Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7RP3iQSQtD7arxeBmQKhFnoyW2s.roa
File: 7RP3iQSQtD7arxeBmQKhFnoyW2s.roa (raw, json)
Hash identifier: uPo2yrco4pJh4jY2PAvFRXkWk7uLAk3aIu3THxlgOtk=
Subject key identifier: ED:13:F7:89:04:90:B4:3E:DA:AF:17:81:99:02:A1:16:7A:32:5B:6B
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 019F4749F701940061412F0CE6B90741E8F9
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7RP3iQSQtD7arxeBmQKhFnoyW2s.roa
Signing time: Thu 09 Jul 2026 14:30:57 +0000
ROA not before: Thu 09 Jul 2026 14:30:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2.57.180.0/22 maxlen: 22
2.58.146.0/23 maxlen: 23
2.59.116.0/24 maxlen: 24
45.12.46.0/23 maxlen: 23
45.67.44.0/22 maxlen: 22
45.86.192.0/22 maxlen: 22
45.92.212.0/22 maxlen: 22
45.95.140.0/22 maxlen: 22
45.130.204.0/22 maxlen: 22
45.136.60.0/22 maxlen: 22
45.145.192.0/22 maxlen: 22
45.151.204.0/22 maxlen: 22
45.152.40.0/22 maxlen: 22
79.99.140.0/22 maxlen: 22
91.239.15.0/24 maxlen: 24
103.82.160.0/22 maxlen: 22
153.56.192.0/21 maxlen: 21
185.39.11.0/24 maxlen: 24
185.57.176.0/22 maxlen: 22
185.157.123.0/24 maxlen: 24
185.232.89.0/24 maxlen: 24
193.3.158.0/24 maxlen: 24
194.99.66.0/23 maxlen: 23
212.52.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:49:f7:01:94:00:61:41:2f:0c:e6:b9:07:41:e8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jul 9 14:30:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed13f7890490b43edaaf17819902a1167a325b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:de:d3:91:9a:23:d3:f2:59:97:4b:87:90:
62:16:45:95:ea:93:a1:44:d9:a3:00:11:95:15:e1:
78:7a:61:91:24:13:91:fe:a9:cb:1e:99:18:7e:a9:
56:cc:c2:49:8b:b0:e1:5a:80:58:e0:35:8c:27:9a:
a3:1b:0d:93:b3:b4:1a:01:40:19:88:d5:a7:53:9c:
99:e0:16:8f:ea:45:20:66:eb:9e:da:14:12:23:ee:
47:de:0b:5e:92:70:16:bb:3d:6b:ed:36:89:30:29:
86:09:73:38:18:c5:fd:f4:b8:60:56:3c:32:3d:b9:
b7:57:47:b5:8a:25:c2:56:ee:e5:22:8b:8e:e5:7a:
be:c8:16:8e:c3:1e:89:92:33:26:ab:8b:ea:ae:80:
b7:40:6f:15:47:46:cc:43:25:49:27:d6:47:b6:1a:
e0:44:bd:ae:d1:a7:ae:cb:9d:1f:da:4f:e3:e8:63:
91:dc:0b:e5:95:34:af:b8:1a:4c:ed:0c:c7:51:24:
c5:98:c0:bf:7b:44:88:b8:43:93:8f:1d:01:04:59:
2a:f5:6e:c3:a5:32:b2:05:0f:01:59:fe:b8:4c:1c:
88:44:6c:20:67:0b:dc:4a:7b:0c:b6:c6:02:e2:9c:
1c:e5:51:47:fb:2f:70:dc:85:55:96:0b:7d:ee:bb:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:F7:89:04:90:B4:3E:DA:AF:17:81:99:02:A1:16:7A:32:5B:6B
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/7RP3iQSQtD7arxeBmQKhFnoyW2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
2.58.146.0/23
2.59.116.0/24
45.12.46.0/23
45.67.44.0/22
45.86.192.0/22
45.92.212.0/22
45.95.140.0/22
45.130.204.0/22
45.136.60.0/22
45.145.192.0/22
45.151.204.0/22
45.152.40.0/22
79.99.140.0/22
91.239.15.0/24
103.82.160.0/22
153.56.192.0/21
185.39.11.0/24
185.57.176.0/22
185.157.123.0/24
185.232.89.0/24
193.3.158.0/24
194.99.66.0/23
212.52.3.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c7:d4:fd:f0:d8:32:3a:cd:22:7d:7c:1a:b0:6c:ef:2d:bf:
3b:03:91:09:2c:b1:0b:2f:e0:5c:a5:09:b5:83:83:5c:af:d9:
1d:a5:4d:8d:ce:87:7c:87:e4:c8:ca:bb:2f:b9:a6:13:d0:8c:
7c:db:7e:ae:0b:35:74:4e:0b:7e:fe:08:9a:5f:99:58:42:d3:
8c:95:e2:f6:8c:08:ba:e2:c9:23:b6:c0:dd:32:c4:6b:44:60:
f0:2a:30:33:ad:87:ef:b2:3b:08:13:74:d8:19:3a:ee:db:00:
9c:69:17:60:ec:17:e0:0a:38:a3:3b:db:72:c8:2d:a2:f4:77:
6b:ab:23:19:4f:8b:cc:b4:08:a6:27:2a:77:22:8a:f1:d8:b3:
51:40:7f:ae:54:5a:64:93:81:ea:be:20:ad:ad:80:bc:40:2f:
6e:e5:76:1b:a3:4f:05:39:9e:32:81:a2:09:fd:6d:bd:d6:29:
b8:ee:ab:1d:a8:2d:3c:cd:ff:3d:d7:ff:8b:f1:45:ba:72:b0:
f6:9e:69:91:8f:ac:52:61:64:db:b2:cd:16:77:53:54:fa:d1:
d3:8b:8a:aa:10:bf:f9:aa:6c:96:e6:6f:b0:d5:a3:00:b7:5b:
e3:c2:15:b8:b1:79:b6:91:15:cf:8d:4c:90:7f:77:eb:4a:44:
2d:cf:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:27 2026 by rpki-client