Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/7Tyv75qflu1MI2EbiYIYOe-EMOs.roa
File: 7Tyv75qflu1MI2EbiYIYOe-EMOs.roa (raw, json)
Hash identifier: VD2V/Wqx8qVUzX6JNvOF1zN+nPxKD5Y7QjXuUoG/ZVc=
Subject key identifier: ED:3C:AF:EF:9A:9F:96:ED:4C:23:61:1B:89:82:18:39:EF:84:30:EB
Certificate issuer: /CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Certificate serial: 019F23693F4157A061BC2FBA300C7FAED6F8
Authority key identifier: 86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/7Tyv75qflu1MI2EbiYIYOe-EMOs.roa
Signing time: Thu 02 Jul 2026 15:18:47 +0000
ROA not before: Thu 02 Jul 2026 15:18:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50364
IP address blocks: 77.83.76.0/22 maxlen: 24
2a09:7d80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3f:41:57:a0:61:bc:2f:ba:30:0c:7f:ae:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869d9f737dfdeaad3e95f866e8d32a66c4f8a0b2
Validity
Not Before: Jul 2 15:18:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed3cafef9a9f96ed4c23611b89821839ef8430eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:83:e5:39:f2:c4:8f:45:e9:27:cc:d6:cf:
1e:d0:e5:41:33:3d:9b:3a:b3:d7:e2:be:01:5d:6d:
6e:57:d2:53:51:d7:8e:8e:da:16:62:d8:5c:38:86:
14:c2:12:6e:e8:af:ee:38:f7:de:93:ef:f2:ca:99:
49:47:24:47:06:27:7e:df:a1:2e:f6:48:a6:2d:bf:
39:7d:32:e6:c9:b6:d5:4a:70:c7:a6:95:54:2f:fa:
80:b3:3e:c5:cd:80:90:d8:e1:d9:cf:53:fb:5c:e4:
8c:5e:d6:dc:ca:ed:dc:bb:2d:20:61:72:d5:b3:08:
87:e6:bc:db:a1:e8:c2:44:61:cb:0b:88:28:af:ab:
f1:7e:5f:72:18:7c:93:ed:8d:2d:ec:81:a6:52:4b:
ad:95:2c:a3:74:b0:99:fe:fe:73:ca:96:10:4f:57:
92:57:67:9c:39:77:41:66:71:22:87:ab:0a:af:56:
da:18:b8:00:da:9d:15:37:3a:02:4d:e4:56:6c:cb:
fc:77:23:05:50:f2:24:53:2c:a5:49:01:7e:8f:27:
53:9d:13:e0:1f:11:cc:1e:3e:17:6f:19:a2:4e:65:
f3:c3:43:33:be:22:bb:8a:f9:bf:f2:5f:3c:47:25:
48:07:90:48:f3:90:36:39:83:26:1d:91:98:9d:ff:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:AF:EF:9A:9F:96:ED:4C:23:61:1B:89:82:18:39:EF:84:30:EB
X509v3 Authority Key Identifier:
keyid:86:9D:9F:73:7D:FD:EA:AD:3E:95:F8:66:E8:D3:2A:66:C4:F8:A0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hp2fc3396q0-lfhm6NMqZsT4oLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/7Tyv75qflu1MI2EbiYIYOe-EMOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/hp2fc3396q0-lfhm6NMqZsT4oLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.76.0/22
IPv6:
2a09:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
55:50:f4:6d:7b:98:57:24:a7:7a:3c:b2:05:1c:e4:e4:f6:b0:
69:f8:6a:a4:45:6c:be:49:7e:fd:d7:ff:1f:ef:d5:b2:5b:95:
99:c8:79:d1:dd:53:0b:22:44:25:f1:6a:2a:3f:64:05:dd:07:
bb:a4:b2:4a:48:eb:41:94:d8:59:9c:5f:0a:e5:5d:e3:de:c0:
9a:5d:86:65:91:41:1c:cc:1d:c5:9e:b8:73:00:fe:48:8d:d6:
ed:a1:a4:f6:1f:4b:1f:dc:c8:15:75:bb:38:89:e6:3b:60:0e:
19:e4:34:37:33:a6:ad:e8:9f:9c:c3:78:8a:44:04:21:e9:3b:
69:89:1b:09:2f:44:e1:f0:9c:6c:11:98:ce:6f:a7:54:c4:8f:
98:00:05:3f:71:84:94:f2:32:cb:a7:39:36:e9:1b:02:19:a8:
5b:9d:d7:ad:61:41:a3:7e:e5:d6:46:54:e7:8e:63:fd:c5:ce:
9b:37:ad:4b:e3:0e:7f:9b:52:e9:bd:d7:3f:82:76:df:8f:8c:
1f:ae:64:7b:7e:c8:02:20:4d:47:21:22:f1:5d:26:05:7e:79:
51:7d:50:cc:64:11:eb:ba:53:9f:8d:dd:73:d1:5c:4d:51:fb:
3b:4e:00:67:b6:df:b3:97:88:36:0c:2b:a9:01:09:e5:6a:42:
bf:3d:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:06:34 2026 by rpki-client