Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa
File: 7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa (raw, json)
Hash identifier: 0RSj8hlfzfDA+UBOrNiz+0Nnhh1ogxhr8K0HRO0n7TM=
Subject key identifier: EC:B8:99:70:09:30:D6:FF:47:17:75:62:99:4A:40:B5:D9:EE:E1:7C
Certificate issuer: /CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Certificate serial: 019F3B953C5192EA62F6EFCFF7A49F83C249
Authority key identifier: 1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa
Signing time: Tue 07 Jul 2026 07:57:43 +0000
ROA not before: Tue 07 Jul 2026 07:57:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50201
IP address blocks: 109.232.88.0/21 maxlen: 21
109.232.90.0/24 maxlen: 24
109.232.91.0/24 maxlen: 24
109.232.92.0/22 maxlen: 22
2a0b:93c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:95:3c:51:92:ea:62:f6:ef:cf:f7:a4:9f:83:c2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9a2f083f471dfb9507b4c973cb5c3acd49759d
Validity
Not Before: Jul 7 07:57:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecb899700930d6ff47177562994a40b5d9eee17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:5b:bd:72:94:b3:f6:93:4b:26:2c:3d:cf:
3a:9c:30:f1:d8:79:1b:0e:28:7f:af:a0:3e:e6:77:
40:93:78:39:86:c5:40:8c:6a:44:9e:ae:04:e7:ad:
17:22:8c:4e:3d:9f:63:8a:c5:f4:73:0f:98:09:35:
11:5f:f0:7d:a8:9c:65:5b:51:fc:50:89:40:f9:0e:
0d:ff:09:98:11:58:9b:b8:33:cf:83:96:a7:a5:7e:
72:58:86:07:06:f5:6d:92:4f:4f:d3:af:58:22:ad:
be:66:a5:80:bd:b0:0a:53:8b:26:6f:42:23:fe:68:
4c:69:89:9c:c6:ae:0b:ef:e8:19:15:90:ed:26:90:
e3:b9:ba:99:95:26:f2:64:86:dc:42:51:ba:1c:64:
8b:dd:c6:e5:3c:40:b4:7c:5b:3a:bc:74:d7:e9:f8:
2e:c9:df:9a:b1:7a:a0:50:d5:6e:85:3a:32:fd:09:
5c:40:a4:c0:a9:18:99:8f:ee:c4:db:79:cb:37:82:
22:94:3d:d6:1f:66:db:1d:66:1a:c7:fc:39:1b:bf:
ba:e0:cd:09:86:d8:7a:96:59:e9:71:b0:8f:f2:65:
c9:d1:c9:f4:57:26:9b:c1:fd:cd:18:2d:52:14:00:
4e:c8:6e:ea:ce:c3:de:2a:24:b6:58:f2:50:b8:04:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B8:99:70:09:30:D6:FF:47:17:75:62:99:4A:40:B5:D9:EE:E1:7C
X509v3 Authority Key Identifier:
keyid:1E:9A:2F:08:3F:47:1D:FB:95:07:B4:C9:73:CB:5C:3A:CD:49:75:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpovCD9HHfuVB7TJc8tcOs1JdZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/7LiZcAkw1v9HF3VimUpAtdnu4Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6277a7-290f-4994-b286-25d6e8613dc4/1/HpovCD9HHfuVB7TJc8tcOs1JdZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.232.88.0/21
IPv6:
2a0b:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:ff:c7:82:49:0c:13:07:80:eb:27:b0:52:29:88:0b:60:d4:
44:2c:1b:58:78:5b:17:be:f7:e1:00:8e:cc:42:1a:31:98:f4:
bc:ee:cc:bf:f2:bf:38:06:8b:8b:f1:bf:7b:7b:99:73:24:20:
68:a5:67:35:ad:a6:9a:fc:f2:75:a8:be:2b:90:eb:b2:b0:a4:
cb:a0:25:72:20:11:dd:65:0c:6f:cb:ad:de:95:1b:79:ba:a1:
5c:d6:1f:73:c1:47:92:7b:88:d2:29:51:ee:86:bf:99:10:0a:
12:70:10:59:56:a4:c5:80:0c:47:93:10:f9:44:a8:4c:98:31:
b3:bd:24:32:89:0a:11:fe:e3:e4:c7:67:92:62:13:00:86:5b:
b7:94:90:74:7b:c8:a4:ac:6e:1b:a4:bc:07:6d:ac:99:ab:5c:
8e:e1:2e:24:ec:82:77:99:a5:9a:c2:0a:71:30:55:4a:27:78:
7a:aa:f1:e1:e8:7a:5f:02:d2:82:a3:ca:2f:1e:69:23:57:c5:
f1:bd:8c:ee:f8:5e:5d:5f:d7:ff:bd:81:26:c5:68:cc:c9:18:
d4:d2:1b:f6:f7:49:75:c2:5b:9b:61:28:63:b3:cb:20:1c:f2:
d0:be:87:16:e8:32:62:f5:f6:1a:6a:d3:43:fb:c9:bf:ba:a2:
23:c9:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:03 2026 by rpki-client