Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/7KMei89cF5bMU_4TaRPp6g42s1E.roa
File: 7KMei89cF5bMU_4TaRPp6g42s1E.roa (raw, json)
Hash identifier: NRXPLOV3OLAB5gs1dIMy5Wr/b2KoynjrFtKRrh8XYUo=
Subject key identifier: EC:A3:1E:8B:CF:5C:17:96:CC:53:FE:13:69:13:E9:EA:0E:36:B3:51
Certificate issuer: /CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Certificate serial: 019F2369078E020D6226EE6BF03D765DF59D
Authority key identifier: 80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/7KMei89cF5bMU_4TaRPp6g42s1E.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214805
IP address blocks: 193.186.215.0/24 maxlen: 24
2a14:52c0:f404::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:8e:02:0d:62:26:ee:6b:f0:3d:76:5d:f5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80670a0ae519a32cfd85ba30737c8e3d07c4bcce
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eca31e8bcf5c1796cc53fe136913e9ea0e36b351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:73:73:ca:b1:18:2b:b4:c1:1a:ab:0f:72:fe:
a3:45:fc:2f:7e:90:3e:c3:28:cd:c0:03:6a:22:46:
e9:66:06:11:d3:bf:18:f5:8e:c9:e8:3f:64:8e:96:
7d:41:55:cd:eb:fa:04:0e:26:7f:e8:e8:4d:22:60:
2b:bd:ca:dd:cf:bc:2b:48:12:56:b7:aa:e0:18:40:
16:44:12:f2:48:89:81:cc:94:ed:d6:69:15:79:37:
ec:7a:f9:31:fb:eb:a6:35:65:9a:b7:81:df:40:96:
91:a2:c9:e1:5c:e2:f3:12:b9:12:4d:49:ef:eb:af:
e1:9e:d3:23:d7:29:51:f0:7f:21:26:d0:b6:41:d6:
c1:ce:de:c7:66:17:fd:db:bb:5e:79:4c:0c:8e:94:
7d:0b:49:38:83:bd:6d:ab:8d:39:7d:36:3e:06:88:
77:cb:62:2e:40:08:ec:63:37:7e:a2:16:35:cf:e4:
ed:91:9e:64:e6:a1:73:db:2b:15:b9:57:d2:93:33:
d0:b3:e2:ee:1d:39:1f:17:f4:e8:9d:8e:82:00:e5:
db:b9:3a:c6:e8:c7:68:d3:e0:2f:1f:1c:ed:1e:4d:
cd:81:38:ff:4c:83:89:24:3f:d1:ae:42:6b:4f:cc:
84:83:05:47:26:1f:f0:e0:27:be:2b:52:76:8f:50:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A3:1E:8B:CF:5C:17:96:CC:53:FE:13:69:13:E9:EA:0E:36:B3:51
X509v3 Authority Key Identifier:
keyid:80:67:0A:0A:E5:19:A3:2C:FD:85:BA:30:73:7C:8E:3D:07:C4:BC:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGcKCuUZoyz9hbowc3yOPQfEvM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/7KMei89cF5bMU_4TaRPp6g42s1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/gGcKCuUZoyz9hbowc3yOPQfEvM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.215.0/24
IPv6:
2a14:52c0:f404::/48
Signature Algorithm: sha256WithRSAEncryption
3a:99:c5:4c:06:20:33:0a:bb:4a:e3:ef:d3:08:fe:19:ac:af:
df:ed:96:38:63:6f:34:f7:2d:ab:26:39:e3:d3:f9:55:64:3e:
2b:c7:92:42:e8:88:08:d8:f8:d8:7a:86:1d:7f:ab:46:7d:0e:
4f:7f:a4:be:ed:84:f3:a3:c0:89:08:7d:ec:5c:36:a9:0b:0b:
b1:92:d6:2c:5d:b9:8e:26:7d:14:89:cb:a1:fd:64:4c:45:74:
fe:ba:0a:cb:59:d1:fa:52:84:eb:24:57:08:94:75:79:cc:db:
5f:ea:90:c2:40:02:ed:93:02:86:fa:f8:e3:f6:df:9e:ef:26:
7e:d8:ed:6b:2b:93:70:37:ad:af:bf:9b:b8:9e:4c:a3:07:dc:
05:e5:cc:50:76:17:db:0c:04:e6:d9:7f:f5:1c:42:78:0d:c3:
c6:6f:f6:37:34:8c:1a:e2:aa:6c:c0:c1:6a:59:c0:da:e9:17:
06:50:57:53:cf:5b:81:02:6d:1a:c7:bd:fd:89:83:14:42:31:
1d:40:00:36:56:a8:e5:e4:4a:ca:98:b8:12:75:78:04:5b:19:
87:16:e0:c4:d1:9c:05:a1:9d:0c:b0:8a:4b:d9:3f:3a:0c:92:
a9:55:1b:a9:27:6f:a6:a0:62:4d:93:70:9f:bc:82:46:74:0c:
46:de:5e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:40 2026 by rpki-client