Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/G7ks3AJNnsjk17JxOkHVEm7hjp4.roa
File: G7ks3AJNnsjk17JxOkHVEm7hjp4.roa (raw, json)
Hash identifier: 4kzHcc5N6LWqaFd0TB8ArCnvPg7g52fAUaR1DMry250=
Subject key identifier: 1B:B9:2C:DC:02:4D:9E:C8:E4:D7:B2:71:3A:41:D5:12:6E:E1:8E:9E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01A183CEA40FB3730CA9438855EF8BFF9E40
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/G7ks3AJNnsjk17JxOkHVEm7hjp4.roa
Signing time: Wed 28 Oct 2026 18:38:40 +0000
ROA not before: Wed 28 Oct 2026 18:38:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ce:a4:0f:b3:73:0c:a9:43:88:55:ef:8b:ff:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 28 18:38:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bb92cdc024d9ec8e4d7b2713a41d5126ee18e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:a1:9c:f4:9f:23:3b:29:33:b0:dd:e5:22:
f6:d1:f7:f7:4a:e5:b6:63:d6:af:3a:1d:a2:27:20:
d6:24:ec:b1:a6:d9:f3:2a:5e:01:d6:ae:52:7c:8c:
50:2b:9b:77:f6:51:b9:59:2f:59:6b:f9:07:f5:75:
f8:4d:cb:8a:75:0e:41:e1:55:3c:b7:37:0b:4e:d7:
1a:16:2e:42:cb:ae:b4:40:df:67:4d:fb:4f:6f:77:
c1:84:b7:62:16:4a:1a:86:fd:23:22:f1:10:60:7e:
0e:01:60:99:de:2e:2b:4b:cf:3a:97:8f:08:a4:6d:
49:f1:45:c1:19:39:5d:20:a1:bb:d6:0b:7d:63:ca:
d7:60:b4:5e:d7:b0:e6:74:bc:88:da:d0:91:b8:da:
23:b9:a8:d3:18:06:bd:34:88:69:05:61:c6:62:69:
be:48:71:f5:fb:80:b1:db:0f:2a:e9:7f:35:a3:6a:
04:cf:13:6c:a0:41:d0:0e:f0:ef:5f:cf:5e:0d:5f:
86:4e:51:b6:a9:17:90:a0:d4:cd:5d:2c:e5:64:4c:
fa:a0:c9:14:ee:e4:08:ed:18:5c:7c:2a:4a:f0:67:
27:1f:80:b7:a9:0c:f7:be:5f:44:c3:db:78:69:d8:
12:d3:dd:0f:c4:3e:37:be:33:58:f1:f0:e7:91:f0:
24:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:2C:DC:02:4D:9E:C8:E4:D7:B2:71:3A:41:D5:12:6E:E1:8E:9E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/G7ks3AJNnsjk17JxOkHVEm7hjp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.32.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d6:8d:13:52:a0:80:70:92:1f:4d:a1:d8:a2:76:24:a8:37:
ac:73:97:68:ca:71:f5:0a:7e:ce:ea:eb:81:84:91:68:c1:d0:
d5:55:83:f8:c0:4e:71:6c:15:3e:c9:d2:fc:37:08:fa:91:cd:
28:2a:0c:f8:62:dc:7b:cc:b4:11:be:ac:9f:68:67:6d:66:c3:
e2:80:57:37:34:7d:48:da:c2:30:b6:ea:05:18:c8:61:d4:64:
93:03:ab:81:c4:1e:5a:59:2f:64:c2:68:f5:25:b1:1f:dc:21:
f6:05:ee:7a:87:ad:0b:2f:2e:c9:85:9d:b4:b0:22:41:f7:45:
9e:16:aa:f2:1e:c0:68:aa:c8:5d:9d:1d:57:59:bf:19:7a:92:
e2:21:83:d1:0e:c8:ec:cb:34:15:39:bc:6a:96:a6:68:08:06:
f9:41:f1:0e:b5:2a:36:18:0f:73:67:7e:62:33:54:ba:da:69:
a4:77:b0:b9:d5:4a:45:19:e2:40:16:5b:2c:db:7e:8d:2b:ab:
53:b2:0a:3e:78:a9:36:75:59:7f:7f:35:40:2c:8d:f8:0b:f7:
d7:17:91:22:ea:c8:eb:6f:74:a3:d0:42:2a:fc:f5:3e:5e:2e:
91:8c:f4:34:6e:8a:49:8f:82:19:e3:16:a4:ff:25:4d:54:a6:
39:26:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:32 2026 by rpki-client