Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/7KVZU4-HF-afdqG45DO8bphs_b0.roa
File: 7KVZU4-HF-afdqG45DO8bphs_b0.roa (raw, json)
Hash identifier: /pVPv4rhoafLAO7wB0Dl1u6XY55uheOcI31Yt9KHyuw=
Subject key identifier: EC:A5:59:53:8F:87:17:E6:9F:76:A1:B8:E4:33:BC:6E:98:6C:FD:BD
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019F69ABADDD74BC130F5367F49BA3CFF550
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/7KVZU4-HF-afdqG45DO8bphs_b0.roa
Signing time: Thu 16 Jul 2026 06:44:46 +0000
ROA not before: Thu 16 Jul 2026 06:44:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202660
IP address blocks: 87.192.252.0/24 maxlen: 24
87.192.253.0/24 maxlen: 24
89.126.208.0/22 maxlen: 22
89.126.220.0/23 maxlen: 23
89.126.222.0/23 maxlen: 23
92.63.206.0/24 maxlen: 24
92.63.207.0/24 maxlen: 24
109.94.172.0/24 maxlen: 24
185.100.52.0/22 maxlen: 22
198.163.206.0/24 maxlen: 24
198.163.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:ab:ad:dd:74:bc:13:0f:53:67:f4:9b:a3:cf:f5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jul 16 06:44:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eca559538f8717e69f76a1b8e433bc6e986cfdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:59:b1:8e:f5:b5:52:2e:e3:f2:71:a9:78:
9e:4a:da:80:f6:e1:8b:92:e6:af:11:b9:23:82:bc:
52:53:3d:c1:16:ea:85:87:32:f1:35:05:3e:70:73:
a1:68:b2:e9:25:18:8a:b0:bd:d9:36:a1:66:fe:f5:
0f:dd:6a:d5:5c:d6:6b:12:cc:87:8d:2d:50:07:c4:
79:ed:1f:39:3a:c7:b6:1f:d1:3a:69:07:b6:03:c0:
45:28:d2:87:68:34:c3:a0:00:0b:16:7d:b6:48:13:
76:44:06:72:29:2f:1b:50:78:f3:71:aa:02:49:f2:
d8:30:06:13:76:12:73:3d:b5:5d:f9:f5:9b:4e:d0:
83:68:13:2e:7f:85:ae:09:60:87:75:5e:05:92:aa:
85:8b:ed:d2:15:01:3d:07:a6:8d:00:4f:d0:97:a9:
15:13:1b:e9:42:26:c1:82:4d:71:fc:25:41:24:20:
8f:ee:a2:c4:9a:ca:39:ab:82:66:11:be:6e:e0:91:
90:50:c2:87:85:cd:e3:d2:12:45:a8:b3:6b:61:85:
5c:24:f1:35:0f:dc:96:24:6d:5e:dc:9e:f8:61:6e:
a8:ab:7b:31:38:2e:fb:e6:d8:b3:9d:c7:26:b6:64:
57:68:5d:72:77:40:6d:11:ec:79:66:af:10:64:b9:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A5:59:53:8F:87:17:E6:9F:76:A1:B8:E4:33:BC:6E:98:6C:FD:BD
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/7KVZU4-HF-afdqG45DO8bphs_b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.252.0/23
89.126.208.0/22
89.126.220.0/22
92.63.206.0/23
109.94.172.0/24
185.100.52.0/22
198.163.206.0/23
Signature Algorithm: sha256WithRSAEncryption
68:23:bf:b0:48:50:80:f3:93:ff:de:4c:a6:a8:d7:b6:2e:d1:
51:d7:91:b2:d7:8d:65:28:bc:eb:a3:cf:b5:fb:40:ea:5f:98:
1e:fc:4e:8f:29:d7:d0:6f:dd:0e:2c:d9:f2:24:fc:41:d8:1a:
f6:f1:d0:da:67:bd:87:e4:83:ee:1b:d1:35:39:1c:f7:cb:88:
31:13:9d:1a:c3:85:a2:c1:f2:88:1e:a6:ac:24:94:32:f1:0a:
88:91:b6:a6:50:f3:c9:e6:95:d0:29:13:97:07:7a:de:3d:7f:
ff:91:58:9c:59:4f:13:20:ed:c0:aa:f9:48:ea:e8:39:f2:ba:
c0:d6:5a:34:7c:bd:00:91:a2:ea:2b:39:04:10:b8:ce:87:a1:
1f:1c:6a:9f:34:c9:04:f7:e0:b1:bc:de:9a:aa:33:3d:bc:51:
19:04:13:01:9f:83:b8:a5:5d:5d:3f:1e:a6:0b:0a:40:23:5b:
e5:24:49:c1:09:d0:4b:cd:8e:76:a7:09:41:9f:e8:8a:4a:e1:
f8:64:2a:20:e1:3d:18:e9:1c:49:a9:27:3a:4e:03:68:59:a2:
e8:26:46:6c:71:1f:0a:e5:0a:1d:20:36:cd:03:e6:01:a1:1b:
6d:e0:34:fe:97:d8:02:d3:34:d4:46:5d:56:4d:5b:9f:db:2a:
b5:5d:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:41 2026 by rpki-client