Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7vzX0BzavwdqTs_N0djpb7BPUhU.roa
File: 7vzX0BzavwdqTs_N0djpb7BPUhU.roa (raw, json)
Hash identifier: HU6nPh9Zehh36UncCB4DV1JN0YkDO7McUb6JOD7fimg=
Subject key identifier: EE:FC:D7:D0:1C:DA:BF:07:6A:4E:CF:CD:D1:D8:E9:6F:B0:4F:52:15
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A047BEABCCB6A5806586779988271D1542
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7vzX0BzavwdqTs_N0djpb7BPUhU.roa
Signing time: Fri 28 Aug 2026 09:41:13 +0000
ROA not before: Fri 28 Aug 2026 09:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 62.41.24.0/24 maxlen: 24
92.71.160.0/19 maxlen: 19
194.122.83.0/24 maxlen: 24
194.231.132.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.211.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:be:ab:cc:b6:a5:80:65:86:77:99:88:27:1d:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 28 09:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eefcd7d01cdabf076a4ecfcdd1d8e96fb04f5215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:cb:99:b0:11:b9:1b:ad:4b:65:a3:11:93:
54:56:96:32:e3:7a:17:3b:1b:52:22:2e:62:ef:fb:
8c:90:e5:00:70:d5:63:bc:b4:72:b7:fd:40:5e:23:
be:2e:9d:e9:7e:dc:f2:d7:88:88:37:e2:c8:4f:1c:
35:a8:8f:79:fa:4d:4f:cd:d0:7f:8b:d3:d5:0e:f7:
c1:af:ed:50:fb:3f:98:e7:d8:9c:f9:5f:97:c8:8b:
22:d2:9e:16:9d:34:c8:e4:bf:b4:8f:f6:5c:c9:c7:
b0:7d:04:7d:a4:d9:1a:70:00:05:47:ab:b3:71:3f:
42:85:2e:15:6b:57:23:7b:8e:81:d1:45:17:18:bc:
92:99:7b:52:e2:b7:40:e8:de:af:86:d7:2c:cc:ca:
d3:76:8a:52:4b:13:49:b3:0f:0c:85:98:ff:b8:19:
90:1a:0e:fe:94:08:1d:60:4c:61:fd:bf:aa:a1:e8:
1e:0e:43:92:c1:89:20:c3:11:4a:bf:52:43:ec:34:
be:cd:5f:87:71:e4:55:e1:4c:43:0b:d3:16:84:6e:
1d:a1:4d:65:7e:91:52:a5:68:74:d6:44:6b:22:da:
da:ce:70:45:06:b5:bb:5f:28:17:0c:f3:05:2d:55:
85:51:07:b4:81:63:b1:c9:77:c8:44:13:4d:2b:7c:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:D7:D0:1C:DA:BF:07:6A:4E:CF:CD:D1:D8:E9:6F:B0:4F:52:15
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/7vzX0BzavwdqTs_N0djpb7BPUhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
92.71.160.0/19
194.122.83.0/24
194.231.132.0/24
194.231.142.0/24
194.231.211.0/24
212.189.80.0/24
212.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a8:c8:79:80:f2:2d:4f:c5:53:ca:0c:4f:94:e1:45:8a:70:
18:d8:65:e4:df:13:8a:26:13:04:5a:6f:af:e4:70:1b:d6:05:
49:08:85:8c:06:dd:77:52:cf:17:30:65:25:74:e4:c0:fa:00:
d1:80:93:52:2d:24:03:8c:af:85:4e:4d:13:89:f6:94:4c:c9:
81:05:70:b1:c6:86:3d:58:5c:96:07:0f:94:f0:54:69:a5:39:
51:07:cd:4c:4f:65:e8:21:02:98:11:5e:53:87:aa:cb:87:4b:
b7:84:34:63:28:95:e0:d7:8b:a9:6c:f4:4e:09:4b:ae:77:d4:
8a:59:79:00:ea:15:6f:f3:63:bc:0c:5d:f9:a7:74:8a:e4:74:
df:c3:88:5a:6b:e2:d5:be:78:a0:4f:bc:fd:2b:84:75:5f:6e:
e7:58:65:06:85:02:b9:9e:a1:86:e5:bd:c0:53:28:93:e8:0a:
21:e1:c9:d1:e9:dc:cc:d1:e4:bd:77:f9:80:7a:34:5d:32:43:
ba:30:c5:c6:25:fb:03:43:db:6f:0d:52:93:d8:03:66:6f:3f:
13:e3:be:ce:d0:e0:6d:34:2b:6e:ee:af:f1:cd:36:ed:b7:76:
0d:8a:73:be:70:e8:cb:23:1c:d4:7c:4b:2e:3a:21:8d:5e:53:
6f:4d:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:29:56 2026 by rpki-client