Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa
File: 7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa (raw, json)
Hash identifier: 02qwEv7GDGKTAQsJKIO+MBvgNnjaQx6u58d0cZrljtQ=
Subject key identifier: EC:74:18:F5:F4:CD:C1:80:0A:9C:74:1D:56:45:1D:5A:43:FB:70:CA
Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial: 019EF456E42231844D4ACD36AFDADBCFC88A
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa
Signing time: Tue 23 Jun 2026 11:56:35 +0000
ROA not before: Tue 23 Jun 2026 11:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199912
IP address blocks: 88.214.24.0/24 maxlen: 24
91.238.180.0/24 maxlen: 24
91.239.208.0/24 maxlen: 24
109.202.246.0/24 maxlen: 24
185.55.240.0/24 maxlen: 24
194.24.161.0/24 maxlen: 24
2a12:5e40::/32 maxlen: 32
2a12:5e41::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:56:e4:22:31:84:4d:4a:cd:36:af:da:db:cf:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Validity
Not Before: Jun 23 11:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec7418f5f4cdc1800a9c741d56451d5a43fb70ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:b5:04:35:c5:03:a7:21:d5:3d:8b:0c:0f:
9b:5e:ea:25:51:c7:7c:28:73:63:c3:01:c9:03:33:
bd:a3:0f:92:8c:91:b5:a8:42:b8:42:ff:bf:03:ee:
1a:50:2c:c3:94:d5:72:1c:68:1b:13:e3:f3:6d:80:
57:a2:95:a3:5d:41:81:5c:de:da:8e:bb:cf:78:95:
1b:c2:db:f4:78:3b:54:59:05:99:09:7c:e0:be:4a:
08:11:b1:e8:48:1f:68:6f:88:3b:fa:3d:ef:8a:33:
36:98:c7:19:f5:94:03:14:06:1a:7c:2c:13:98:5d:
09:ac:51:bd:56:0c:59:50:e5:7d:f7:20:64:fa:a0:
2c:75:b3:df:22:85:48:70:37:ce:b7:3d:e3:13:e2:
c9:18:de:93:27:00:a0:15:21:0e:df:34:f7:bf:90:
76:63:1c:cb:f8:8f:2d:73:c4:91:69:86:89:bc:cb:
42:ae:32:a8:6f:6f:e9:5c:86:be:f9:ce:12:4c:7d:
07:53:fb:b6:df:10:3a:21:5c:9b:cd:89:78:c1:ff:
09:d6:89:fb:fd:40:19:71:72:25:db:21:52:5a:5b:
e8:23:26:d5:ec:10:da:85:76:9b:84:73:83:32:a2:
40:ac:83:66:14:db:01:bf:bb:e8:e5:84:93:a8:2e:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:18:F5:F4:CD:C1:80:0A:9C:74:1D:56:45:1D:5A:43:FB:70:CA
X509v3 Authority Key Identifier:
keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.24.0/24
91.238.180.0/24
91.239.208.0/24
109.202.246.0/24
185.55.240.0/24
194.24.161.0/24
IPv6:
2a12:5e40::/31
Signature Algorithm: sha256WithRSAEncryption
0a:16:fc:e8:9e:1f:4b:a7:b2:0b:bc:60:11:2f:27:21:95:c5:
7f:fc:d2:68:32:af:e9:2c:b4:77:f7:9d:d8:99:d1:86:da:1f:
15:3e:e0:79:83:30:96:17:3b:43:d5:12:42:b4:a9:f2:77:5d:
8c:0d:b6:25:72:c9:71:a1:c7:03:f2:88:7a:da:78:73:09:ba:
1e:34:a9:6e:d6:bf:66:b6:73:8f:9e:dd:ad:47:b6:7d:77:09:
cd:91:77:51:71:2d:55:98:49:34:f5:ca:d5:bc:2f:17:89:7f:
97:d9:a9:fb:03:94:48:4b:24:19:09:57:51:d0:f5:c5:49:e6:
d1:e5:cc:ab:79:84:ea:e2:c8:a7:9d:1b:ca:d7:9e:52:b6:a2:
79:f9:3d:23:a1:64:a7:f0:38:4a:29:56:fb:26:fe:a5:27:ae:
df:32:92:18:82:fe:c6:ed:94:96:55:4b:96:f8:8d:f8:dd:2d:
0e:e8:40:68:7f:71:4c:d4:06:2b:b1:47:32:15:a4:07:f7:56:
7c:f5:9c:a6:07:9a:8b:51:23:cf:b6:03:98:e1:f4:58:8d:3c:
98:9e:fd:66:e8:2d:cc:4d:da:53:ba:f4:04:e8:61:e1:40:3a:
27:ae:65:d0:4a:16:60:fa:52:74:93:9b:1b:0f:15:12:b7:d9:
86:22:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 17:52:38 2026 by rpki-client