Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/7z-MCF86QQp8B94uRe1u_GzkAI4.roa
File: 7z-MCF86QQp8B94uRe1u_GzkAI4.roa (raw, json)
Hash identifier: daTnJoGASWbJKNdFZoCaRZv3DUhNpcLgbcMpsUhimmY=
Subject key identifier: EF:3F:8C:08:5F:3A:41:0A:7C:07:DE:2E:45:ED:6E:FC:6C:E4:00:8E
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F8D7540486BAF11A7B01AD23FE7B
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/7z-MCF86QQp8B94uRe1u_GzkAI4.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24949
IP address blocks: 194.209.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:d7:54:04:86:ba:f1:1a:7b:01:ad:23:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef3f8c085f3a410a7c07de2e45ed6efc6ce4008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:34:99:02:cb:3c:99:cf:2f:98:3b:37:1e:
cc:b4:54:a6:bd:85:46:8a:27:ce:52:44:8d:2d:87:
8d:04:3d:94:77:36:62:b3:70:ea:bf:bf:a9:49:c1:
0d:5d:80:2b:58:64:13:68:e1:f3:42:53:a2:0e:f0:
6c:39:8d:58:ef:00:7a:9a:88:a7:a3:79:a6:9f:fc:
86:44:11:44:a3:54:52:f9:0a:16:9c:9f:1c:19:08:
03:fa:c5:0f:18:bf:14:ec:05:12:fd:a4:67:01:30:
b3:47:61:9e:b6:c0:65:d4:52:bf:26:d6:88:cc:ff:
b2:5e:90:02:6e:00:61:2a:26:b4:1f:fa:0b:8d:62:
46:56:89:8a:18:c7:cf:03:e8:9e:c3:43:bd:1e:dd:
82:14:cb:16:87:b0:6e:23:7a:60:a3:43:29:89:17:
83:2c:26:b8:06:5b:f6:d9:93:e8:d1:40:77:cc:ea:
63:04:bd:52:9b:77:e4:16:ab:64:3b:c1:8c:4c:d8:
86:71:ab:72:53:d5:66:c8:22:13:22:1c:5d:f1:3b:
a4:82:e0:53:07:f5:12:20:82:d6:10:71:42:31:99:
ec:66:6d:49:f7:fe:74:02:f8:96:c7:82:36:e0:0a:
ae:2e:5e:59:db:87:5c:9c:c3:21:c9:87:c5:4f:b7:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:8C:08:5F:3A:41:0A:7C:07:DE:2E:45:ED:6E:FC:6C:E4:00:8E
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/7z-MCF86QQp8B94uRe1u_GzkAI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
69:04:bb:e5:57:8d:b0:04:51:8c:e6:43:d7:04:ab:da:43:3e:
70:0c:64:e9:c0:60:f8:91:c5:49:3f:6a:5e:04:60:0c:26:c2:
73:60:97:d9:16:ae:2f:0c:3f:d0:14:6f:c2:c4:83:88:55:fe:
12:6e:9c:d5:10:80:2a:6f:ce:7e:78:d3:fa:f5:7f:73:c1:e7:
2d:35:58:f9:49:ed:c4:5d:0b:de:16:64:bf:2f:d3:95:f6:98:
53:6e:fd:df:93:87:e9:9e:25:05:6d:c7:a3:81:3f:4f:bf:fe:
8e:15:c3:8f:13:e8:e4:7c:7d:98:fa:0a:a4:dc:cf:40:d1:d0:
89:e8:f9:11:de:39:c9:67:a1:73:3b:7d:1d:ec:e8:48:36:79:
3a:ac:75:1f:49:14:51:91:4a:b3:e3:35:36:f5:fd:72:45:97:
33:38:d7:55:1b:ec:e6:0b:9a:23:40:e7:3e:77:52:e2:5f:16:
1c:51:9e:e6:90:7b:38:1f:b4:3b:12:fb:a6:c7:e4:0a:bc:32:
a2:97:30:a2:d1:0a:b8:87:94:2d:75:38:fa:da:5a:89:31:92:
60:80:a1:b2:a0:cf:a7:46:92:dc:da:57:e3:be:a3:e9:49:d9:
57:fc:39:17:4f:6d:7b:95:17:b2:dd:0c:9c:69:b8:15:ab:20:
f1:65:d9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client