Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa
File: 7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa (raw, json)
Hash identifier: nAtI6W4M1c0vsQcQPICfweTzeaicv4tPcI6rzxIYt3U=
Subject key identifier: ED:A9:F1:76:15:AE:E4:DB:AE:55:F9:17:87:C6:C6:F6:70:EB:F9:90
Certificate issuer: /CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Certificate serial: 019F236832214E090DD5D8444431D9B22D11
Authority key identifier: A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa
Signing time: Thu 02 Jul 2026 15:17:38 +0000
ROA not before: Thu 02 Jul 2026 15:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206190
IP address blocks: 185.194.8.0/22 maxlen: 24
2a0c:3440::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:32:21:4e:09:0d:d5:d8:44:44:31:d9:b2:2d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20d691ab19cdcf28a9896cbf5a7a0af4b961e98
Validity
Not Before: Jul 2 15:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eda9f17615aee4dbae55f91787c6c6f670ebf990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:a4:ef:38:5c:51:26:31:b5:80:77:ad:4b:
6e:c8:bb:3f:a8:fe:dd:bb:43:42:fc:3c:9a:41:12:
ed:b0:a6:e8:7b:80:a4:aa:f5:ff:6d:ab:de:bd:c7:
a7:97:6b:55:e0:32:c0:f6:2b:23:90:9d:73:46:78:
69:fd:9a:c6:a6:86:8a:3e:9d:f6:e5:8c:f5:3e:d2:
15:27:c6:b3:de:34:bd:22:41:65:64:8a:ff:a2:61:
3c:64:a7:0f:f9:11:e8:b1:8d:3f:f6:4c:e0:33:7a:
80:25:dc:a9:3e:5e:7a:f2:31:f6:39:49:cc:12:a3:
52:7d:fc:2d:fa:c3:b5:df:7e:6c:66:c5:f3:f9:2a:
f3:bb:59:16:78:ab:a2:bc:be:dc:91:2e:11:d4:e4:
33:92:c1:4c:94:d5:92:6d:9c:6b:48:02:9c:05:3d:
f1:06:96:40:4c:be:58:f9:c2:53:76:34:df:19:93:
dc:f4:cf:61:4e:99:e8:4e:3b:80:52:ca:cb:d1:fd:
03:50:64:50:17:11:da:a6:f0:5a:a7:3b:a0:d1:f2:
93:cb:ed:7b:19:2d:b1:1f:93:0d:53:61:88:73:57:
fd:45:97:7f:af:d7:84:bb:30:cd:84:bc:e5:29:b2:
88:49:57:22:a2:a3:47:91:01:9c:eb:90:12:b8:07:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:F1:76:15:AE:E4:DB:AE:55:F9:17:87:C6:C6:F6:70:EB:F9:90
X509v3 Authority Key Identifier:
keyid:A2:0D:69:1A:B1:9C:DC:F2:8A:98:96:CB:F5:A7:A0:AF:4B:96:1E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/og1pGrGc3PKKmJbL9aegr0uWHpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/7anxdhWu5NuuVfkXh8bG9nDr-ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/og1pGrGc3PKKmJbL9aegr0uWHpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.8.0/22
IPv6:
2a0c:3440::/29
Signature Algorithm: sha256WithRSAEncryption
a0:89:97:3e:4f:42:21:35:b1:d4:88:63:0f:8a:c7:ca:e5:2d:
96:c9:c8:5a:8c:b5:99:c8:0f:98:17:05:06:ba:e0:28:20:3c:
96:c8:a2:4c:70:8a:71:ca:d1:fe:11:49:6d:07:ab:bb:1b:32:
36:69:b6:c3:c0:4b:b3:94:07:86:0f:4b:f2:bb:24:a2:a6:2c:
92:2a:fe:d6:b6:19:47:a9:da:9b:20:4e:e8:14:d2:00:eb:1e:
b0:ef:a8:00:57:a1:cc:7a:e9:51:f3:cf:90:dc:0b:b6:c7:f6:
61:f6:22:ce:91:d2:b4:5a:35:61:8f:37:d8:d0:48:db:5e:74:
80:ca:75:fb:3b:d3:34:60:14:5c:c5:72:84:64:a7:ba:8b:0e:
11:17:59:af:9c:f8:8e:f1:a5:b2:90:7b:be:f8:b4:2d:8d:a9:
bd:87:1c:89:41:51:7f:be:2e:70:80:c5:fe:d5:2e:36:f8:88:
38:91:05:18:c9:61:a3:a6:8c:47:21:ee:2a:98:4f:44:c4:66:
ab:f2:64:3d:d5:fd:f7:64:bb:e1:c1:99:22:73:9e:7c:ce:65:
d9:da:64:68:0f:e6:89:f1:22:3c:aa:e4:a6:ec:15:e5:c8:fc:
cf:0a:19:23:40:c7:2b:b2:b8:e3:3d:d3:e5:ff:cf:ca:ca:e5:
f6:6a:20:2d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8jaDIhTgkN1dhERDHZsi0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGQ2OTFhYjE5Y2RjZjI4YTk4OTZjYmY1YTdhMGFmNGI5
NjFlOTgwHhcNMjYwNzAyMTUxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE5ZjE3NjE1YWVlNGRiYWU1NWY5MTc4N2M2YzZmNjcwZWJmOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGek7zhcUSYxtYB3rUtuyLs/qP7d
u0NC/DyaQRLtsKboe4CkqvX/bavevcenl2tV4DLA9isjkJ1zRnhp/ZrGpoaKPp32
5Yz1PtIVJ8az3jS9IkFlZIr/omE8ZKcP+RHosY0/9kzgM3qAJdypPl568jH2OUnM
EqNSffwt+sO1335sZsXz+Srzu1kWeKuivL7ckS4R1OQzksFMlNWSbZxrSAKcBT3x
BpZATL5Y+cJTdjTfGZPc9M9hTpnoTjuAUsrL0f0DUGRQFxHapvBapzug0fKTy+17
GS2xH5MNU2GIc1f9RZd/r9eEuzDNhLzlKbKISVcioqNHkQGc65ASuAeV3wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFO2p8XYVruTbrlX5F4fGxvZw6/mQMB8GA1UdIwQY
MBaAFKINaRqxnNzyipiWy/WnoK9Llh6YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUt
MTJlODI3NmZkYWM0LzEvN2FueGRoV3U1TnV1VmZrWGg4Ykc5bkRyLVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MTA5MzQtMzA0Yi00ZjVmLTk1MGUtMTJlODI3NmZkYWM0
LzEvb2cxcEdyR2MzUEtLbUpiTDlhZWdyMHVXSHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucIIMA0E
AgACMAcDBQMqDDRAMA0GCSqGSIb3DQEBCwUAA4IBAQCgiZc+T0IhNbHUiGMPisfK
5S2WychajLWZyA+YFwUGuuAoIDyWyKJMcIpxytH+EUltB6u7GzI2abbDwEuzlAeG
D0vyuySipiySKv7WthlHqdqbIE7oFNIA6x6w76gAV6HMeulR88+Q3Au2x/Zh9iLO
kdK0WjVhjzfY0EjbXnSAynX7O9M0YBRcxXKEZKe6iw4RF1mvnPiO8aWykHu++LQt
jam9hxyJQVF/vi5wgMX+1S42+Ig4kQUYyWGjpoxHIe4qmE9ExGar8mQ91f33ZLvh
wZkic558zmXZ2mRoD+aJ8SI8quSm7BXlyPzPChkjQMcrsrjjPdPl/8/KyuX2aiAt
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:54:55 2026 by rpki-client