Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa
File: 7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa (raw, json)
Hash identifier: KXN7U8564EfllgkcnSlbq0Ol7VdnYcZ9gKliZSfccKY=
Subject key identifier: EC:CF:A1:58:39:03:9F:96:36:94:9A:89:2F:38:42:63:31:52:30:17
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 019F8E770CA073D73DF7AD0A30ED05193341
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa
Signing time: Thu 23 Jul 2026 10:13:14 +0000
ROA not before: Thu 23 Jul 2026 10:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8391
IP address blocks: 195.138.32.0/22 maxlen: 22
195.138.38.0/24 maxlen: 24
195.138.54.0/24 maxlen: 24
195.138.58.0/24 maxlen: 24
195.138.61.0/24 maxlen: 24
195.138.62.0/24 maxlen: 24
195.253.0.0/17 maxlen: 24
195.253.6.0/24 maxlen: 24
195.253.96.0/19 maxlen: 24
195.253.128.0/18 maxlen: 24
195.253.128.0/22 maxlen: 22
2a01:5b0::/32 maxlen: 48
2a01:5b0:40::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:77:0c:a0:73:d7:3d:f7:ad:0a:30:ed:05:19:33:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jul 23 10:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eccfa15839039f9636949a892f38426331523017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:b2:2d:18:dc:70:97:b5:7f:ea:67:7f:7a:
de:ff:0f:8b:cb:8c:b5:9f:64:b4:28:32:0e:d2:72:
1f:a3:b5:1e:a3:29:37:ba:46:23:fb:51:f9:c6:ae:
61:8d:bb:67:b3:35:33:00:cb:79:8f:38:87:24:a1:
f0:0b:16:e8:1e:0e:29:5e:03:06:70:d7:53:be:5e:
b9:b9:6a:b5:1c:29:00:ee:82:db:4c:c7:b4:8b:fb:
29:5a:a7:cf:71:92:c5:8c:39:e7:c8:6a:1a:88:3f:
10:a9:90:55:7a:b9:e8:54:75:59:dc:b4:2b:a3:9b:
31:c7:71:5f:c3:f6:33:58:71:9c:a4:b3:e5:c6:b6:
50:68:1e:2f:7e:d3:72:46:0a:f3:f1:ad:d1:e8:93:
a2:ce:2b:ef:76:ae:a4:3a:63:87:56:4a:28:e5:a3:
e2:92:9a:4a:15:6c:46:17:74:63:1b:ad:bc:62:48:
01:49:8e:a1:1f:b3:95:e1:2d:c4:52:f2:b4:3a:5c:
01:ea:fc:bf:c0:ce:36:08:5d:01:b8:17:b2:03:e2:
4d:ed:eb:21:06:9d:4c:f8:50:8c:45:ec:9b:06:31:
fa:95:17:7b:77:09:8c:b8:d3:2e:75:47:67:ef:dc:
7c:1a:e7:e0:26:02:48:95:f0:e3:e6:bd:d2:b6:f4:
28:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:A1:58:39:03:9F:96:36:94:9A:89:2F:38:42:63:31:52:30:17
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/7M-hWDkDn5Y2lJqJLzhCYzFSMBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.32.0/22
195.138.38.0/24
195.138.54.0/24
195.138.58.0/24
195.138.61.0-195.138.62.255
195.253.0.0-195.253.191.255
IPv6:
2a01:5b0::/32
Signature Algorithm: sha256WithRSAEncryption
88:56:21:57:d5:6b:43:8a:2f:77:9a:cf:bf:4b:e1:71:30:c1:
6c:e6:79:72:1c:a4:56:8f:65:db:c2:37:9a:23:08:84:62:2d:
1f:06:6f:18:4f:8f:8a:d7:c3:b1:0e:31:3c:8a:26:22:ce:e9:
5d:8a:ea:06:1b:52:42:43:99:c3:76:af:1e:bd:62:05:9d:e0:
30:80:90:17:e8:5f:91:f6:9f:c5:dd:f3:57:a9:48:05:05:ee:
7c:72:70:8c:cc:1a:e1:c3:a4:d9:1a:77:72:40:23:8c:47:3b:
d1:31:98:9a:91:51:86:94:61:63:1d:94:ba:1e:b0:14:25:1c:
92:1c:88:1d:8f:a9:2b:52:15:4d:f1:86:2b:1d:0a:16:b6:28:
a0:3e:64:21:35:a9:75:f3:4a:6e:9a:ca:55:d3:7d:c2:49:90:
a0:66:d7:3d:3e:ab:1f:1c:77:80:8c:91:1b:f5:e5:98:96:1f:
ad:06:ab:a7:c0:87:56:63:7b:8f:24:1a:51:72:92:cf:1d:6e:
b8:e9:00:65:68:a6:3e:ce:aa:a3:5e:ae:76:b3:4a:7b:2c:ae:
2d:7b:c0:14:80:b5:0f:7b:63:0a:c1:80:bd:09:02:b5:76:f5:
29:64:ec:82:5f:49:24:4a:ed:ea:26:5a:7b:af:0e:6e:45:e8:
08:8f:87:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:38 2026 by rpki-client