Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7LvlanqaEjexBEbgpUR1ZNfWgYk.roa
File: 7LvlanqaEjexBEbgpUR1ZNfWgYk.roa (raw, json)
Hash identifier: YWYJpgptC7A6n+xfqNQUD+4RRzbHi3vQr6Yj/hztLsQ=
Subject key identifier: EC:BB:E5:6A:7A:9A:12:37:B1:04:46:E0:A5:44:75:64:D7:D6:81:89
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019D1F5E2DD3A5FC95750677990F76FBB0C0
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7LvlanqaEjexBEbgpUR1ZNfWgYk.roa
Signing time: Tue 24 Mar 2026 10:22:38 +0000
ROA not before: Tue 24 Mar 2026 10:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 93.88.154.0/24 maxlen: 24
95.155.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:5e:2d:d3:a5:fc:95:75:06:77:99:0f:76:fb:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 24 10:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecbbe56a7a9a1237b10446e0a5447564d7d68189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:22:19:70:49:5b:40:c4:c0:2c:01:68:08:86:
2d:25:68:08:f0:7b:10:94:70:f1:98:c2:93:86:cd:
ac:55:b1:59:b1:60:bb:c9:c4:cc:a8:6a:57:87:bf:
f1:0b:4f:73:57:5b:64:d9:eb:99:0f:3f:ae:d3:88:
0b:7f:4d:00:f0:00:a6:cf:92:33:7b:4a:c9:e1:72:
d5:e7:3e:5b:91:83:93:ca:53:86:9e:5c:6c:a7:5b:
dc:b1:db:10:ab:d0:3d:e1:48:91:e8:49:a1:f8:55:
32:d4:ec:95:7c:f0:3f:4c:9a:34:ab:fe:00:dd:48:
11:03:9c:ee:e3:c8:2c:a3:88:62:a8:48:c1:48:b7:
fd:77:4a:90:b7:34:ad:4f:67:e1:b4:df:35:96:5f:
02:13:d4:ff:e3:32:53:4d:a6:1b:54:bb:26:d1:ba:
c6:b1:cb:6a:34:7d:ab:ff:6e:ba:40:5b:b7:26:6c:
a8:63:31:59:83:bb:7a:2b:56:cf:0c:52:ad:42:80:
24:61:d3:1d:e5:0f:05:0e:da:ab:ee:63:96:4c:19:
09:bc:52:fe:c3:61:4a:3d:66:60:61:86:98:78:b8:
24:cf:01:93:e0:3e:a8:d4:60:72:8b:87:09:4d:ad:
ea:44:1f:54:76:15:97:6e:29:fe:58:aa:43:30:d0:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BB:E5:6A:7A:9A:12:37:B1:04:46:E0:A5:44:75:64:D7:D6:81:89
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7LvlanqaEjexBEbgpUR1ZNfWgYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.154.0/24
95.155.130.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3b:7a:0c:db:9d:9f:5d:a7:c7:be:48:70:99:ea:c4:cf:1b:
41:59:1d:35:a4:8d:ff:02:23:de:a0:a9:5d:c6:49:3b:1c:ac:
c1:12:f4:4a:1a:2a:71:ac:2b:7b:4f:2a:a8:73:9c:70:45:3a:
1d:60:a4:11:e5:27:9b:66:40:10:a3:68:1e:a7:36:9d:51:30:
92:ee:e6:8e:ab:7c:ce:d3:5e:af:c4:77:d7:ce:ae:73:a7:b0:
6f:67:8a:17:e6:6a:76:27:bc:8c:9c:03:4a:91:49:80:80:74:
14:c4:04:64:20:2b:a2:55:d1:3e:bc:2c:d9:6f:74:93:f4:ea:
02:97:e9:e2:3e:3c:a6:9a:d2:93:fb:cd:0f:f8:ea:d7:48:5a:
5c:e2:46:f1:75:f9:8c:84:55:08:87:ab:05:03:fa:d3:29:43:
66:0f:76:1f:9b:bf:76:27:de:c2:28:e0:be:78:c6:df:4d:4f:
2c:72:8b:33:2f:bb:1a:0c:e1:ef:3b:9d:ce:1d:6a:03:81:62:
9e:fd:e4:21:90:77:51:63:2d:54:66:5d:3d:b7:a9:f4:e3:63:
5b:df:4a:e9:aa:a3:2e:70:84:e5:f4:45:33:3b:bd:6c:79:ae:
29:c5:74:73:2e:c5:d8:6f:e8:90:e8:09:e1:b3:06:d2:73:b8:
f1:96:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:20:33 2026 by rpki-client