Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fsEmSsUpWyo53f9AQKnorEz_4ww.roa
File: fsEmSsUpWyo53f9AQKnorEz_4ww.roa (raw, json)
Hash identifier: tkIjMfF+pTOIvEkol8ZxDkjRrmIQ6yvvI8WH2ZoXkO4=
Subject key identifier: 7E:C1:26:4A:C5:29:5B:2A:39:DD:FF:40:40:A9:E8:AC:4C:FF:E3:0C
Certificate issuer: /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial: 019F236896C615C7EB5B971CDF4741B74839
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fsEmSsUpWyo53f9AQKnorEz_4ww.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201971
IP address blocks: 139.28.204.0/24 maxlen: 24
139.28.207.0/24 maxlen: 24
217.145.236.0/24 maxlen: 24
217.145.238.0/24 maxlen: 24
217.145.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:96:c6:15:c7:eb:5b:97:1c:df:47:41:b7:48:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ec1264ac5295b2a39ddff4040a9e8ac4cffe30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:02:d6:53:7d:ef:5a:15:e4:69:4d:35:a2:56:
df:a1:fd:77:fa:61:0d:c9:f6:75:db:48:6a:81:ef:
69:91:ad:25:68:fd:6c:9c:5d:cc:78:93:44:a7:cc:
a6:8e:89:49:34:5e:67:8d:1c:45:6e:68:5e:97:ab:
99:11:cc:da:9f:86:cf:da:60:9d:70:9b:79:78:89:
4c:3e:89:f8:69:4b:e9:40:a5:6b:4b:7a:02:ae:dd:
fa:6a:25:15:f4:b8:b7:0a:b3:8e:9e:43:af:b8:8f:
26:aa:eb:3d:90:9a:79:f4:3a:49:48:e0:0d:3d:1c:
3f:0e:a3:7f:1b:c9:93:5f:84:a8:c0:de:fb:c2:ed:
a0:29:89:16:fe:bb:1c:74:b2:95:a8:e6:91:d8:7a:
16:20:ef:27:ce:ba:ed:d6:84:42:3a:65:29:41:f2:
10:01:51:30:4d:12:75:72:bf:bc:23:15:c5:8a:b6:
79:e0:04:05:e5:87:eb:9f:03:f5:3f:ce:9b:6a:e7:
e3:d1:20:be:81:fe:3d:e5:38:a9:2b:87:a8:6e:74:
08:74:64:14:02:ae:c1:e4:45:6d:a3:75:59:98:cb:
c4:0a:c5:b5:ba:80:d0:a3:ad:3f:18:08:6e:f0:58:
e9:a7:37:74:05:01:45:44:80:c7:d6:e7:49:fa:a1:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C1:26:4A:C5:29:5B:2A:39:DD:FF:40:40:A9:E8:AC:4C:FF:E3:0C
X509v3 Authority Key Identifier:
keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fsEmSsUpWyo53f9AQKnorEz_4ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.204.0/24
139.28.207.0/24
217.145.236.0/24
217.145.238.0/23
Signature Algorithm: sha256WithRSAEncryption
13:e8:55:b4:c6:0e:f1:b1:d5:79:32:75:77:2e:b5:33:fc:74:
ce:13:6b:b0:0a:4a:ee:58:fd:44:55:dd:fa:2b:10:cb:3c:94:
86:0f:f7:c2:ad:38:24:4d:66:c2:95:01:a6:49:67:bf:35:8f:
5d:81:cb:e8:cb:3b:3b:aa:af:c0:e0:fd:d2:36:e6:66:e9:a7:
a2:83:25:b0:16:03:d8:92:a3:99:95:b0:1f:35:06:91:b8:7e:
38:5e:d4:c3:24:90:79:57:f5:da:94:2d:cb:a4:54:ca:cc:8b:
25:83:d2:63:9c:17:e9:61:e0:a6:d9:e9:04:da:75:43:53:9d:
2a:42:72:af:b4:25:e6:c7:33:a3:27:4f:2d:b4:e1:90:45:5c:
18:c5:2c:1e:70:d2:09:76:5e:e5:db:21:8e:bd:96:15:33:40:
88:f3:29:ae:8a:c9:d0:07:bf:1f:b0:29:67:92:7e:84:f3:ec:
56:bf:d4:22:46:5a:05:fc:b3:8a:d5:26:1d:ea:f3:ea:da:8f:
9a:73:02:5f:58:7b:ff:ce:f6:15:ed:8c:6d:a5:1c:c0:b1:e1:
14:b3:1b:71:83:9a:a3:dd:07:29:59:46:57:09:65:c2:5d:44:
c2:6f:7f:b1:d1:ea:8e:63:c4:c1:22:46:82:54:b5:e5:4d:59:
26:41:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:41:58 2026 by rpki-client