Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa
File: 7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa (raw, json)
Hash identifier: wWQY3pRKERmG9ujMWcp884MAVgXLED92sf1A7NartQU=
Subject key identifier: ED:FF:AA:93:48:CA:8E:7D:C7:BF:AC:A0:49:34:AA:5F:E0:39:D9:3F
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 019EF44F99B5AF1D78291A9A1E128F1EC08E
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa
Signing time: Tue 23 Jun 2026 11:48:37 +0000
ROA not before: Tue 23 Jun 2026 11:48:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 77.69.148.0/24 maxlen: 24
82.194.32.0/19 maxlen: 19
88.201.37.0/24 maxlen: 24
88.201.99.0/24 maxlen: 24
185.165.176.0/22 maxlen: 22
193.188.96.0/19 maxlen: 19
193.188.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:4f:99:b5:af:1d:78:29:1a:9a:1e:12:8f:1e:c0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jun 23 11:48:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edffaa9348ca8e7dc7bfaca04934aa5fe039d93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:24:3e:f0:43:c3:e0:72:b1:6c:95:4e:ce:
de:df:f7:4c:e6:e6:08:44:9f:91:04:42:ce:1b:02:
37:e2:2c:bf:87:55:e3:8c:82:df:eb:ab:69:af:5d:
cf:c9:0f:c7:7b:b2:15:ec:f3:2c:e7:e7:40:54:46:
88:af:90:41:23:63:e3:55:c1:db:35:07:3c:6f:b8:
d8:e6:72:c6:2f:f5:4a:62:f6:20:ec:1a:c8:56:22:
6f:f2:d7:ca:cd:20:44:f6:ff:2e:59:7e:26:f5:33:
69:07:a8:f2:b0:41:f9:f6:fe:c4:30:98:4e:99:19:
66:a9:6f:f9:21:bb:52:eb:2c:70:ea:4a:5b:84:63:
b1:ba:52:62:07:54:a2:ef:f6:37:5c:91:c8:6e:05:
2f:9f:f9:1d:ee:c8:01:62:97:01:a4:99:c0:a7:25:
a6:dc:f1:bf:c8:03:ce:46:7e:36:69:69:10:ad:16:
9b:b8:20:5b:bd:25:d0:5b:ab:d6:8d:82:11:2e:ff:
bc:52:15:61:82:bc:31:93:b7:9a:2b:f4:cb:be:40:
7e:72:39:91:27:50:82:eb:da:7c:5b:32:b2:74:b4:
ff:20:63:63:22:2b:67:a0:17:91:b1:8d:a2:a7:ef:
48:53:7b:27:88:3a:8a:de:23:a3:1f:70:a2:63:c7:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:AA:93:48:CA:8E:7D:C7:BF:AC:A0:49:34:AA:5F:E0:39:D9:3F
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.148.0/24
82.194.32.0/19
88.201.37.0/24
88.201.99.0/24
185.165.176.0/22
193.188.96.0/19
Signature Algorithm: sha256WithRSAEncryption
34:f9:57:3c:78:76:31:03:95:48:76:42:81:27:16:50:06:4b:
4d:30:8d:69:53:38:5e:ae:5f:2a:b3:da:eb:6f:cf:e8:61:c4:
30:3c:76:2f:13:2d:4e:b0:a5:be:9e:42:f4:b9:b9:76:40:ae:
e8:53:6d:85:52:bc:72:a9:9c:c5:6b:41:c7:d7:fb:60:34:8b:
a1:46:aa:25:67:fe:5d:64:ca:d5:e8:9d:82:58:0a:b3:24:ba:
22:fe:48:41:0b:1a:42:af:5b:a8:9c:6f:c4:44:d4:f6:ba:9b:
6b:06:e3:24:ac:25:b0:ae:95:d9:7c:a6:d0:9c:c9:f4:d9:a4:
4f:c0:d4:08:bd:b9:78:d8:c5:36:9d:79:4a:e9:03:bf:c0:1b:
5d:4d:a3:32:5a:fe:84:1a:c7:54:ce:44:15:72:5d:70:f6:96:
19:26:6a:8e:0c:af:8a:4e:df:64:dd:47:8a:05:7f:c8:8c:9d:
7f:6a:67:9c:c1:b0:1f:0a:34:e8:f0:15:57:4c:9d:1b:d8:0d:
ee:db:cd:48:c6:ed:3e:b3:36:e9:cb:02:26:8a:89:07:ec:b1:
27:f0:b3:d8:ed:86:1f:b6:4e:c5:f6:41:bb:85:d5:71:08:a8:
a2:94:da:31:eb:f2:42:62:ce:72:8d:49:94:b3:4f:2b:94:72:
14:0b:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:13 2026 by rpki-client