Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7vk2if7LWrA-T7ONGpdY7JFtyPY.roa
File: 7vk2if7LWrA-T7ONGpdY7JFtyPY.roa (raw, json)
Hash identifier: GX117+rJDMw03UN+z8Jr5jWL/3+RqZuG6POr9uqwsco=
Subject key identifier: EE:F9:36:89:FE:CB:5A:B0:3E:4F:B3:8D:1A:97:58:EC:91:6D:C8:F6
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0DA1FD67181C3CE3BE5FFA52D802624AF
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7vk2if7LWrA-T7ONGpdY7JFtyPY.roa
Signing time: Fri 25 Sep 2026 19:51:54 +0000
ROA not before: Fri 25 Sep 2026 19:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 2.56.137.0/24 maxlen: 24
193.38.54.0/24 maxlen: 24
193.38.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:1f:d6:71:81:c3:ce:3b:e5:ff:a5:2d:80:26:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 25 19:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef93689fecb5ab03e4fb38d1a9758ec916dc8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dc:d8:61:a7:75:b4:a0:54:a1:46:e8:5c:82:
a2:f4:c1:35:07:72:c3:6f:9f:26:fa:c7:da:5f:23:
87:f4:78:e8:84:ae:08:01:f9:8f:61:57:e3:4e:0d:
e8:85:db:5d:c5:19:d0:28:05:59:4a:da:1a:c3:fc:
7a:47:7e:7d:c0:87:da:b2:66:5c:2d:e5:c3:d9:37:
22:ce:db:b1:78:b8:d1:e1:1e:8e:82:c2:47:5e:5a:
9f:51:2f:e4:45:13:8b:47:f1:af:da:ae:89:e4:4f:
43:f3:82:e9:4d:2b:f9:cc:5c:4f:1d:fc:b6:9f:65:
67:70:74:66:e3:b8:2e:cf:db:66:da:a4:d7:39:c7:
2f:29:95:d7:1c:ba:dc:86:42:ce:a1:24:85:46:69:
40:57:af:a3:a5:03:7e:0c:00:90:c1:e9:3b:f2:28:
60:83:7e:8c:c7:24:6f:81:17:1e:37:19:9d:e5:2a:
6f:84:d9:d8:38:fb:bd:9b:43:5c:61:04:d1:35:64:
cf:f8:33:fb:58:0b:b9:ec:89:79:a7:24:0d:b2:b6:
02:dc:bc:0d:b3:0a:58:15:a3:6c:9a:d7:0c:a5:e2:
25:b7:94:9d:f5:85:8b:63:a8:97:78:be:9c:7e:a5:
b5:02:7d:ea:44:78:31:ff:a2:17:39:2b:12:52:7c:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:36:89:FE:CB:5A:B0:3E:4F:B3:8D:1A:97:58:EC:91:6D:C8:F6
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7vk2if7LWrA-T7ONGpdY7JFtyPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.137.0/24
193.38.54.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:72:63:cf:38:40:ad:3b:bb:05:6b:29:cf:91:02:49:9f:83:
0b:a2:57:49:dd:e9:3f:d4:85:05:12:e7:d3:b3:ca:9f:e1:22:
cd:31:25:4c:8e:88:89:88:31:82:09:fa:75:c9:89:5c:7f:a8:
31:9c:5c:e4:a3:d5:ea:4f:7c:d0:99:6d:e0:ea:a4:8a:97:a8:
17:6d:8f:82:69:3d:69:43:41:22:46:ab:04:5f:72:46:8a:82:
74:ca:cb:e9:ec:81:41:19:f2:ef:8b:fa:ce:3a:35:77:83:30:
b5:6d:a5:d2:37:11:31:9c:38:32:06:d1:74:36:6e:40:3f:a0:
e9:40:e7:02:0a:2a:91:a7:8f:1a:70:84:15:5d:61:42:83:64:
75:69:df:3d:7e:c0:7a:6d:4b:6c:37:60:3f:c6:46:d5:93:82:
bb:35:0f:f3:d8:44:38:e2:e5:af:7e:3f:c9:9e:82:00:97:66:
2d:cd:47:90:ef:39:c8:65:e3:e8:e0:0d:f1:69:d1:e5:9c:1c:
09:3f:4c:c3:49:da:4a:df:76:46:68:b9:7b:dd:5d:a4:58:ed:
01:a6:a4:fb:62:b3:d2:76:bb:0e:b9:84:48:d5:5c:cf:c4:db:
f2:49:62:bf:ae:3a:4b:1d:d3:37:f7:a6:ed:2f:64:6b:88:7e:
a9:f7:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:13:54 2026 by rpki-client