Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa
File: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (raw, json)
Hash identifier: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=
Subject key identifier: 47:B3:DF:D0:4C:DA:5F:EC:85:44:C6:D4:F3:40:3D:93:B7:86:77:FD
Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Certificate serial: 019F2368636444683BD67CC2FC2C544B248B
Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207240
IP address blocks: 171.25.177.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:63:64:44:68:3b:d6:7c:c2:fc:2c:54:4b:24:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47b3dfd04cda5fec8544c6d4f3403d93b78677fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:b9:ed:bb:50:42:46:81:17:dc:37:3b:42:
f2:da:20:30:02:6b:b7:7e:19:34:4d:dd:30:df:b6:
aa:e9:27:81:0e:f9:80:85:8c:cb:be:bb:95:be:fb:
5b:63:77:38:4e:f7:ef:11:22:35:ee:b1:2a:4d:5a:
84:fe:6b:67:04:db:4f:60:0f:d0:78:72:61:7e:d1:
e4:01:b9:c0:6f:89:f7:5d:0d:e1:7f:70:39:c6:56:
9f:70:89:b9:8e:09:91:14:8d:4c:f1:63:c6:2d:dd:
8d:56:13:bc:db:a5:5d:d6:82:2d:0c:b7:6a:e9:93:
92:7c:03:e3:38:c0:97:00:17:07:22:28:85:b2:58:
66:4e:29:cb:e9:92:0c:48:ba:fd:53:ab:9b:e5:91:
da:65:17:a6:2a:52:e3:26:c9:0c:60:5e:bc:4c:7d:
52:27:cc:b6:99:62:f5:cb:db:a4:f1:2b:a1:87:b1:
d4:8f:c5:4a:dd:ac:ca:7d:91:3b:05:3e:3b:9b:d4:
2d:15:1e:e4:bf:54:a1:04:c3:65:40:a1:99:21:f4:
30:e3:4d:80:d4:29:c8:a7:28:5c:c0:0d:a0:7d:e2:
44:3c:4d:92:da:67:5b:2c:4e:7a:c3:bf:af:1c:1f:
78:76:46:68:02:77:36:59:61:73:0b:e2:d1:c1:2e:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:DF:D0:4C:DA:5F:EC:85:44:C6:D4:F3:40:3D:93:B7:86:77:FD
X509v3 Authority Key Identifier:
keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.177.0/24
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
27:18:11:c3:77:30:21:9c:e1:bb:88:d8:00:2a:69:62:03:50:
51:a8:23:53:e9:75:9c:37:2b:39:7d:cf:76:45:32:a1:15:db:
3e:53:8b:f9:94:18:56:4c:8b:b1:ff:7c:1a:8a:9e:4f:9f:d9:
15:35:8e:e8:ac:fc:d2:f5:1d:bb:e8:b0:50:d8:a0:95:e2:c2:
6c:c5:0b:aa:7d:a1:04:ef:b5:70:28:1c:c4:fb:ad:74:aa:2c:
d9:fc:d0:72:18:21:a0:5b:3c:5e:41:c6:73:94:93:1a:3b:5a:
bb:86:60:ef:20:03:7b:df:58:00:ea:b1:c1:81:3c:11:ef:d5:
56:ae:26:f1:01:0b:09:ce:b6:c7:57:17:48:64:97:58:7d:83:
c3:9d:39:38:54:52:23:c8:7b:fe:55:50:cc:64:b5:e3:f9:5d:
38:bf:23:04:42:6b:95:8d:ae:ef:b0:7a:7e:df:5a:ee:34:c0:
b0:31:98:30:bd:b5:32:ca:a0:3b:d5:8f:b8:13:73:47:ae:94:
ee:7b:c1:4f:02:05:fe:d5:64:0a:5d:43:b0:c5:04:b3:8d:d4:
b4:36:9d:d2:c1:ac:5b:cb:f0:2e:fa:40:f9:16:ef:39:70:c4:
4c:8f:03:22:27:b9:19:51:d6:29:34:5a:66:99:db:a1:39:22:
83:63:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:43 2026 by rpki-client