Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/7l7KxRCau47UYfLQ6nFCQh8OO4k.roa
File: 7l7KxRCau47UYfLQ6nFCQh8OO4k.roa (raw, json)
Hash identifier: QvZhEZbpdkG/y8Ol7BucQrlHqkPAhPZcbBhUGf6BsQQ=
Subject key identifier: EE:5E:CA:C5:10:9A:BB:8E:D4:61:F2:D0:EA:71:42:42:1F:0E:3B:89
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019F048B2846B1F576CEC7F4BD0463C27E52
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/7l7KxRCau47UYfLQ6nFCQh8OO4k.roa
Signing time: Fri 26 Jun 2026 15:27:36 +0000
ROA not before: Fri 26 Jun 2026 15:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 144.124.209.0/24 maxlen: 24
144.124.216.0/24 maxlen: 24
144.124.217.0/24 maxlen: 24
144.124.218.0/24 maxlen: 24
144.124.219.0/24 maxlen: 24
144.124.220.0/24 maxlen: 24
144.124.221.0/24 maxlen: 24
144.124.222.0/24 maxlen: 24
144.124.223.0/24 maxlen: 24
158.94.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:8b:28:46:b1:f5:76:ce:c7:f4:bd:04:63:c2:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Jun 26 15:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee5ecac5109abb8ed461f2d0ea7142421f0e3b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:5f:5f:f1:a8:66:88:21:f7:66:4c:3c:82:
07:e3:1a:ce:81:02:73:3b:7e:08:94:54:73:95:b1:
f2:72:2a:be:da:81:76:9f:99:bf:15:f1:9a:ce:46:
b4:65:72:fe:97:c8:8b:ac:eb:43:7b:db:a9:d1:ee:
a5:29:f5:87:70:c1:ff:de:50:b2:b2:12:f5:8a:25:
21:a2:f6:6e:8f:dc:b6:7b:4d:42:dd:c3:6c:71:f1:
e9:3b:d0:f8:c6:d1:a0:b9:74:b9:99:99:38:72:55:
2c:b8:c9:0d:b7:2d:97:3a:d5:c8:0c:f1:09:23:c3:
27:8b:79:15:f6:a9:65:5a:dc:04:c9:20:bb:a9:d2:
b4:d2:a9:0a:f1:bc:f8:d2:f5:49:f7:c8:af:6d:e1:
5f:18:31:37:98:0e:1d:04:a3:b1:0f:ab:f5:80:a7:
80:30:65:4f:f8:15:cc:46:0f:4c:69:65:1a:c6:46:
f5:4a:aa:b3:8a:d0:81:0a:60:58:98:1e:67:ba:79:
5b:bf:42:d2:46:4a:a3:d3:6a:c9:a6:ac:17:ba:87:
08:93:19:51:32:50:82:00:42:94:ff:db:09:ef:3e:
ae:aa:09:cb:f2:1b:1f:56:28:91:b1:8e:97:19:3a:
6c:79:ac:ff:b8:37:ae:95:dc:bc:33:af:a7:4a:bf:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5E:CA:C5:10:9A:BB:8E:D4:61:F2:D0:EA:71:42:42:1F:0E:3B:89
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/7l7KxRCau47UYfLQ6nFCQh8OO4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.209.0/24
144.124.216.0/21
158.94.213.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e8:31:1c:29:65:23:7f:d1:2a:c5:da:d3:96:e5:67:d1:9a:
b4:66:5d:cd:18:8c:3d:3a:e7:29:52:a8:ed:e8:74:1c:b2:a8:
c4:54:e6:1a:ce:fa:c8:2c:58:63:14:89:73:c2:4b:14:69:65:
68:fa:44:68:20:a2:79:f9:33:c0:0c:e6:67:95:fb:d5:40:59:
92:b8:d2:8a:33:9a:16:34:e6:56:28:3d:80:78:92:45:ae:24:
88:fc:d5:55:c2:88:5f:00:4d:20:9e:e9:de:88:00:24:bd:42:
eb:96:5e:0f:99:65:9d:71:2a:bf:91:8f:82:37:6b:78:fa:8f:
5b:a2:88:70:12:13:41:f4:e3:7a:f8:73:70:ea:43:88:7c:51:
67:2a:d0:ea:95:c9:10:20:82:41:bb:e7:92:ab:82:e3:ba:17:
6b:1e:42:bc:9a:07:1a:f2:43:1a:bd:21:0f:45:96:59:54:2f:
28:f0:e0:41:33:2f:e4:0c:95:a4:71:4b:96:a7:43:99:ae:b4:
e6:20:3e:47:24:89:37:5b:80:5d:ad:44:a5:55:96:da:a4:42:
28:db:3d:fe:14:18:64:bb:12:13:ad:5e:1c:65:fa:4e:13:bf:
27:95:27:e8:0b:3f:0d:2d:70:fa:42:2c:75:92:7a:48:ff:9b:
a1:56:f0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:01:50 2026 by rpki-client