Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/7z7bFp40wPTbt5RvIZtTppWl7AM.roa
File: 7z7bFp40wPTbt5RvIZtTppWl7AM.roa (raw, json)
Hash identifier: lwNSwOHOkunLWIvv4A5ENj1DeD3yKEj+lVowF+Ei8vY=
Subject key identifier: EF:3E:DB:16:9E:34:C0:F4:DB:B7:94:6F:21:9B:53:A6:95:A5:EC:03
Certificate issuer: /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial: 019F2368C8B2043A62B9EA4B5F704A50C759
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/7z7bFp40wPTbt5RvIZtTppWl7AM.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205479
IP address blocks: 92.118.28.0/22 maxlen: 24
92.118.29.0/24 maxlen: 24
2a09:a440::/29 maxlen: 48
2a09:a443::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c8:b2:04:3a:62:b9:ea:4b:5f:70:4a:50:c7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef3edb169e34c0f4dbb7946f219b53a695a5ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:a3:bb:68:de:bc:0e:b5:7d:f5:70:00:38:
e2:1c:cb:7b:62:3e:33:cf:77:32:41:a7:3e:81:3f:
12:eb:98:fb:5b:d9:f4:26:14:41:ea:47:49:be:a1:
7f:c2:89:23:9f:4a:11:db:7b:16:63:2d:60:7c:51:
de:27:a8:e5:9b:82:41:43:f6:b8:05:da:aa:7f:96:
6f:c7:96:a6:ea:c6:e1:dd:da:95:b7:1c:32:fe:0e:
0e:6b:be:7e:bb:a6:65:b9:b9:d1:b5:ee:f8:90:d5:
3a:d4:b6:d6:47:45:ad:f4:b0:0d:2c:1e:1b:72:72:
8d:58:73:4c:a5:71:87:e8:a1:16:2f:99:71:7a:df:
5c:9e:2f:f3:70:a8:3e:a5:c2:ef:2d:0e:5b:2d:b2:
1e:a9:ea:ef:18:2c:06:01:e8:39:69:b9:09:99:08:
ab:d6:f6:ec:dc:3b:21:95:1c:b2:0b:cb:1e:f1:36:
7c:e2:59:b0:39:6f:e9:c3:e4:94:b2:0d:e9:ae:2c:
80:cd:93:f2:d6:f3:e6:db:17:05:52:8d:1b:6d:4e:
99:6e:26:92:0e:5c:07:32:4a:a7:9d:02:87:7c:66:
44:e3:86:15:ea:84:da:61:45:69:36:58:09:ec:cc:
70:3e:3c:c1:3d:ae:9d:87:83:34:ba:47:db:33:f7:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3E:DB:16:9E:34:C0:F4:DB:B7:94:6F:21:9B:53:A6:95:A5:EC:03
X509v3 Authority Key Identifier:
keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/7z7bFp40wPTbt5RvIZtTppWl7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.28.0/22
IPv6:
2a09:a440::/29
Signature Algorithm: sha256WithRSAEncryption
1e:28:24:aa:8b:10:5f:b4:9a:a5:e4:92:ae:b8:f5:e5:e8:88:
70:ad:d2:d5:d2:65:b3:aa:12:33:54:f5:e8:62:d5:a8:90:98:
6d:6e:43:69:76:db:84:3a:19:99:6c:7c:66:cd:25:85:06:ca:
6d:4d:73:2c:13:71:48:09:f3:53:cb:be:b0:7d:c6:b9:53:ef:
ce:9f:4b:4d:8b:8d:7c:df:68:10:4b:49:fa:56:52:c6:2c:67:
b8:64:66:a2:fe:bf:b5:4c:59:ac:8a:75:be:49:c0:0f:95:9c:
39:2c:dd:0e:35:2c:82:ae:b9:c1:83:09:77:8f:48:d4:7f:76:
5c:1c:82:4b:b7:b8:45:7b:7c:44:b9:a4:11:b9:a5:a3:5f:ba:
25:17:31:8a:fd:91:ed:7d:54:fa:71:4e:50:a2:25:34:73:0e:
0a:6c:ed:42:68:d1:78:5d:83:87:a1:32:bb:de:5c:fb:a0:3d:
70:91:b2:63:f6:e6:d6:ec:6c:ab:a6:db:63:67:bd:2a:ae:f9:
1b:ce:39:fb:37:50:04:6e:eb:6a:2b:65:32:13:46:52:d2:62:
6d:56:e8:52:ac:1e:9a:59:c5:91:e6:7e:82:b8:02:eb:7d:f9:
a7:28:f5:09:95:bd:cd:94:ba:1f:05:17:1c:84:dd:ff:20:78:
4a:5c:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:28:29 2026 by rpki-client