:d2:d4:76:dc:
9e:a3:d6:cd:9c:8a:6f:2b:3b:60:08:99:b9:e0:81:1e:0f:fe:
b5:8d:58:96:60:f5:c0:9e:db:0c:31:62:48:33:7d:07:1b:bb:
0f:25:95:c4:af:76:4f:5d:07:7c:9c:ff:37:45:7a:49:5f:0b:
48:c5:25:7d:e6:b1:b5:a1:7a:ac:c9:63:d4:d1:58:40:d7:70:
d9:54:66:38:ad:67:c0:ed:c4:76:12:7c:e6:d7:a3:60:ff:77:
34:26:4a:64:c2:3f:e0:61:9f:39:66:c3:a9:69:0f:e6:07:c4:
90:76:b0:ed
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ+P7DhGJcUj5Zo6iAJ+Ph3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwNzIzMTcwMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTBlY2JlYzU0MTZhOWNkODIzNzc3YzhhMDIxNWY3MjQxNGZkMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN2hqOiv/27WbnhMalpZa217Fjug
wtqjFgM+S7W11KxC7rIQlNzHXwbDZgIufIBXVJ2ZK4TvkAIgGdz4xL4hrAZiuibk
Rlkd+XBHBoqLpUCCjrsPNpbS+IYzgLJwoCBg2wKXl8gaKhJcsJtATiH2jlj3kGwy
X0reND8rATLHuOCeNvHgVdChqiuTuGAQHoxPzKeazlHI6ctwKAYfVwcx8+tfiSEl
EatwzcJf+BobaPDUDkeV0WmcyP6GG0Ztv7Rqc/tpXrwYXczgwlrNvpUBoadFC1IX
zY8i5vE2qFq++Ms6pPQSN25lexlz3ELtaTlyOtLyjnEgBPFhbTNQ9reJIQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNkOy+xUFqnNgjd3yKAhX3JBT9BHMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvMlE3TDdGUVdxYzJDTjNmSW9DRmZja0ZQMEVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAjWmFAwQA
jWmIMAwDBAHUV6oDBAHUV6wwDQYJKoZIhvcNAQELBQADggEBAGE0LVb5ccA74W76
ymJ4a4OghrK86heaHFhODEnPzX1vmsSS6GwmjTpKVFIwftk3uVLKy5FG87ZzySvy
Mm/w28wKPrJ/6neEaIMAt7U2SFV2Pai6g5Otn3ZZ8PfeR+8CB049Vj5cbbQ4LXFC
zcF1/CpYqb2Oxky751uVxSZ3+n3E3hndkxG2VGh3s1it0tR23J6j1s2cim8rO2AI
mbnggR4P/rWNWJZg9cCe2wwxYkgzfQcbuw8llcSvdk9dB3yc/zdFeklfC0jFJX3m
sbWheqzJY9TRWEDXcNlUZjitZ8DtxHYSfObXo2D/dzQmSmTCP+Bhnzlmw6lpD+YH
xJB2sO0=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:38 2026 by rpki-client