Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7VeDsfeCcZmBVyy7EKePB8qVME.roa
File: _7VeDsfeCcZmBVyy7EKePB8qVME.roa (raw, json)
Hash identifier: o8/sygffkS2QIbmXGuaBoiOLBZ18tViK9uNigNZTSCY=
Subject key identifier: FF:B5:5E:0E:C7:DE:09:C6:66:05:5C:B2:EC:42:9E:3C:1F:2A:54:C1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D1B4650814292DF6F89D3CF554D712EAF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7VeDsfeCcZmBVyy7EKePB8qVME.roa
Signing time: Mon 23 Mar 2026 15:18:06 +0000
ROA not before: Mon 23 Mar 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207957
IP address blocks: 64.188.89.0/24 maxlen: 24
64.188.90.0/24 maxlen: 24
64.188.98.0/24 maxlen: 24
64.188.127.0/24 maxlen: 24
77.239.107.0/24 maxlen: 24
144.31.15.0/24 maxlen: 24
144.31.49.0/24 maxlen: 24
144.31.50.0/24 maxlen: 24
144.31.51.0/24 maxlen: 24
144.31.57.0/24 maxlen: 24
144.31.82.0/24 maxlen: 24
144.31.83.0/24 maxlen: 24
144.31.93.0/24 maxlen: 24
144.31.103.0/24 maxlen: 24
144.31.107.0/24 maxlen: 24
144.31.108.0/24 maxlen: 24
144.31.109.0/24 maxlen: 24
144.31.213.0/24 maxlen: 24
144.31.214.0/24 maxlen: 24
144.31.216.0/24 maxlen: 24
144.31.217.0/24 maxlen: 24
144.31.218.0/24 maxlen: 24
144.31.219.0/24 maxlen: 24
144.31.239.0/24 maxlen: 24
144.31.240.0/24 maxlen: 24
144.31.241.0/24 maxlen: 24
144.31.242.0/24 maxlen: 24
144.31.243.0/24 maxlen: 24
144.31.249.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
185.170.153.0/24 maxlen: 24
185.170.154.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:46:50:81:42:92:df:6f:89:d3:cf:55:4d:71:2e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 23 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffb55e0ec7de09c666055cb2ec429e3c1f2a54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:4b:40:1a:cc:cf:fe:f4:5e:e3:03:54:87:
d4:e9:a0:61:f6:49:21:02:fb:d5:cb:66:b3:e1:a4:
f0:c3:48:9b:6c:87:c9:bd:7f:27:18:81:a3:79:ce:
a9:ce:81:6b:73:2d:85:32:8a:c5:5a:9d:f6:a2:41:
e4:bf:03:21:5d:55:43:a8:3d:dc:02:a7:d0:61:38:
da:86:89:65:2b:4f:02:61:6c:da:cd:33:48:49:63:
31:60:87:6b:c1:03:89:e7:4c:30:9f:80:a6:47:38:
a9:20:55:45:7b:ac:05:ff:a4:2e:5d:02:1d:38:03:
7e:86:a7:61:39:58:46:d9:74:33:ac:7e:90:c1:29:
94:56:fc:1e:12:60:8a:21:88:82:b7:7f:94:4d:d2:
bd:d1:5a:95:06:1d:5e:95:aa:cd:1e:1d:8c:a9:8e:
37:07:a1:11:dd:d6:a1:f9:0b:d1:9f:36:1a:6e:80:
40:ab:40:80:39:98:77:97:77:a5:bb:00:55:73:22:
e7:1c:33:58:a5:80:4c:75:eb:71:5c:be:a4:81:22:
81:74:12:c5:85:6b:f2:1b:3a:36:2b:e6:65:94:54:
c3:2c:59:69:3f:b5:99:a2:d5:59:cb:93:cf:3a:9f:
5f:29:7d:f5:31:c6:d1:4a:b4:74:66:44:7f:ce:cb:
93:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B5:5E:0E:C7:DE:09:C6:66:05:5C:B2:EC:42:9E:3C:1F:2A:54:C1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_7VeDsfeCcZmBVyy7EKePB8qVME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.89.0-64.188.90.255
64.188.98.0/24
64.188.127.0/24
77.239.107.0/24
144.31.15.0/24
144.31.49.0-144.31.51.255
144.31.57.0/24
144.31.82.0/23
144.31.93.0/24
144.31.103.0/24
144.31.107.0-144.31.109.255
144.31.213.0-144.31.214.255
144.31.216.0/22
144.31.239.0-144.31.243.255
144.31.249.0/24
150.241.72.0/22
150.241.82.0/23
185.170.153.0-185.170.154.255
193.23.195.0/24
193.23.200.0/24
193.23.202.0/24
Signature Algorithm: sha256WithRSAEncryption
45:da:28:ca:69:c1:1a:df:2e:bc:0a:96:b9:0a:70:21:35:e3:
43:8d:e3:f6:32:d3:c6:d1:73:f7:32:39:54:b8:d5:9b:63:58:
ba:b7:fd:2f:49:65:cf:5a:f6:a5:33:56:07:b5:3d:3e:c9:35:
11:b4:81:bc:e1:03:ed:fa:82:69:d7:3a:f1:68:de:2b:d0:6a:
3d:7b:c3:ca:33:eb:c8:f3:1e:ea:8d:bc:5a:17:5d:e7:f0:22:
b7:f3:c9:1b:a2:40:7f:34:5a:0a:f9:7f:1d:b8:a1:d3:f0:aa:
81:2b:46:08:9b:f3:ff:43:bf:ad:93:6a:c1:4d:ac:8e:d2:e8:
de:95:e5:43:45:d7:77:d3:8d:b4:e6:9a:d0:93:52:e7:72:a3:
c7:df:76:de:00:e6:07:a5:a6:e2:6a:82:cc:d6:29:35:61:5f:
b4:dc:6f:93:e7:e9:d6:82:8e:77:be:5b:f4:07:76:22:39:f6:
80:33:a0:41:a3:8e:d2:18:64:ad:6d:07:e5:8d:8d:14:ce:35:
a7:07:cc:9c:1a:7b:11:77:d2:c0:b1:5a:27:69:5f:5d:75:c8:
12:66:54:81:ad:df:38:d3:ed:47:5a:4d:16:c8:64:e8:6d:c5:
27:0c:d0:a5:3b:46:1c:ca:42:33:92:98:01:f9:9c:50:6c:12:
41:09:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:27 2026 by rpki-client