Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/7hxycR97F6II7DC0Vj37aerZ5oQ.roa
File: 7hxycR97F6II7DC0Vj37aerZ5oQ.roa (raw, json)
Hash identifier: KZSoHAwVwfiAoSXeYAVjqNq4+GGagnZ4C5DwWpPA1wQ=
Subject key identifier: EE:1C:72:71:1F:7B:17:A2:08:EC:30:B4:56:3D:FB:69:EA:D9:E6:84
Certificate issuer: /CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Certificate serial: 019F236876A4BCEFA6577E09F6FF655009D6
Authority key identifier: 66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/7hxycR97F6II7DC0Vj37aerZ5oQ.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 153.98.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:a4:bc:ef:a6:57:7e:09:f6:ff:65:50:09:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66210a21e4e46e992c87f6b388260b6fcc62efb7
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee1c72711f7b17a208ec30b4563dfb69ead9e684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:53:81:07:c4:41:18:b8:05:04:7e:21:87:
83:f3:0f:fb:8f:d1:9d:6c:4b:7a:8e:dc:67:b9:e8:
c8:07:0c:18:4e:7f:4b:21:c7:1f:81:4a:fb:ee:b7:
4b:00:62:f6:e7:25:9d:17:21:ca:92:72:76:92:37:
98:c6:df:05:ca:d5:49:4b:04:e3:32:c5:9a:c8:7e:
93:97:c7:fb:a3:a8:88:d5:e6:8b:65:8d:3e:b6:12:
80:68:be:f1:95:78:0a:ac:78:21:4a:0c:50:8b:d9:
26:bf:d5:f9:21:b1:06:1c:b9:6f:0d:a0:33:e7:22:
cb:02:59:0d:9a:0f:ca:91:f7:1d:8a:fb:53:05:2e:
72:db:9d:10:c5:0e:13:86:ea:66:be:cf:47:f2:de:
59:52:ed:6e:ba:2f:70:4a:da:a9:2a:92:b8:c5:9d:
2a:cb:6c:b4:f1:a9:43:1b:be:5c:e2:9c:5b:59:8e:
84:96:d2:ad:1c:ab:d2:28:75:f7:4a:69:f7:46:fd:
0c:58:b2:d0:91:a1:9a:7b:23:08:64:9e:dc:a8:30:
a8:82:32:ab:9a:1d:fb:05:6f:24:12:69:cd:75:20:
41:91:f3:76:b5:3d:7c:3c:97:fa:ed:0e:16:c6:0f:
c2:60:0f:04:5b:81:0f:2c:a5:83:20:f5:fa:22:75:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:72:71:1F:7B:17:A2:08:EC:30:B4:56:3D:FB:69:EA:D9:E6:84
X509v3 Authority Key Identifier:
keyid:66:21:0A:21:E4:E4:6E:99:2C:87:F6:B3:88:26:0B:6F:CC:62:EF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiEKIeTkbpksh_aziCYLb8xi77c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/7hxycR97F6II7DC0Vj37aerZ5oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/ZiEKIeTkbpksh_aziCYLb8xi77c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.98.24.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:0d:b9:9e:5c:7f:1c:a0:eb:8c:06:ce:62:50:79:5f:38:
20:ab:bd:32:36:db:c7:b3:29:81:01:90:61:26:83:f3:dc:c8:
e4:34:90:d8:69:cf:11:82:97:cc:86:0a:50:18:7d:9f:1f:b5:
ba:22:d7:de:6f:18:b8:cd:c8:66:57:23:2b:93:1a:0e:b4:d1:
f1:2a:ca:60:c3:35:78:57:e8:c4:e2:14:5e:c3:2d:77:95:03:
8a:79:4b:89:96:b7:f3:5d:be:cb:1e:01:a1:76:31:80:39:1e:
c1:2a:a8:e0:5a:11:78:f4:c8:f4:bf:7e:b3:cc:87:b1:51:36:
3c:8f:77:68:8f:a2:ad:6e:6a:f1:ab:68:ff:45:70:c3:42:6b:
a6:0d:2b:e3:27:3e:2d:3f:89:83:68:e1:62:b9:9e:5e:80:f1:
c4:9e:86:d5:dc:ec:e9:31:21:02:25:22:6d:f4:51:fa:c1:40:
c8:42:6e:01:d0:02:2b:76:f0:bc:fe:47:86:ae:0b:24:00:40:
4c:e2:b4:98:4f:ae:1a:cf:c0:9a:24:56:c5:87:c2:e0:d4:c2:
c6:91:a0:55:08:2d:13:e8:3d:6c:f7:1e:9e:75:c4:ea:ee:da:
c8:c7:a8:8c:6e:f7:d1:42:14:1a:49:d8:56:a2:e0:76:c7:5a:
4b:f9:8b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:42 2026 by rpki-client