Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/7WC5dAQzhGG7OLBjAxZ-y4prohM.roa
File: 7WC5dAQzhGG7OLBjAxZ-y4prohM.roa (raw, json)
Hash identifier: 8NUw7v2A9xPb3EyEVmqnKX2Ck2zVVgu6MHzszWafSK4=
Subject key identifier: ED:60:B9:74:04:33:84:61:BB:38:B0:63:03:16:7E:CB:8A:6B:A2:13
Certificate issuer: /CN=ef9f899821b5af5ca6448d74161c17c3540691c7
Certificate serial: 019F2368812657EFF96628596D5ACF8F39CB
Authority key identifier: EF:9F:89:98:21:B5:AF:5C:A6:44:8D:74:16:1C:17:C3:54:06:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/7WC5dAQzhGG7OLBjAxZ-y4prohM.roa
Signing time: Thu 02 Jul 2026 15:17:59 +0000
ROA not before: Thu 02 Jul 2026 15:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29436
IP address blocks: 192.162.80.0/22 maxlen: 22
192.166.112.0/23 maxlen: 23
193.238.36.0/22 maxlen: 22
195.149.108.0/24 maxlen: 24
2001:67c:2d9c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:81:26:57:ef:f9:66:28:59:6d:5a:cf:8f:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f899821b5af5ca6448d74161c17c3540691c7
Validity
Not Before: Jul 2 15:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed60b97404338461bb38b06303167ecb8a6ba213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:74:37:aa:d2:64:98:77:f6:bf:ac:2e:67:
e3:f4:4d:22:88:f2:35:d7:c9:39:00:b1:36:ee:f1:
ab:90:da:7e:8f:9c:c7:e6:20:62:c4:9f:c2:25:ce:
7d:b7:62:85:13:c7:6d:ac:7f:b6:21:0b:49:6e:60:
6a:1e:83:d7:cb:52:10:c4:9b:0b:ab:b9:ae:45:95:
2d:5b:ba:93:92:d5:1e:82:a5:f8:26:1e:43:96:db:
6b:26:f6:2f:12:53:38:ca:27:e7:2c:3d:9e:17:3b:
de:e1:1b:b4:5c:6f:d3:29:8e:73:e9:83:5c:1f:73:
72:e7:ec:6f:e3:9e:21:15:59:2e:cc:03:2a:de:1d:
55:8c:97:4d:a1:5b:e2:d7:fc:9a:d5:9d:54:ff:03:
23:47:12:07:0c:18:c2:c4:d8:25:3d:46:76:83:e1:
32:77:53:a8:4d:95:fd:b1:24:9d:37:85:5a:f1:ce:
a7:d4:bb:0c:a0:30:f8:69:43:a6:2f:0f:2b:03:9e:
ce:4a:72:5f:c9:59:a0:65:b3:10:45:72:31:8b:20:
eb:a6:62:32:2f:0b:f9:d6:b1:79:c9:8a:87:96:2a:
d7:f3:be:2c:54:b2:39:db:f3:da:d7:e3:4f:2b:7f:
f3:ed:8a:64:6e:fe:da:ea:be:5d:31:97:94:f4:91:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:60:B9:74:04:33:84:61:BB:38:B0:63:03:16:7E:CB:8A:6B:A2:13
X509v3 Authority Key Identifier:
keyid:EF:9F:89:98:21:B5:AF:5C:A6:44:8D:74:16:1C:17:C3:54:06:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75-JmCG1r1ymRI10FhwXw1QGkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/7WC5dAQzhGG7OLBjAxZ-y4prohM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/75-JmCG1r1ymRI10FhwXw1QGkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.80.0/22
192.166.112.0/23
193.238.36.0/22
195.149.108.0/24
IPv6:
2001:67c:2d9c::/48
Signature Algorithm: sha256WithRSAEncryption
3c:5b:1f:b7:36:a3:31:ee:40:46:cc:91:23:11:60:15:ee:28:
52:28:4e:13:14:86:d1:06:97:24:49:c9:cc:c3:41:a8:69:ef:
c6:4d:de:c3:70:99:38:f6:5b:dd:f3:67:e1:5f:e2:c9:b3:6d:
dd:0c:eb:99:21:c4:c5:99:6f:83:83:2b:42:5e:20:19:2a:65:
ae:d8:9c:0a:54:d1:44:c0:b5:0d:6f:35:de:1d:ad:ee:bb:57:
df:fb:07:ff:67:96:ec:9d:d5:35:96:69:f0:1d:ee:1c:0d:db:
de:72:b0:e0:91:69:06:94:48:2f:d9:b5:32:69:97:84:be:d3:
85:2b:ee:59:f9:f4:b2:20:d7:8a:99:17:3e:f0:a2:1f:d8:60:
25:31:6b:ec:a4:83:ce:06:97:59:50:16:ea:87:7d:d0:5f:2d:
2c:12:6e:52:25:fb:60:f5:7d:a8:cd:a9:07:c2:d0:21:ca:7c:
b7:a9:6e:10:07:ea:ba:ea:05:56:57:2d:d8:0c:fb:23:6b:9e:
2d:c6:e6:01:6f:4c:c4:31:a0:aa:6d:e0:ae:ac:c0:11:7b:57:
9b:0a:0c:c8:ec:32:a0:05:76:ad:59:fe:4a:c5:b8:81:eb:1e:
4f:84:2b:b4:1b:3d:5b:22:96:5b:ce:61:6c:9c:de:df:7d:c9:
bf:4e:83:19
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZ8jaIEmV+/5ZihZbVrPjznLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWY4OTk4MjFiNWFmNWNhNjQ0OGQ3NDE2MWMxN2MzNTQw
NjkxYzcwHhcNMjYwNzAyMTUxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDYwYjk3NDA0MzM4NDYxYmIzOGIwNjMwMzE2N2VjYjhhNmJhMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4l0N6rSZJh39r+sLmfj9E0iiPI1
18k5ALE27vGrkNp+j5zH5iBixJ/CJc59t2KFE8dtrH+2IQtJbmBqHoPXy1IQxJsL
q7muRZUtW7qTktUegqX4Jh5DlttrJvYvElM4yifnLD2eFzve4Ru0XG/TKY5z6YNc
H3Ny5+xv454hFVkuzAMq3h1VjJdNoVvi1/ya1Z1U/wMjRxIHDBjCxNglPUZ2g+Ey
d1OoTZX9sSSdN4Va8c6n1LsMoDD4aUOmLw8rA57OSnJfyVmgZbMQRXIxiyDrpmIy
Lwv51rF5yYqHlirX874sVLI52/Pa1+NPK3/z7Ypkbv7a6r5dMZeU9JFRMwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFO1guXQEM4RhuziwYwMWfsuKa6ITMB8GA1UdIwQY
MBaAFO+fiZghta9cpkSNdBYcF8NUBpHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzUtSm1DRzFyMXltUkkxMEZod1h3MVFHa2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hNmZjYzktZDI1MS00MmRjLWFkMDIt
OTY3YzIyODVlYTYyLzEvN1dDNWRBUXpoR0c3T0xCakF4Wi15NHByb2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hNmZjYzktZDI1MS00MmRjLWFkMDItOTY3YzIyODVlYTYy
LzEvNzUtSm1DRzFyMXltUkkxMEZod1h3MVFHa2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCwKJQAwQB
wKZwAwQCwe4kAwQAw5VsMA8EAgACMAkDBwAgAQZ8LZwwDQYJKoZIhvcNAQELBQAD
ggEBADxbH7c2ozHuQEbMkSMRYBXuKFIoThMUhtEGlyRJyczDQahp78ZN3sNwmTj2
W93zZ+Ff4smzbd0M65khxMWZb4ODK0JeIBkqZa7YnApU0UTAtQ1vNd4dre67V9/7
B/9nluyd1TWWafAd7hwN295ysOCRaQaUSC/ZtTJpl4S+04Ur7ln59LIg14qZFz7w
oh/YYCUxa+ykg84Gl1lQFuqHfdBfLSwSblIl+2D1fajNqQfC0CHKfLepbhAH6rrq
BVZXLdgM+yNrni3G5gFvTMQxoKpt4K6swBF7V5sKDMjsMqAFdq1Z/krFuIHrHk+E
K7QbPVsillvOYWyc3t99yb9Ogxk=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:56 2026 by rpki-client