Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/7G0pA-14PphE7MmIfOehnWXP2Po.roa
File: 7G0pA-14PphE7MmIfOehnWXP2Po.roa (raw, json)
Hash identifier: nn7cZJcF/v39DflPT/vchUr23vbedk/c6L/FyiqCxZo=
Subject key identifier: EC:6D:29:03:ED:78:3E:98:44:EC:C9:88:7C:E7:A1:9D:65:CF:D8:FA
Certificate issuer: /CN=ebf760c05773c15d73676450344668fefb723447
Certificate serial: 019F8B20DC992E8669494575FCD9792C4F40
Authority key identifier: EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/7G0pA-14PphE7MmIfOehnWXP2Po.roa
Signing time: Wed 22 Jul 2026 18:40:14 +0000
ROA not before: Wed 22 Jul 2026 18:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50597
IP address blocks: 37.98.224.0/21 maxlen: 21
37.98.224.0/24 maxlen: 24
37.98.225.0/24 maxlen: 24
37.98.226.0/24 maxlen: 24
37.98.227.0/24 maxlen: 24
37.98.228.0/24 maxlen: 24
37.98.229.0/24 maxlen: 24
37.98.230.0/24 maxlen: 24
37.98.231.0/24 maxlen: 24
85.113.90.0/23 maxlen: 23
85.113.90.0/24 maxlen: 24
85.113.91.0/24 maxlen: 24
85.194.196.0/22 maxlen: 22
85.194.196.0/24 maxlen: 24
85.194.197.0/24 maxlen: 24
85.194.198.0/24 maxlen: 24
85.194.199.0/24 maxlen: 24
109.205.112.0/21 maxlen: 24
167.160.5.0/24 maxlen: 24
185.58.12.0/24 maxlen: 24
185.58.14.0/24 maxlen: 24
185.76.32.0/22 maxlen: 22
185.76.32.0/24 maxlen: 24
185.76.33.0/24 maxlen: 24
185.76.34.0/24 maxlen: 24
185.76.35.0/24 maxlen: 24
185.181.52.0/22 maxlen: 24
185.181.54.0/24 maxlen: 24
185.181.55.0/24 maxlen: 24
192.161.6.0/23 maxlen: 24
192.161.6.0/24 maxlen: 24
192.161.7.0/24 maxlen: 24
2a05:55c0::/29 maxlen: 29
2a05:55c1:1::/48 maxlen: 48
2a05:55c1:2::/48 maxlen: 48
2a05:55c1:3::/48 maxlen: 48
2a05:55c1:4::/48 maxlen: 48
2a05:55c1:5::/48 maxlen: 48
2a05:55c1:6::/48 maxlen: 48
2a05:55c1:7::/48 maxlen: 48
2a05:55c1:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:20:dc:99:2e:86:69:49:45:75:fc:d9:79:2c:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf760c05773c15d73676450344668fefb723447
Validity
Not Before: Jul 22 18:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec6d2903ed783e9844ecc9887ce7a19d65cfd8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:8b:ca:b8:c5:53:ea:76:62:cb:4e:44:bc:
71:a3:c9:3a:d7:12:ad:57:8b:ca:8f:b5:ed:49:e2:
96:00:a9:9b:b1:c8:fd:24:9e:2d:37:48:e1:17:4e:
39:49:5e:a1:fa:1a:f9:a5:88:dc:f7:b1:79:54:78:
5b:40:52:56:ef:62:29:17:69:28:9e:c0:6a:39:9d:
3d:9d:4e:65:9f:1f:3e:10:78:88:b4:33:56:9b:f3:
2d:f2:14:b5:2f:0b:86:de:2a:2c:5d:1d:98:0b:c6:
23:c7:ad:9f:98:95:e7:ed:1b:33:91:80:75:90:94:
08:d2:22:75:a1:a7:09:94:7a:b2:73:83:3c:7f:98:
59:0c:eb:1f:09:9c:32:42:65:67:d5:f6:79:62:7c:
bf:92:b8:85:57:33:7c:ba:8d:26:4b:db:f9:75:fb:
64:ff:48:34:07:1e:ba:7c:c2:35:b1:c3:e5:1c:07:
6b:6d:48:ef:05:92:e6:70:79:7f:96:a0:a3:41:3c:
69:0f:69:13:51:0f:76:bc:2e:15:3b:33:b1:db:28:
ca:3e:a6:88:3f:d1:e2:28:fd:c2:84:a8:f9:6c:e3:
92:45:0d:57:93:80:76:c8:5a:23:9e:4e:b5:ff:41:
85:fa:92:9c:c1:6b:ab:85:87:f6:df:c0:4a:cf:45:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:29:03:ED:78:3E:98:44:EC:C9:88:7C:E7:A1:9D:65:CF:D8:FA
X509v3 Authority Key Identifier:
keyid:EB:F7:60:C0:57:73:C1:5D:73:67:64:50:34:46:68:FE:FB:72:34:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/7G0pA-14PphE7MmIfOehnWXP2Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/931f81-c409-4d3a-95df-49098897ee4a/1/6_dgwFdzwV1zZ2RQNEZo_vtyNEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.224.0/21
85.113.90.0/23
85.194.196.0/22
109.205.112.0/21
167.160.5.0/24
185.58.12.0/24
185.58.14.0/24
185.76.32.0/22
185.181.52.0/22
192.161.6.0/23
IPv6:
2a05:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:ed:cb:56:a0:12:20:fb:9e:d9:04:19:3f:82:6e:5d:11:21:
27:95:63:7c:b1:17:0f:1f:22:58:a1:1d:83:44:b7:a2:a5:82:
cc:2b:ee:91:33:6c:f6:43:73:18:fa:13:08:b7:48:2a:5c:07:
dc:d5:9e:90:1e:7c:b5:4f:70:d5:e0:3c:d1:4b:e1:b9:fc:00:
76:9c:81:fe:b1:2c:f2:1f:5e:18:ba:ea:c5:90:1e:80:41:cf:
65:8c:94:85:58:bc:d5:41:fb:e4:dc:11:81:8b:f6:3e:aa:fe:
51:a4:cf:e7:57:c3:b2:45:7e:d1:ac:4c:26:b1:1a:4f:cd:45:
d0:0e:be:d0:ec:3b:25:ac:7c:bd:a4:e8:10:69:5e:2a:22:ac:
b9:c0:ff:6e:06:a6:db:fc:8a:4e:3c:cf:93:81:0a:17:87:b8:
45:0f:28:2b:e1:c2:0e:5e:9f:dd:f5:df:cf:57:ed:34:a6:f8:
65:44:a8:1e:e0:40:a3:85:d2:6f:d5:d0:5b:c1:f8:bc:c6:74:
88:c5:13:9f:56:70:7c:ce:1e:70:07:ed:63:5b:2c:73:bf:e4:
08:5e:22:28:af:63:8b:6e:5a:04:61:aa:bb:f0:26:ad:05:69:
e0:90:b7:0b:a7:e5:3c:81:01:50:5a:53:86:05:a3:c6:36:e1:
be:cc:59:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:04 2026 by rpki-client