Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/7kBOew20AqCcSN7unx6uuoSngeg.roa
File: 7kBOew20AqCcSN7unx6uuoSngeg.roa (raw, json)
Hash identifier: oLLPx2wFkNsUiyxMXNv8D1J8xAnpI1BWVugs3oA0gdA=
Subject key identifier: EE:40:4E:7B:0D:B4:02:A0:9C:48:DE:EE:9F:1E:AE:BA:84:A7:81:E8
Certificate issuer: /CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Certificate serial: 019EB67268C1375B0D9C18919C5A54E2BEA6
Authority key identifier: DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/7kBOew20AqCcSN7unx6uuoSngeg.roa
Signing time: Thu 11 Jun 2026 11:30:11 +0000
ROA not before: Thu 11 Jun 2026 11:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31736
IP address blocks: 185.86.28.0/22 maxlen: 22
195.144.30.0/24 maxlen: 24
2a03:75a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.mft
rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:72:68:c1:37:5b:0d:9c:18:91:9c:5a:54:e2:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df5ac313b2f7c5cdc65032caa0648ad738f075db
Validity
Not Before: Jun 11 11:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee404e7b0db402a09c48deee9f1eaeba84a781e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:07:ed:b4:9d:07:e3:57:3a:40:c1:00:42:
ee:08:cf:32:e7:e5:1e:cb:f5:06:d5:75:3b:67:29:
7b:47:6b:56:9f:2d:8e:8b:ba:be:d0:ea:5f:4b:2b:
ce:2a:82:d7:dd:f6:d1:c9:ea:29:2b:d4:97:7c:c7:
63:c1:ea:f9:19:58:67:54:c2:7b:7a:16:bb:f4:14:
2b:2f:79:a0:f1:03:2c:d1:7a:74:59:c1:de:ea:9e:
ae:56:6e:0c:6f:55:e2:72:0a:7e:0c:e4:02:75:20:
2d:03:13:d0:61:82:d8:1f:0e:e0:93:5e:b8:bc:26:
09:c6:98:0c:8a:ca:89:30:57:bc:71:e3:7a:92:1c:
76:bd:35:a9:00:d8:46:ef:55:e7:6e:b5:1a:07:9b:
6c:77:aa:a8:31:6e:26:85:cc:59:c2:8b:94:05:f5:
2c:bf:84:a5:76:c1:48:25:89:4b:01:25:96:ae:fb:
94:e8:e3:fb:e5:b7:8d:7a:d3:5e:de:ac:6d:f3:cf:
2b:82:19:b1:c1:5f:44:57:ca:f1:70:bf:f5:8c:f0:
ef:e7:c5:c8:45:b6:b5:af:29:24:04:26:ae:90:20:
48:c1:92:61:7e:b5:33:10:5f:3a:d4:b7:ca:c3:31:
fb:b8:32:09:25:4e:65:a0:c6:64:ed:bf:84:5b:dc:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:40:4E:7B:0D:B4:02:A0:9C:48:DE:EE:9F:1E:AE:BA:84:A7:81:E8
X509v3 Authority Key Identifier:
keyid:DF:5A:C3:13:B2:F7:C5:CD:C6:50:32:CA:A0:64:8A:D7:38:F0:75:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31rDE7L3xc3GUDLKoGSK1zjwdds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/7kBOew20AqCcSN7unx6uuoSngeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eec68b-2720-4b45-b85b-8a8de37eb833/1/31rDE7L3xc3GUDLKoGSK1zjwdds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.28.0/22
195.144.30.0/24
IPv6:
2a03:75a0::/32
Signature Algorithm: sha256WithRSAEncryption
45:07:2d:69:67:ec:15:db:f6:9e:bb:15:0e:85:6f:66:fb:07:
7b:0a:a9:97:f0:19:39:a3:2f:75:52:e0:8a:53:15:08:e0:9a:
e0:ab:25:ab:62:06:fc:41:31:e1:88:da:48:1c:fb:d6:35:4b:
00:49:f3:cd:31:eb:74:37:35:2b:fa:a2:db:9d:92:4a:73:30:
0d:20:8f:c7:e8:e2:74:1e:7b:fa:b6:39:13:7b:54:06:93:98:
fa:56:26:0e:5d:5f:16:bb:27:76:57:3a:c4:b2:9e:de:1b:3c:
6a:0e:0e:7d:e5:c3:cb:3e:ee:25:85:97:1b:db:b1:4b:f2:4c:
47:ba:c2:b6:2e:43:64:d5:f1:bb:16:da:d1:f6:f2:cf:e5:5d:
26:17:11:b5:33:47:b7:48:17:4f:8a:b9:19:91:21:a9:68:d6:
58:c5:bc:12:36:93:d2:2b:fd:47:f7:ac:4f:5e:35:61:e6:15:
30:a9:5b:81:3a:59:f8:93:c4:88:5f:05:79:b0:81:51:a9:6d:
d0:cc:95:91:de:c0:51:e6:e9:f5:bd:f1:cb:62:3c:aa:3f:9c:
c3:26:02:33:21:16:2e:39:09:df:32:2a:94:c1:a4:f0:01:7f:
96:c2:e9:7d:45:99:99:d3:1b:d8:46:70:a2:56:72:b4:f6:7e:
93:d0:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:02 2026 by rpki-client