Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/os7FL_e0fwDe2HKXXIa8XCY8kwA.roa
File: os7FL_e0fwDe2HKXXIa8XCY8kwA.roa (raw, json)
Hash identifier: KGwGR3NAQ8vDd+WbNXOCy96DaRvwjSJNiY5hcCsHPGw=
Subject key identifier: A2:CE:C5:2F:F7:B4:7F:00:DE:D8:72:97:5C:86:BC:5C:26:3C:93:00
Certificate issuer: /CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Certificate serial: 019F236866C550413C9A7DE4BD5151258220
Authority key identifier: 89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/os7FL_e0fwDe2HKXXIa8XCY8kwA.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48714
IP address blocks: 83.119.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:c5:50:41:3c:9a:7d:e4:bd:51:51:25:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cec52ff7b47f00ded872975c86bc5c263c9300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:10:a4:e9:c2:62:19:54:b3:38:41:7e:56:
19:e6:3f:bf:ca:7c:5b:e6:af:0d:4f:ab:55:d2:56:
ce:e1:8e:17:7b:90:be:d8:78:33:bb:42:db:fe:ae:
9f:df:06:84:a2:e3:fa:b8:c5:42:51:c4:0a:b9:c6:
6e:32:63:c8:13:3a:1d:28:44:e9:ed:90:c3:9d:b1:
88:31:24:42:e5:a3:d7:cf:f0:32:8b:12:48:37:7e:
5a:a2:b5:86:cd:de:cc:f3:ed:76:9c:73:d4:fd:54:
88:a0:1e:79:25:dd:f8:19:87:96:38:06:06:86:f3:
65:06:b0:98:6f:43:0c:c2:1a:e5:41:0e:b1:2b:d0:
96:74:33:85:53:b5:f6:29:d7:a0:b9:b1:89:e2:72:
9c:d9:e4:64:34:6b:ab:27:ec:89:a3:b7:10:6c:cf:
70:c8:6a:95:74:bb:e1:6b:d4:5a:ca:47:f7:4b:3e:
73:6a:29:3e:ac:20:1b:74:99:ec:54:c0:4e:4e:23:
8f:66:6a:a3:9c:da:f1:8c:77:80:67:fe:d1:e5:a8:
43:80:25:26:01:9f:0b:44:ef:65:a2:2f:c9:43:de:
23:15:99:c1:b9:5a:88:8d:c0:a0:a3:9e:cf:f8:02:
43:d9:38:51:7c:52:f1:33:95:ef:75:a2:1b:54:63:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:C5:2F:F7:B4:7F:00:DE:D8:72:97:5C:86:BC:5C:26:3C:93:00
X509v3 Authority Key Identifier:
keyid:89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/os7FL_e0fwDe2HKXXIa8XCY8kwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.119.7.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d4:5a:66:e7:55:f9:cd:3a:ef:7b:79:1e:1f:65:d8:24:41:
34:ad:a6:a8:68:05:4d:0e:61:f3:f4:c4:34:00:ff:32:73:23:
c9:78:72:61:f5:8a:e1:59:10:fd:ff:a6:8a:5b:7d:85:fb:2d:
61:38:a5:bc:69:cc:c6:94:6d:9d:9d:b9:70:f5:ff:c2:96:2b:
f2:bc:5b:d5:63:c6:eb:b3:83:e3:c3:dc:58:01:73:22:eb:be:
b1:42:c2:b3:b6:cd:e3:b1:5d:78:c7:0e:4f:8a:3e:19:38:19:
70:ef:f7:02:4d:59:d5:17:f2:89:de:86:e6:64:2a:7c:fc:ad:
ce:cc:eb:3f:11:40:73:a8:a0:69:8a:7f:57:48:89:1e:12:57:
0f:ea:6f:1a:a3:dd:0e:c2:b8:72:93:54:3a:1f:1f:4d:1e:96:
72:53:9d:73:f5:f0:e7:fc:85:8c:93:97:8b:2d:3f:4a:91:13:
9a:73:34:39:a9:c6:89:3b:91:c9:c6:c7:4c:97:04:5e:86:85:
c9:91:82:ff:69:44:5f:16:0f:c6:75:55:e0:98:4f:ee:df:b6:
2e:3e:82:bc:28:53:2b:ca:bc:21:43:04:7b:3d:16:d8:fc:79:
e7:c3:05:8c:1d:44:4c:61:8d:be:99:c2:2f:d6:18:43:32:fc:
c0:c1:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client