Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/7RGCArg6zHYj0Iou9jA7oVTdAb4.roa
File: 7RGCArg6zHYj0Iou9jA7oVTdAb4.roa (raw, json)
Hash identifier: mGoXGOaisyNwd8zq8IefJ6jzjpEEa9vteqG8Ej7ZF/4=
Subject key identifier: ED:11:82:02:B8:3A:CC:76:23:D0:8A:2E:F6:30:3B:A1:54:DD:01:BE
Certificate issuer: /CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Certificate serial: 019F2368F3F9738C57EC4EC5A7855CDDB7CA
Authority key identifier: DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/7RGCArg6zHYj0Iou9jA7oVTdAb4.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209835
IP address blocks: 2.59.232.0/22 maxlen: 22
2.59.232.0/24 maxlen: 24
2.59.233.0/24 maxlen: 24
2.59.234.0/24 maxlen: 24
2.59.235.0/24 maxlen: 24
2a09:fc40::/29 maxlen: 48
2a09:fc40:1::/48 maxlen: 48
2a09:fc40:2::/48 maxlen: 48
2a09:fc40:3::/48 maxlen: 48
2a09:fc40:4::/48 maxlen: 48
2a09:fc40:5::/48 maxlen: 48
2a09:fc40:6::/48 maxlen: 48
2a09:fc40:7::/48 maxlen: 48
2a09:fc40:8::/48 maxlen: 48
2a09:fc40:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f3:f9:73:8c:57:ec:4e:c5:a7:85:5c:dd:b7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf7d7deab2c0b9998ee267b5f3b6e5310403e1
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed118202b83acc7623d08a2ef6303ba154dd01be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:ff:f2:58:cf:5f:6f:b2:1f:9f:d7:15:c4:
16:be:23:3e:cd:c1:49:20:49:56:c5:a1:1a:cd:62:
13:45:b9:45:0b:80:0c:f4:09:fb:b9:3e:e1:55:bc:
1f:a5:6c:2b:b4:6c:0d:07:10:8c:6d:e1:95:1c:6f:
78:5f:e4:b8:f8:fc:57:d5:17:8a:4b:b6:b1:05:b1:
43:0b:91:f9:c0:b5:84:da:cd:ef:52:22:e9:7b:1d:
c4:b2:5d:23:c0:62:c6:01:8b:c4:6f:6a:29:d1:37:
35:9d:5c:e4:0a:1f:e7:f0:f3:6d:36:53:c9:58:8e:
13:36:29:35:a7:8d:c7:fe:7d:9d:8e:59:db:5d:11:
ec:57:28:5c:54:7a:d1:e2:e1:47:d8:4f:36:e0:52:
80:11:cd:29:cb:6d:6e:3f:8a:4e:1d:55:cb:12:e4:
cb:00:a6:fd:77:4c:ce:2c:fe:a3:f3:ad:e2:f3:39:
7b:36:3a:c5:ca:00:64:65:c1:78:6d:d9:a7:fc:02:
a5:4f:b1:99:fd:46:38:7e:2b:0c:41:a9:bd:35:5a:
54:32:5d:08:3e:87:69:fd:d0:3a:76:38:93:8b:bc:
aa:4a:a8:8c:d7:07:71:93:fe:54:39:6f:fb:0e:1d:
2e:7c:43:72:6a:d7:b3:9f:0c:a1:f2:f5:b4:3f:17:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:82:02:B8:3A:CC:76:23:D0:8A:2E:F6:30:3B:A1:54:DD:01:BE
X509v3 Authority Key Identifier:
keyid:DA:AF:7D:7D:EA:B2:C0:B9:99:8E:E2:67:B5:F3:B6:E5:31:04:03:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q99feqywLmZjuJntfO25TEEA-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/7RGCArg6zHYj0Iou9jA7oVTdAb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/2q99feqywLmZjuJntfO25TEEA-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.232.0/22
IPv6:
2a09:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
52:67:3b:bf:ba:cf:18:87:04:da:de:05:fb:9d:bc:6d:29:fd:
d7:4c:78:0d:b4:1d:ca:d4:d9:ab:f0:8d:81:79:39:5e:b8:94:
93:25:dd:c5:38:c8:61:96:c2:6c:bc:63:1c:69:8d:1e:9d:8c:
8a:05:8b:55:0e:54:c4:b1:7a:3e:d8:02:3f:29:56:67:13:53:
41:d8:9c:45:7a:c2:4f:66:8b:3f:59:17:7e:22:1b:17:64:d8:
0c:f1:41:66:fa:c7:85:c2:44:72:25:00:c3:e7:c1:5f:ee:4f:
b4:58:76:ed:5b:6c:03:16:90:1b:b5:ad:e3:e5:ce:f3:9b:b9:
e0:95:05:fc:39:f5:22:23:4c:12:6f:f2:68:df:3e:61:7c:28:
0c:ab:7c:1f:cf:10:6a:6c:3e:ba:2f:97:ed:37:a3:5a:ff:73:
4b:a5:f7:5b:0b:99:99:59:03:7d:72:89:b5:94:a3:5a:74:7d:
18:03:cb:8d:56:7f:b1:9b:9c:ee:4f:29:96:83:4d:ec:63:a8:
53:43:2c:57:6e:95:1f:5c:13:61:ae:59:0a:28:63:c5:0b:2c:
00:23:16:62:0b:9b:64:cb:cb:a6:45:4a:21:9b:60:2f:34:35:
42:7f:04:74:0f:e7:24:3e:9d:4f:6b:15:d1:01:87:4e:18:47:
77:f9:20:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaPP5c4xX7E7Fp4Vc3bfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWY3ZDdkZWFiMmMwYjk5OThlZTI2N2I1ZjNiNmU1MzEw
NDAzZTEwHhcNMjYwNzAyMTUxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDExODIwMmI4M2FjYzc2MjNkMDhhMmVmNjMwM2JhMTU0ZGQwMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxL/8ljPX2+yH5/XFcQWviM+zcFJ
IElWxaEazWITRblFC4AM9An7uT7hVbwfpWwrtGwNBxCMbeGVHG94X+S4+PxX1ReK
S7axBbFDC5H5wLWE2s3vUiLpex3Esl0jwGLGAYvEb2op0Tc1nVzkCh/n8PNtNlPJ
WI4TNik1p43H/n2djlnbXRHsVyhcVHrR4uFH2E824FKAEc0py21uP4pOHVXLEuTL
AKb9d0zOLP6j863i8zl7NjrFygBkZcF4bdmn/AKlT7GZ/UY4fisMQam9NVpUMl0I
Podp/dA6djiTi7yqSqiM1wdxk/5UOW/7Dh0ufENyateznwyh8vW0PxfqLwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO0RggK4Osx2I9CKLvYwO6FU3QG+MB8GA1UdIwQY
MBaAFNqvfX3qssC5mY7iZ7XztuUxBAPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgt
YjJjZDRlNTgxMDBlLzEvN1JHQ0FyZzZ6SFlqMElvdTlqQTdvVlRkQWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84N2E4NjMtZGE2Zi00OTgxLTkzNzgtYjJjZDRlNTgxMDBl
LzEvMnE5OWZlcXl3TG1aanVKbnRmTzI1VEVFQS1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCAjvoMA0E
AgACMAcDBQMqCfxAMA0GCSqGSIb3DQEBCwUAA4IBAQBSZzu/us8YhwTa3gX7nbxt
Kf3XTHgNtB3K1Nmr8I2BeTleuJSTJd3FOMhhlsJsvGMcaY0enYyKBYtVDlTEsXo+
2AI/KVZnE1NB2JxFesJPZos/WRd+IhsXZNgM8UFm+seFwkRyJQDD58Ff7k+0WHbt
W2wDFpAbta3j5c7zm7nglQX8OfUiI0wSb/Jo3z5hfCgMq3wfzxBqbD66L5ftN6Na
/3NLpfdbC5mZWQN9com1lKNadH0YA8uNVn+xm5zuTymWg03sY6hTQyxXbpUfXBNh
rlkKKGPFCywAIxZiC5tky8umRUohm2AvNDVCfwR0D+ckPp1PaxXRAYdOGEd3+SBi
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:40 2026 by rpki-client