Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/7Yz3ruAw4kUL5OGdcvqgX7DjQLg.roa
File: 7Yz3ruAw4kUL5OGdcvqgX7DjQLg.roa (raw, json)
Hash identifier: BMrCMeTI47GMj+Fyfiw7DgkMoB9AVwLEitxZnfi4FEM=
Subject key identifier: ED:8C:F7:AE:E0:30:E2:45:0B:E4:E1:9D:72:FA:A0:5F:B0:E3:40:B8
Certificate issuer: /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial: 019F236832C19EEE89FB764666E6F394E2A7
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/7Yz3ruAw4kUL5OGdcvqgX7DjQLg.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42244
IP address blocks: 80.77.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:c1:9e:ee:89:fb:76:46:66:e6:f3:94:e2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed8cf7aee030e2450be4e19d72faa05fb0e340b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:b8:11:f0:d4:f2:c8:50:58:17:c3:72:85:
d0:33:ff:b9:1f:75:f4:91:c6:aa:c3:fd:c4:a8:b7:
94:e6:c9:f1:62:cd:4e:e6:41:9b:82:c5:5f:e2:9f:
1a:4c:dc:88:c6:6c:e6:d1:15:b8:b7:3a:8f:f7:bb:
de:c4:33:a4:bc:f9:08:70:1f:2d:cf:ee:97:22:ac:
15:1d:e5:c8:55:1d:e9:e2:81:51:15:49:a3:b3:05:
78:a6:4c:b8:59:c3:16:97:5b:54:e7:be:92:b0:b2:
c1:1e:f4:ed:6a:17:98:74:77:11:7e:ef:32:90:be:
86:69:1f:eb:90:fa:2f:f0:6a:98:87:cd:d5:dc:34:
3e:a9:ec:30:49:21:c5:5c:2a:7a:3f:13:b7:22:c2:
87:bc:e6:62:7a:45:a7:91:0b:68:81:8c:a7:2c:19:
cd:a9:49:86:50:cd:86:12:d3:de:e0:30:72:6d:30:
59:6d:ce:8a:90:51:71:06:81:ce:49:2c:66:6b:3c:
0c:49:0f:e3:d7:bf:85:2f:08:af:8e:89:b2:b2:9a:
e5:eb:4b:f7:5b:68:f2:2c:d9:e7:de:b5:6a:1a:c8:
85:9f:9a:39:16:5f:99:18:d2:b5:ce:aa:d6:ad:44:
2e:b0:10:5f:3c:7a:a9:11:f5:35:7e:b0:49:2a:a0:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:F7:AE:E0:30:E2:45:0B:E4:E1:9D:72:FA:A0:5F:B0:E3:40:B8
X509v3 Authority Key Identifier:
keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/7Yz3ruAw4kUL5OGdcvqgX7DjQLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.168.0/24
Signature Algorithm: sha256WithRSAEncryption
01:85:42:88:52:64:86:d1:49:fd:93:6b:b0:c1:5e:1b:15:39:
29:13:bb:b5:fc:3d:a3:3e:88:86:a0:42:61:13:1f:d9:56:74:
bf:64:8c:99:55:2c:ef:b9:8b:d4:ab:65:86:59:2e:4c:f0:00:
59:b9:0e:a9:c7:36:e2:72:17:57:ae:8f:2f:5f:ca:fd:d9:40:
bf:77:da:bd:22:e0:7a:a9:ed:b6:7b:e8:1a:8e:a3:be:19:33:
c4:0a:ee:70:c1:02:38:05:d2:e9:cb:41:84:dd:2c:1c:c3:9a:
40:6c:f4:1f:c1:92:43:50:54:c1:c8:7e:be:05:7a:17:24:86:
8c:ad:83:b6:b6:16:0c:72:d6:81:8c:dc:24:bf:48:03:13:89:
26:6c:a7:a0:48:4a:69:84:6f:a8:fd:ab:56:96:1d:f8:bc:a9:
e5:44:79:10:60:b9:05:bc:98:a4:11:7a:e8:ff:be:51:84:2f:
03:fa:87:ab:1b:8c:24:05:06:ce:4e:3e:7a:3c:b8:d9:ca:cc:
76:ac:5d:4f:33:81:99:25:9b:64:85:42:69:81:fd:ba:0a:75:
19:ed:d8:d2:be:12:e5:f0:21:a1:4e:f3:04:4c:e6:73:ff:06:
d2:7a:a5:57:b8:e4:05:d3:04:16:fb:df:b4:2b:33:50:26:12:
b4:16:12:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:04:15 2026 by rpki-client