Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/es1f7DYP90fmivRecsJYnSepVo8.roa
File: es1f7DYP90fmivRecsJYnSepVo8.roa (raw, json)
Hash identifier: +RvCRXNxWQnwd5+B0hSHlUmeqlrKjhogGELXMk7oAUw=
Subject key identifier: 7A:CD:5F:EC:36:0F:F7:47:E6:8A:F4:5E:72:C2:58:9D:27:A9:56:8F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FC7391B3378170FB89B13E525391FA55E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/es1f7DYP90fmivRecsJYnSepVo8.roa
Signing time: Mon 03 Aug 2026 10:43:56 +0000
ROA not before: Mon 03 Aug 2026 10:43:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:39:1b:33:78:17:0f:b8:9b:13:e5:25:39:1f:a5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 10:43:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7acd5fec360ff747e68af45e72c2589d27a9568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:70:25:1a:64:f0:83:70:3f:a8:fe:c4:d7:
91:62:10:df:60:bf:85:64:2a:c9:f3:fb:11:51:4c:
45:d5:75:fa:39:54:0d:45:a1:65:3e:39:e0:10:f6:
75:87:fe:cc:54:33:3a:45:82:92:e2:2e:54:ff:b1:
1e:00:91:a1:99:0f:69:ff:39:6f:4d:96:55:91:f4:
ec:16:0d:58:b7:8f:b6:27:2a:ff:82:85:91:4b:b2:
c9:3e:a8:99:74:b6:1a:90:ca:19:60:aa:10:73:49:
e0:32:9b:b2:64:b7:01:69:3d:de:63:c4:94:cd:3b:
a2:96:a1:e0:19:5d:ce:6e:1b:24:2e:09:42:06:06:
09:64:c2:e4:06:5f:89:69:63:e2:aa:06:ff:a0:ec:
85:4b:de:84:4b:51:95:d7:49:c6:71:ea:a2:47:71:
79:c5:99:67:0c:c9:e3:76:6e:f6:7d:85:e2:f1:b7:
60:d0:da:82:07:36:42:cd:cf:17:cf:06:a1:61:b4:
37:a6:2b:6b:a6:60:95:de:b5:c9:4e:10:6f:51:b1:
51:b7:68:31:04:de:d2:fc:59:d5:92:d7:7e:95:4f:
d7:be:4c:cb:be:59:39:98:e7:a9:da:44:9f:07:67:
e8:c8:c4:68:6b:85:1f:9b:5b:14:05:df:37:a5:76:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:5F:EC:36:0F:F7:47:E6:8A:F4:5E:72:C2:58:9D:27:A9:56:8F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/es1f7DYP90fmivRecsJYnSepVo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
87.121.147.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
48:42:04:3b:34:7c:53:fc:4e:77:02:c1:f2:bb:94:44:93:cb:
1a:f2:c6:c3:64:e7:c6:53:05:89:f9:56:ca:55:21:4f:fe:34:
81:26:35:d7:7a:d7:9c:45:04:b7:9d:33:3e:fe:6c:15:34:4e:
5a:fd:a7:d8:2a:96:59:23:99:22:38:40:99:0b:ac:c0:e7:c7:
75:64:24:6c:6e:88:8f:ee:fd:19:77:cf:ad:0a:2a:24:7d:ea:
44:86:b0:fa:80:f5:71:98:f9:dc:d7:4d:b7:84:64:ea:d3:1f:
6a:8c:23:18:86:22:c3:5b:a9:9b:aa:94:c8:e6:3d:6b:84:4f:
a1:20:4d:92:16:d2:7e:73:2e:d9:14:22:0b:f3:77:21:58:27:
90:c4:63:9d:65:0a:a9:ab:5d:38:39:f2:db:be:fe:5b:15:d0:
d0:5f:12:10:37:12:bb:4f:0a:b9:d4:52:a0:b1:7b:54:3a:28:
6a:8b:4f:12:c3:b8:43:22:3c:fb:f0:34:25:6e:19:0c:24:1a:
14:ea:53:3d:f9:d7:b6:ed:d2:f1:cd:67:22:64:e0:c2:89:c2:
b6:a4:c9:c0:95:72:06:60:b2:55:5b:cd:d6:f4:f2:30:fa:ef:
00:bf:c6:f5:eb:58:15:af:f2:10:7a:e9:3e:d4:83:2c:11:9b:
bf:09:22:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 15:47:26 2026 by rpki-client