Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/7HCplv6dpZEmwhyc6xbV3uR73P0.roa
File: 7HCplv6dpZEmwhyc6xbV3uR73P0.roa (raw, json)
Hash identifier: etq4LdZndMdiVYFTG75Fm9U+QKK475GkThzxWa4PwJs=
Subject key identifier: EC:70:A9:96:FE:9D:A5:91:26:C2:1C:9C:EB:16:D5:DE:E4:7B:DC:FD
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D0556D4B17370FAB97BCA516CD97C7E3A
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/7HCplv6dpZEmwhyc6xbV3uR73P0.roa
Signing time: Thu 19 Mar 2026 09:04:29 +0000
ROA not before: Thu 19 Mar 2026 09:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9886
IP address blocks: 216.236.8.0/21 maxlen: 24
216.236.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:56:d4:b1:73:70:fa:b9:7b:ca:51:6c:d9:7c:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 19 09:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec70a996fe9da59126c21c9ceb16d5dee47bdcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:56:fd:50:d2:5a:9a:9d:ff:7b:58:8f:7b:
5c:51:84:84:52:ea:95:1a:4e:5a:7a:d6:60:50:7a:
a3:85:76:13:60:bc:4c:d8:c2:27:41:d2:a4:63:98:
0a:fb:bb:4e:44:94:46:40:4d:21:30:fc:e4:a8:e6:
e7:16:38:b0:7b:59:23:c6:9f:15:1a:1a:c1:d3:43:
44:76:5a:b0:51:d0:fe:f1:bd:53:47:40:5f:08:01:
87:74:bf:47:25:1a:35:97:6e:12:5f:1a:a8:ca:4c:
23:e4:f2:bb:70:08:97:c3:95:7b:99:9c:8e:89:34:
3c:c2:89:54:6c:09:f8:ac:f0:18:fb:be:c8:62:3d:
de:e5:76:28:74:3b:42:5d:ec:23:0b:5b:40:b6:d0:
f3:03:94:d4:33:51:4a:84:ff:53:60:fb:7d:ad:70:
2b:55:c7:72:fc:ed:14:eb:73:c4:73:42:dd:8b:48:
27:77:df:eb:40:91:9e:f6:24:64:34:5d:60:ec:de:
a2:64:6a:e4:72:76:18:13:b9:04:e6:2e:c9:b8:3a:
6b:54:d1:b7:29:66:39:3c:bc:5c:e2:46:7a:d6:59:
b4:36:47:59:7c:95:e2:4d:80:95:32:0a:d9:ea:13:
74:64:10:4e:81:8a:4d:99:0f:7e:fc:dd:7d:63:29:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:A9:96:FE:9D:A5:91:26:C2:1C:9C:EB:16:D5:DE:E4:7B:DC:FD
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/7HCplv6dpZEmwhyc6xbV3uR73P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.8.0-216.236.23.255
Signature Algorithm: sha256WithRSAEncryption
25:7e:03:b3:ca:bd:5a:33:6e:aa:f7:66:5a:75:13:2d:e3:5b:
55:b9:1d:01:cc:05:36:ca:4a:e9:09:8d:b1:d9:0c:30:c0:9a:
2f:c4:d0:7f:d7:0a:38:79:ad:49:44:48:45:d8:d8:a2:51:73:
8d:25:54:24:4a:42:cb:c3:1c:ec:f6:fe:76:f1:eb:51:a5:54:
32:01:4d:c4:5b:48:a2:9c:f8:88:7d:9a:37:df:fd:d0:37:c8:
95:d9:f3:35:c0:c0:cf:df:4e:2e:3c:e2:4d:15:eb:45:14:b6:
5c:e6:ee:d5:5f:ee:f2:c8:84:70:7e:ef:36:ed:38:2a:09:76:
3e:86:1b:c7:ff:d0:e4:3b:a1:28:57:21:1b:1f:54:93:9b:1c:
89:5c:a0:be:ab:9a:4f:b7:c5:3d:90:37:8d:02:47:48:b1:21:
34:dd:fa:75:e0:e4:b0:91:17:84:dd:46:bd:ce:fe:19:55:05:
2e:e1:26:db:53:11:3a:44:7c:54:7a:85:4c:a2:48:1a:81:d4:
d9:d8:b3:91:03:27:f1:14:73:9e:1c:75:e8:46:f7:a7:fe:5d:
e0:1d:d9:4a:aa:c2:ba:5a:64:4e:04:0d:f8:a1:50:c7:f8:f9:
e0:b0:bb:7a:61:aa:2c:d3:d7:58:9e:80:02:85:f9:ca:24:ad:
d4:da:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:02:04 2026 by rpki-client