Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zddAHB_e6ILHW6zqmGB5nWywCs.roa
File: 7zddAHB_e6ILHW6zqmGB5nWywCs.roa (raw, json)
Hash identifier: TzrhcNKh7ymgnYxlEnGxea5neGTma1DR4a+2xcqg/2s=
Subject key identifier: EF:37:5D:00:70:7F:7B:A2:0B:1D:6E:B3:AA:61:81:E6:75:B2:C0:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F59C18B6429620A32459BD22733A77CA7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zddAHB_e6ILHW6zqmGB5nWywCs.roa
Signing time: Mon 13 Jul 2026 04:34:44 +0000
ROA not before: Mon 13 Jul 2026 04:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42946
IP address blocks: 194.58.60.0/24 maxlen: 24
195.58.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:59:c1:8b:64:29:62:0a:32:45:9b:d2:27:33:a7:7c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 13 04:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef375d00707f7ba20b1d6eb3aa6181e675b2c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:db:d2:89:37:2d:32:65:00:83:24:5b:49:
21:cc:09:8d:fc:de:3e:61:83:d3:c3:32:e0:e9:b2:
07:03:71:80:1e:39:24:97:57:09:b4:9a:2f:48:f1:
0a:0e:c4:91:5a:79:e7:ac:f5:71:3b:28:8b:09:c1:
47:bc:4a:14:5f:60:06:57:58:54:32:79:63:50:c0:
9a:0b:ba:e0:d2:b1:97:e2:93:78:c4:85:cb:96:32:
11:ed:b5:ca:44:3a:a9:8b:e4:cc:81:18:66:3a:36:
db:d3:e4:44:38:e3:53:cc:fd:e1:ef:c2:d3:37:5a:
3f:db:f5:10:9a:fe:74:64:fe:a4:c9:6a:55:0b:63:
aa:fc:1e:f4:c0:78:45:ec:d3:8a:6d:c9:fc:4e:9a:
d2:26:7d:25:4d:23:85:bf:33:ce:24:5a:73:41:57:
f6:56:6c:93:cb:69:b0:d5:9e:d9:a5:b5:8e:35:2d:
20:bf:9a:20:eb:bc:0b:2c:ec:7d:16:2a:81:0e:ff:
f9:52:80:fd:bd:ec:48:ca:e3:74:67:a7:c9:86:a1:
52:da:ed:74:7f:74:83:ff:01:e1:52:af:af:4f:66:
01:31:ea:fa:a1:82:22:e9:5f:d2:e5:81:49:3f:45:
5d:d0:8a:18:6d:b8:b2:34:5f:90:2c:b5:7d:78:f1:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:5D:00:70:7F:7B:A2:0B:1D:6E:B3:AA:61:81:E6:75:B2:C0:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zddAHB_e6ILHW6zqmGB5nWywCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.60.0/24
195.58.46.0/24
Signature Algorithm: sha256WithRSAEncryption
14:16:a2:d1:be:02:78:c7:83:f3:10:ef:fd:7c:06:32:f1:23:
ac:e0:98:79:cd:fb:f1:18:79:91:0b:af:5b:9b:a3:32:3c:40:
8b:a7:10:59:90:01:56:c7:33:3e:16:b3:f0:0a:43:0c:7a:d4:
3e:be:3b:63:f1:90:52:fc:77:78:91:21:12:bc:62:6d:7e:1a:
78:1f:96:f1:8e:4d:71:cf:55:38:2f:b4:6f:30:af:c6:f9:0b:
ff:28:35:f7:23:48:22:94:0c:a2:b7:be:13:38:e4:ab:f0:d2:
9d:d8:e6:4b:75:e8:d1:fb:36:75:c3:51:41:56:66:bc:86:c5:
e6:7d:ee:e5:bd:0e:3e:1e:cd:7c:d1:cc:5e:f6:15:3f:5a:54:
5a:27:7d:d2:12:9c:1d:da:a8:29:93:5f:90:ed:00:ec:5f:3f:
83:47:77:1f:d3:ea:bc:3c:45:9c:7b:8d:d4:ef:8b:06:bc:75:
8f:70:1f:a4:55:75:38:3a:ac:b1:b1:b4:20:1c:2a:4f:87:74:
8c:40:0f:c3:02:80:2e:bf:0a:e4:64:a4:df:bf:13:dd:41:4f:
76:aa:83:f1:c5:43:2a:33:a7:c1:2b:49:63:ef:c8:79:a4:fd:
a9:88:87:b2:9a:d0:0f:05:2a:6e:4f:5b:cb:57:7b:d1:57:17:
22:a5:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:57 2026 by rpki-client