Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/B_7QNLEyOLRHkGziKQcoP3jS9N8.roa
File: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (raw, json)
Hash identifier: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=
Subject key identifier: 07:FE:D0:34:B1:32:38:B4:47:90:6C:E2:29:07:28:3F:78:D2:F4:DF
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF35FEFFAF75DA1B10B21A7DB00A656
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/B_7QNLEyOLRHkGziKQcoP3jS9N8.roa
Signing time: Tue 16 Jun 2026 10:21:33 +0000
ROA not before: Tue 16 Jun 2026 10:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139803
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f3:5f:ef:fa:f7:5d:a1:b1:0b:21:a7:db:00:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07fed034b13238b447906ce22907283f78d2f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:e3:40:e7:a6:dd:b8:86:c1:5e:37:9e:ca:
d9:ab:cb:8b:ff:fb:9b:c8:97:5a:d2:4d:1e:dc:a1:
3f:a4:26:ec:6e:70:a9:e0:37:ce:5b:60:6c:db:70:
e6:38:73:61:93:a6:d6:0b:98:05:e7:a9:06:d2:0f:
d3:08:b7:f5:e5:0e:9b:69:a7:26:0b:97:59:f0:49:
e8:21:e2:23:69:72:12:75:4d:14:2d:62:6f:73:ce:
3f:a5:b1:db:f1:04:8c:f2:d6:20:c5:1a:30:30:1d:
d4:f7:b6:73:4f:ee:d2:e1:63:fd:3b:e5:1b:aa:a6:
45:ac:7d:d2:cd:af:8d:8e:1f:85:4e:61:ab:70:d1:
85:b5:af:d0:97:e9:80:f3:eb:d2:52:de:eb:92:84:
63:57:b1:41:ee:8d:69:1d:f0:28:db:9b:dd:a7:72:
af:9a:52:d6:e3:25:b6:ad:6f:07:6b:88:a3:a4:5f:
8c:93:d7:fd:96:79:08:50:22:ca:f9:a0:54:d9:17:
cc:0c:12:7c:9d:25:e3:67:7f:9e:a7:56:a8:ca:db:
a1:bf:3c:7f:cd:3b:f0:8f:68:95:e5:ac:c1:3a:14:
2b:6a:bd:09:51:d4:dd:7b:be:12:71:21:92:d3:ff:
14:86:43:7c:c5:57:c9:ac:03:e0:14:6a:54:b3:d8:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:D0:34:B1:32:38:B4:47:90:6C:E2:29:07:28:3F:78:D2:F4:DF
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/B_7QNLEyOLRHkGziKQcoP3jS9N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
19:00:5a:fa:29:a4:d9:9d:a3:43:13:4f:2e:e6:82:af:f6:30:
d0:2e:85:73:8e:71:a0:24:a0:63:0b:a0:9e:74:40:2c:ce:79:
89:b6:1e:50:6f:15:ea:2a:e9:27:9f:81:c4:43:7a:f8:69:33:
0e:e8:48:75:ce:86:ac:1c:17:5d:11:95:8d:e7:8c:a2:84:dc:
a4:58:e3:a1:b6:35:e1:06:52:6b:58:32:40:07:76:28:6c:9e:
64:25:df:60:17:d3:38:be:2f:cf:af:1c:5c:46:e6:67:93:10:
70:d0:1d:26:92:49:13:58:06:c4:c2:14:c1:a6:4d:3f:eb:25:
0b:e7:27:f2:42:42:1b:fc:3d:27:1f:7f:86:f6:b5:de:86:97:
2a:d7:38:31:69:34:03:65:ba:c6:b1:77:b8:46:f9:a5:fa:b1:
85:25:0e:69:e2:16:92:be:d7:10:48:cd:a8:e7:5b:4d:c8:68:
e4:97:c2:d8:4a:e8:59:40:96:0b:0f:ab:7f:40:0e:e6:86:ec:
22:e2:56:b1:38:06:1c:12:36:d9:cd:42:f0:3b:60:2d:1e:f1:
72:ef:97:ba:5e:77:fb:24:02:ea:4d:04:31:7f:b1:a4:b8:fb:
13:40:1a:56:00:7c:d2:27:9e:eb:e1:41:79:3c:34:71:cd:f5:
56:39:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:04:09 2026 by rpki-client