Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/7EW_vZGDVpBymC-vtKB-ljYRnPs.roa
File: 7EW_vZGDVpBymC-vtKB-ljYRnPs.roa (raw, json)
Hash identifier: /LJRDns0C+gZFj6Nrss2zhcju3X/SvytCFA3jBxnptg=
Subject key identifier: EC:45:BF:BD:91:83:56:90:72:98:2F:AF:B4:A0:7E:96:36:11:9C:FB
Certificate issuer: /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial: 01A11AC082CE890D7556763CD90C887BD405
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/7EW_vZGDVpBymC-vtKB-ljYRnPs.roa
Signing time: Thu 08 Oct 2026 09:03:06 +0000
ROA not before: Thu 08 Oct 2026 09:03:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216369
IP address blocks: 2001:67c:d4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:c0:82:ce:89:0d:75:56:76:3c:d9:0c:88:7b:d4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Validity
Not Before: Oct 8 09:03:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec45bfbd9183569072982fafb4a07e9636119cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a2:f3:f8:71:13:4b:18:dc:ad:3b:e8:60:f7:
54:80:b8:7c:63:3e:7d:0b:7e:8a:8b:35:ee:1a:6b:
76:47:08:01:5c:31:bb:88:83:0b:1a:2f:72:70:8d:
19:37:c5:e0:0d:b4:4b:3e:52:25:c4:8e:1b:3f:e4:
e3:be:38:50:46:7e:32:4b:f9:5f:12:15:fa:d7:3b:
7a:19:49:b7:24:ce:35:82:07:94:23:72:61:94:fc:
fb:af:8d:57:c2:bd:a0:8d:57:b1:ff:43:03:ca:e1:
e5:3f:dd:57:72:db:7c:71:97:54:2d:3e:59:93:30:
58:ad:9f:86:2f:64:09:89:48:40:4d:0d:45:42:74:
b1:c0:37:22:d4:9d:69:d2:a8:a9:7f:4d:f7:f6:0b:
65:54:4b:ee:b0:aa:e9:9e:cb:43:6f:b2:b6:4d:1c:
d9:db:ff:aa:33:02:41:5f:7f:29:d4:6f:21:a2:39:
95:8b:2d:3e:e5:57:fa:28:e4:78:0f:b7:8a:92:56:
3c:d0:fd:9a:a8:1b:86:2e:58:89:71:47:87:b8:f4:
dc:59:47:cf:a3:6f:be:b5:27:9c:27:74:a7:84:73:
bf:4b:f4:57:1d:3e:cc:82:b6:36:3c:95:50:04:f5:
de:99:be:b5:58:e1:bc:36:82:c9:fb:a7:0c:81:3b:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:45:BF:BD:91:83:56:90:72:98:2F:AF:B4:A0:7E:96:36:11:9C:FB
X509v3 Authority Key Identifier:
keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/7EW_vZGDVpBymC-vtKB-ljYRnPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d4c::/48
Signature Algorithm: sha256WithRSAEncryption
4b:35:21:a3:aa:c0:e6:95:1d:f5:e0:37:10:cd:ed:45:32:61:
61:1e:44:9f:87:8c:bc:9f:3c:03:b2:bb:f5:4e:46:cc:b7:26:
76:14:30:05:24:98:57:8c:53:37:24:5c:d9:4b:96:d6:b3:4e:
bd:12:52:98:8f:7b:da:09:5f:ae:82:41:82:8e:5e:a0:fb:27:
78:d5:11:87:f0:3a:b7:7f:a5:31:2c:26:5a:04:b8:3d:d7:f9:
47:29:c7:5f:d2:ad:28:3f:77:c7:fc:72:bd:05:fa:fd:11:1a:
e2:2b:75:aa:80:ed:4f:db:2b:cb:c5:dd:30:61:a6:45:9f:13:
61:73:de:ea:30:ee:44:b1:49:9a:d7:c4:54:45:c9:25:c7:0a:
a7:1e:9c:3a:0e:5d:86:61:64:a4:2d:5b:08:f6:da:a5:43:d5:
24:16:a8:ac:56:66:55:2c:cc:73:e0:46:8a:77:a3:db:f4:be:
20:c3:93:bc:f0:f8:85:04:d4:ee:1e:25:2f:1d:f9:ce:7d:d5:
6d:5b:ed:1f:57:18:72:32:5a:20:49:9c:63:9b:6a:64:85:8e:
c1:45:d7:42:bd:0c:6d:cb:22:d3:a2:fb:b5:7f:ef:9c:eb:3f:
4c:b6:cb:19:d6:f0:5b:d3:73:06:b5:45:58:21:a1:08:ae:1a:
cd:68:ce:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:33 2026 by rpki-client