Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/7vViWFPXkU8yvhtViyoRgIfuKuI.roa
File: 7vViWFPXkU8yvhtViyoRgIfuKuI.roa (raw, json)
Hash identifier: wH1bsI6pp3WlxXyJ2KYfBRv+IZlt15KJMMlpj0kKCCE=
Subject key identifier: EE:F5:62:58:53:D7:91:4F:32:BE:1B:55:8B:2A:11:80:87:EE:2A:E2
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 01A1BFFEB94DEFE26FFE484DDDD97DF76DD6
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/7vViWFPXkU8yvhtViyoRgIfuKuI.roa
Signing time: Mon 09 Nov 2026 11:08:24 +0000
ROA not before: Mon 09 Nov 2026 11:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 145.243.220.0/24 maxlen: 24
145.243.221.0/24 maxlen: 24
2001:678:13e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:fe:b9:4d:ef:e2:6f:fe:48:4d:dd:d9:7d:f7:6d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Nov 9 11:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef5625853d7914f32be1b558b2a118087ee2ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:e1:03:ff:22:e4:e1:fb:e8:22:f2:13:19:
d5:9c:58:1c:a8:f2:53:20:7f:42:20:b5:a4:0a:6d:
47:e5:c9:08:c7:a3:8b:79:6d:23:6d:3f:99:76:b6:
a0:6f:30:2d:35:8f:ab:3e:a2:d2:c6:ad:8a:d9:4d:
ac:9b:5c:1e:55:6d:a9:5c:43:b5:6e:c5:84:4e:b1:
41:11:3f:bb:aa:0e:6c:1c:33:ea:9f:ab:9d:2f:07:
5c:6c:4b:98:d4:f1:04:f0:92:de:63:b5:fe:a3:aa:
24:b8:c0:30:d0:48:03:69:5c:60:b2:0d:b2:a0:47:
ac:00:ac:0f:5c:8b:9c:78:32:bd:c5:76:2d:e4:69:
0b:c4:0c:b1:78:e0:9f:30:81:06:d3:2c:d8:ec:e0:
d0:f0:f4:90:d0:29:35:8b:57:36:ab:08:00:74:81:
6f:d9:6e:80:f8:32:37:92:7a:d8:fb:02:d6:67:74:
1e:ba:af:8e:bd:ae:fe:c0:a1:17:e8:af:6a:cb:a3:
4b:95:1c:8a:4f:e0:df:98:47:d8:97:35:35:d6:fd:
c6:c8:5e:20:8f:36:4e:99:e1:ec:93:70:20:85:11:
18:f2:14:b0:22:ba:1f:3c:2f:f7:bb:f3:e0:8a:42:
a6:95:75:e9:b7:e1:e9:e2:42:4d:8b:85:b7:9b:c0:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:62:58:53:D7:91:4F:32:BE:1B:55:8B:2A:11:80:87:EE:2A:E2
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/7vViWFPXkU8yvhtViyoRgIfuKuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.243.220.0/23
IPv6:
2001:678:13e4::/48
Signature Algorithm: sha256WithRSAEncryption
22:28:71:68:1e:ce:4d:70:b5:f6:c2:0c:d7:70:64:88:d4:89:
4c:50:81:fd:aa:f6:ca:66:bd:ba:bb:d3:1f:5d:12:97:b7:a1:
61:2f:9f:4c:72:d0:0c:5b:0d:cc:e6:11:6c:19:a2:da:8f:61:
fc:92:fd:24:f3:bf:c7:15:5c:7e:46:e2:d5:42:44:25:5c:0a:
a2:e3:73:7d:9e:39:cc:45:c2:1a:26:ca:ec:23:25:4d:07:b7:
d9:4d:13:d1:4e:a0:49:bf:82:e9:fc:cb:3b:31:5a:d1:60:96:
9b:80:16:d4:60:35:fa:a5:69:6b:43:fa:e0:e7:97:58:6c:11:
ac:d1:fc:fc:8e:61:a7:10:99:23:67:95:b1:2e:1d:b7:e1:cc:
fb:01:e9:54:58:83:91:20:ef:8a:25:92:c6:d0:d8:dc:f3:2b:
cb:9d:aa:52:8c:85:f2:9c:8e:1f:8c:c4:ca:69:90:4e:40:fe:
12:68:74:4d:7e:e3:28:a8:8b:4d:f5:78:0f:b8:75:a0:3a:c6:
e4:c3:4e:e0:a4:c6:83:20:2e:0d:57:2e:88:b2:98:07:d1:ad:
fc:62:c9:53:42:4a:0d:5e:f5:ad:20:4d:48:86:dd:a5:eb:30:
3e:70:84:1f:97:b7:d1:c7:6a:26:1b:c4:f5:a8:9a:05:b0:57:
58:8c:bd:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaG//rlN7+Jv/khN3dl9923WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3
Mjg3YzcwHhcNMjYxMTA5MTEwODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWY1NjI1ODUzZDc5MTRmMzJiZTFiNTU4YjJhMTE4MDg3ZWUyYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIPhA/8i5OH76CLyExnVnFgcqPJT
IH9CILWkCm1H5ckIx6OLeW0jbT+ZdragbzAtNY+rPqLSxq2K2U2sm1weVW2pXEO1
bsWETrFBET+7qg5sHDPqn6udLwdcbEuY1PEE8JLeY7X+o6okuMAw0EgDaVxgsg2y
oEesAKwPXIuceDK9xXYt5GkLxAyxeOCfMIEG0yzY7ODQ8PSQ0Ck1i1c2qwgAdIFv
2W6A+DI3knrY+wLWZ3Qeuq+Ova7+wKEX6K9qy6NLlRyKT+DfmEfYlzU11v3GyF4g
jzZOmeHsk3AghREY8hSwIrofPC/3u/PgikKmlXXpt+Hp4kJNi4W3m8Bk7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO71YlhT15FPMr4bVYsqEYCH7iriMB8GA1UdIwQY
MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt
MzE5OTlmM2FkZDM2LzEvN3ZWaVdGUFhrVTh5dmh0Vml5b1JnSWZ1S3VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2
LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBkfPcMA8E
AgACMAkDBwAgAQZ4E+QwDQYJKoZIhvcNAQELBQADggEBACIocWgezk1wtfbCDNdw
ZIjUiUxQgf2q9spmvbq70x9dEpe3oWEvn0xy0AxbDczmEWwZotqPYfyS/STzv8cV
XH5G4tVCRCVcCqLjc32eOcxFwhomyuwjJU0Ht9lNE9FOoEm/gun8yzsxWtFglpuA
FtRgNfqlaWtD+uDnl1hsEazR/PyOYacQmSNnlbEuHbfhzPsB6VRYg5Eg74olksbQ
2NzzK8udqlKMhfKcjh+MxMppkE5A/hJodE1+4yioi031eA+4daA6xuTDTuCkxoMg
Lg1XLoiymAfRrfxiyVNCSg1e9a0gTUiG3aXrMD5whB+Xt9HHaiYbxPWomgWwV1iM
vfw=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:54 2026 by rpki-client