Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/T7EgT-3QMaQivWjwGLG6mTGecqo.roa
File: T7EgT-3QMaQivWjwGLG6mTGecqo.roa (raw, json)
Hash identifier: yOc4BT4tVn/n/rq/eUZrppnaOWgg0+Tfj7v9llE9zjc=
Subject key identifier: 4F:B1:20:4F:ED:D0:31:A4:22:BD:68:F0:18:B1:BA:99:31:9E:72:AA
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 019FB67345A730A23363E1685D74031C6985
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/T7EgT-3QMaQivWjwGLG6mTGecqo.roa
Signing time: Fri 31 Jul 2026 04:33:55 +0000
ROA not before: Fri 31 Jul 2026 04:33:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 85.8.148.0/24 maxlen: 24
185.176.88.0/24 maxlen: 24
195.216.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 20:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b6:73:45:a7:30:a2:33:63:e1:68:5d:74:03:1c:69:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Jul 31 04:33:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fb1204fedd031a422bd68f018b1ba99319e72aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:20:fa:d3:dc:36:ff:de:b3:41:fc:c7:11:
03:ce:86:8a:22:b4:24:99:6f:1b:19:91:9f:86:96:
48:d2:ab:22:20:56:76:c1:f1:1a:af:f5:43:85:8b:
af:eb:f2:73:ac:70:3a:e5:e9:a4:79:db:6c:68:68:
88:3d:79:15:8b:23:65:41:06:4d:4f:de:ac:58:07:
41:48:b8:f8:d1:91:17:4a:00:b1:4b:8f:21:89:10:
17:02:35:a8:03:e1:dc:ac:f3:0a:7e:5f:e8:39:3f:
01:fc:0b:1e:06:bd:8f:2c:3c:05:9b:6d:8e:9e:dc:
83:e2:a8:36:92:73:be:25:ae:ef:a5:12:1c:0c:9e:
4e:48:b5:7c:1b:aa:04:c9:9c:37:4b:66:18:ac:58:
75:97:6c:ce:b1:5d:cf:96:da:97:32:76:e5:b0:e1:
b3:36:30:ae:32:e1:bf:aa:93:74:ce:3d:25:7f:14:
64:57:de:16:0b:21:62:c4:21:a4:af:d2:7e:86:3c:
13:c8:f1:b6:75:c2:70:d2:33:5a:1a:e6:33:2a:37:
98:79:b5:96:7e:21:8d:78:f6:89:1e:68:61:32:48:
70:58:20:58:c7:26:a6:5b:35:d3:44:21:01:7d:c5:
96:95:7c:50:07:ee:ef:e9:9d:09:66:69:2a:a1:8f:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:20:4F:ED:D0:31:A4:22:BD:68:F0:18:B1:BA:99:31:9E:72:AA
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/T7EgT-3QMaQivWjwGLG6mTGecqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.148.0/24
185.176.88.0/24
195.216.151.0/24
Signature Algorithm: sha256WithRSAEncryption
47:00:65:81:84:c5:01:99:42:21:3f:1c:59:c3:b8:cf:ca:9f:
77:18:d0:fa:93:7d:bc:e4:75:1b:d7:40:d1:69:26:78:d9:ed:
94:3b:f1:d5:ac:5a:97:84:18:a1:0e:e7:74:8a:1e:03:10:49:
8c:06:9d:75:e1:db:74:24:ca:48:82:4e:ab:4f:6f:dd:a6:e9:
93:ec:67:29:34:b4:cb:18:0a:3e:26:86:cb:7b:43:f4:07:1a:
e1:ff:80:0e:1b:4c:91:60:c2:37:5e:9c:83:f8:fc:9f:9a:cc:
87:79:48:42:dc:6e:29:95:7e:9a:ca:a5:0a:62:47:a2:1f:57:
da:47:46:21:64:e1:95:db:a7:55:68:f9:81:27:b6:c5:eb:87:
9e:9e:5c:ae:68:b0:fa:d0:80:99:61:b9:28:e6:14:03:1c:d1:
11:31:30:4b:61:89:bd:4b:0a:b4:3b:e1:42:8f:10:5e:37:3d:
73:52:81:4f:e8:ac:3c:08:8e:cc:82:74:a9:39:e8:f3:79:60:
92:4c:ea:19:d0:05:78:49:ab:f8:3f:3f:2d:f5:a4:93:3e:bb:
95:9b:01:25:bc:6d:f7:ef:b3:2a:ea:43:86:20:cd:8e:d7:88:
86:6f:a9:49:95:a1:36:43:0b:1d:c8:79:80:51:d9:1d:5b:4c:
6a:ee:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 02:26:30 2026 by rpki-client