Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7vFoMv9pkwo-sc0yQADWLwgIOl4.roa
File: 7vFoMv9pkwo-sc0yQADWLwgIOl4.roa (raw, json)
Hash identifier: 6/wtbIlgnNMpJqnzm9DM08/HH288aXsIYH8DAmQk0rg=
Subject key identifier: EE:F1:68:32:FF:69:93:0A:3E:B1:CD:32:40:00:D6:2F:08:08:3A:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F12582EB1703017188A28BB2E903B6B36
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7vFoMv9pkwo-sc0yQADWLwgIOl4.roa
Signing time: Mon 29 Jun 2026 07:46:36 +0000
ROA not before: Mon 29 Jun 2026 07:46:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 62.76.231.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
195.58.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:58:2e:b1:70:30:17:18:8a:28:bb:2e:90:3b:6b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 29 07:46:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eef16832ff69930a3eb1cd324000d62f08083a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:cf:09:5c:67:21:11:b2:0b:c7:81:97:6c:
95:75:72:bc:f1:51:1d:da:21:ba:a6:02:67:73:a0:
61:b9:61:3b:cd:ae:e4:4e:dc:f6:58:2c:ab:3e:f2:
d0:50:7b:36:d3:b1:98:4e:9b:c5:f6:4f:60:50:7a:
8c:67:de:9c:d4:4f:57:01:3b:ed:04:d0:87:9a:43:
e8:3d:d2:c5:a3:b6:5c:b3:9b:0f:05:5d:84:8a:29:
21:63:ef:c2:b6:81:21:ee:d3:50:3d:21:60:ff:93:
2c:2c:92:c8:b2:ac:52:d4:f6:fc:e2:1c:4a:fb:5d:
38:48:d7:29:d0:a0:1b:ee:53:6d:eb:ac:07:b5:ab:
77:2b:7c:01:f9:20:dc:6a:26:83:86:24:6a:e4:d0:
96:4a:19:22:57:82:15:43:7f:2a:74:83:08:b5:0e:
c2:55:d3:fe:17:7d:e5:79:b9:fa:a2:bc:8d:3c:4e:
a8:ca:7b:6a:c6:f7:96:b2:c7:6a:68:7f:d5:1a:1a:
58:73:46:93:b9:24:c4:2a:96:ff:78:8f:58:a4:cf:
2b:5e:ff:b6:b3:5d:58:65:c6:45:c5:fa:e8:24:fe:
c3:e9:f8:03:e1:34:9d:c8:d3:50:e0:58:71:dc:bd:
58:b0:6f:b3:2e:92:2d:35:35:74:63:e3:6f:ad:73:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F1:68:32:FF:69:93:0A:3E:B1:CD:32:40:00:D6:2F:08:08:3A:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7vFoMv9pkwo-sc0yQADWLwgIOl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
194.87.228.0/24
195.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:25:89:50:25:bc:5c:16:7a:35:b2:d6:5d:15:7e:57:16:07:
dd:51:27:5c:e7:41:95:32:6b:14:28:6c:44:ce:20:e9:44:10:
cc:dd:9e:20:df:8f:97:0d:68:57:33:d7:cf:55:67:76:0c:ce:
87:7d:29:d6:76:8a:25:0b:cd:c3:a0:6c:b7:be:1f:2a:de:72:
eb:84:08:05:b8:2f:ba:98:7d:7b:2b:17:95:05:40:87:12:9d:
bc:37:9c:14:34:fe:61:8a:26:12:56:6b:7d:07:47:86:90:0b:
f8:ff:5d:99:25:4a:76:a2:d0:bc:e3:18:87:ba:a3:50:55:4f:
ed:50:72:41:2c:59:8e:68:b0:f7:66:b8:c9:cd:4e:7b:35:68:
de:14:ef:62:7e:29:d1:f5:91:fb:60:e4:dd:b0:a8:da:9c:96:
96:20:89:a3:4c:4c:f4:d1:ce:96:db:9b:4b:ec:95:b4:1c:93:
a9:03:33:a4:4d:33:a8:f0:bd:14:29:d3:69:68:f9:2f:04:fc:
90:4e:c8:09:c7:b6:f8:0b:b5:2a:ab:80:81:a9:9e:2e:58:85:
e5:06:3c:8d:0e:95:ba:55:c4:b0:6c:72:65:7a:5c:c0:de:0e:
46:1b:1c:e6:3a:8e:29:9a:dc:b9:1f:ba:e9:10:bb:ed:5f:37:
8f:f5:ac:2f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8SWC6xcDAXGIoouy6QO2s2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNjI5MDc0NjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWYxNjgzMmZmNjk5MzBhM2ViMWNkMzI0MDAwZDYyZjA4MDgzYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI7PCVxnIRGyC8eBl2yVdXK88VEd
2iG6pgJnc6BhuWE7za7kTtz2WCyrPvLQUHs207GYTpvF9k9gUHqMZ96c1E9XATvt
BNCHmkPoPdLFo7Zcs5sPBV2EiikhY+/CtoEh7tNQPSFg/5MsLJLIsqxS1Pb84hxK
+104SNcp0KAb7lNt66wHtat3K3wB+SDcaiaDhiRq5NCWShkiV4IVQ38qdIMItQ7C
VdP+F33lebn6oryNPE6oyntqxveWssdqaH/VGhpYc0aTuSTEKpb/eI9YpM8rXv+2
s11YZcZFxfroJP7D6fgD4TSdyNNQ4Fhx3L1YsG+zLpItNTV0Y+NvrXPcEwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO7xaDL/aZMKPrHNMkAA1i8ICDpeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvN3ZGb012OXBrd28tc2MweVFBRFdMd2dJT2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPkznAwQA
wlfkAwQAwzotMA0GCSqGSIb3DQEBCwUAA4IBAQAtJYlQJbxcFno1stZdFX5XFgfd
USdc50GVMmsUKGxEziDpRBDM3Z4g34+XDWhXM9fPVWd2DM6HfSnWdoolC83DoGy3
vh8q3nLrhAgFuC+6mH17KxeVBUCHEp28N5wUNP5hiiYSVmt9B0eGkAv4/12ZJUp2
otC84xiHuqNQVU/tUHJBLFmOaLD3ZrjJzU57NWjeFO9ifinR9ZH7YOTdsKjanJaW
IImjTEz00c6W25tL7JW0HJOpAzOkTTOo8L0UKdNpaPkvBPyQTsgJx7b4C7Uqq4CB
qZ4uWIXlBjyNDpW6VcSwbHJlelzA3g5GGxzmOo4pmty5H7rpELvtXzeP9awv
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client