Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JJNlpeHQeh0YhAaaBMaJyHwfRY.roa
File: 7JJNlpeHQeh0YhAaaBMaJyHwfRY.roa (raw, json)
Hash identifier: zYjLw0pUePW/9T/a8AzAxFSjCO9eJZALl9gKSDe/mwg=
Subject key identifier: EC:92:4D:96:97:87:41:E8:74:62:10:1A:68:13:1A:27:21:F0:7D:16
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019C9E1D3492E88F43560BEC9683C722DD5F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JJNlpeHQeh0YhAaaBMaJyHwfRY.roa
Signing time: Fri 27 Feb 2026 08:00:39 +0000
ROA not before: Fri 27 Feb 2026 08:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
94.177.122.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Mar 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:1d:34:92:e8:8f:43:56:0b:ec:96:83:c7:22:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 27 08:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec924d96978741e87462101a68131a2721f07d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b2:cd:94:7c:54:36:91:ed:8d:5a:e2:a3:94:
16:64:dc:50:03:22:69:02:c3:82:5c:ec:c6:dc:7b:
0f:50:e8:ce:ae:15:fd:b6:f4:0d:ef:7d:95:fe:3a:
f1:f4:0d:19:23:d2:07:52:67:80:d0:6e:e9:68:6d:
11:09:e6:24:32:a0:8c:c3:ee:59:c5:76:e1:43:f9:
c6:b2:b0:d9:4f:d5:19:f0:20:be:b4:e0:57:89:49:
9f:10:83:b5:1f:f6:c5:fd:c7:c2:d5:c4:c8:18:91:
19:0d:eb:30:84:2e:ae:37:08:08:b9:c1:17:29:28:
c5:f9:9b:45:d5:5e:5c:44:a4:c2:76:59:c0:b9:fb:
61:e7:92:99:47:5e:5c:2c:ae:f8:10:24:3b:0c:97:
00:76:4f:b9:aa:00:ad:76:4d:e4:64:5c:24:e4:46:
48:dc:df:9c:99:70:fc:80:b5:42:30:57:6a:55:55:
59:f8:df:32:c4:c1:7f:f5:44:0f:a3:5e:7b:bb:82:
b1:26:a3:3f:7c:ec:c6:fa:94:08:84:3e:8c:ce:93:
09:e6:83:da:06:29:87:61:ad:c0:52:48:cd:f5:5c:
ca:81:0d:cf:02:35:98:bf:52:bd:3d:9f:2f:25:5d:
2e:fd:e5:39:1b:16:23:70:e7:e7:ea:97:a9:cc:3a:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:92:4D:96:97:87:41:E8:74:62:10:1A:68:13:1A:27:21:F0:7D:16
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7JJNlpeHQeh0YhAaaBMaJyHwfRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
94.177.122.0/24
139.28.99.0/24
194.50.94.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:80:d2:20:e7:4c:d0:2f:aa:8c:c2:72:7f:59:3a:71:b9:d7:
6c:9a:28:63:dc:a6:0d:45:5f:0c:7c:b3:e1:6d:22:18:61:96:
c0:de:76:0e:b3:da:5c:13:c7:80:cf:ba:e1:b3:f8:f4:0a:f2:
fe:ea:7d:9f:eb:cd:60:5a:00:20:b9:6f:c4:ee:74:63:f5:58:
35:e9:2a:61:ed:04:f4:53:ae:b5:8b:ff:c2:64:30:23:39:b3:
ae:13:24:08:51:85:96:82:41:0b:ac:d2:78:1e:c4:1f:c6:32:
b7:d6:2a:e1:92:c8:47:30:54:05:90:f5:bd:03:3d:0a:75:1b:
57:98:f0:11:4f:b8:0f:1f:68:e2:e7:60:54:71:50:c7:77:b0:
8b:18:82:db:a1:0a:55:e6:f8:4c:4a:36:eb:b5:ef:15:0c:6e:
80:0a:ab:66:ee:71:7d:52:d0:87:b7:fd:b7:72:22:0d:70:da:
9b:66:ec:16:07:49:6e:67:f3:1e:9d:62:63:85:75:24:3d:85:
39:d5:ab:1d:9e:ce:ee:01:d8:1d:48:be:4c:e5:cc:2d:e1:eb:
cb:f4:77:e3:3e:72:4f:ee:02:ba:b0:61:ac:38:b2:28:9d:b8:
45:98:d8:d5:04:ac:76:46:f7:cb:5c:8f:22:97:4f:e1:11:74:
ed:91:7a:83
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZyeHTSS6I9DVgvsloPHIt1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwMjI3MDgwMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkyNGQ5Njk3ODc0MWU4NzQ2MjEwMWE2ODEzMWEyNzIxZjA3ZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrLNlHxUNpHtjVrio5QWZNxQAyJp
AsOCXOzG3HsPUOjOrhX9tvQN732V/jrx9A0ZI9IHUmeA0G7paG0RCeYkMqCMw+5Z
xXbhQ/nGsrDZT9UZ8CC+tOBXiUmfEIO1H/bF/cfC1cTIGJEZDeswhC6uNwgIucEX
KSjF+ZtF1V5cRKTCdlnAufth55KZR15cLK74ECQ7DJcAdk+5qgCtdk3kZFwk5EZI
3N+cmXD8gLVCMFdqVVVZ+N8yxMF/9UQPo157u4KxJqM/fOzG+pQIhD6MzpMJ5oPa
BimHYa3AUkjN9VzKgQ3PAjWYv1K9PZ8vJV0u/eU5GxYjcOfn6pepzDp9VwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOySTZaXh0HodGIQGmgTGich8H0WMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN0pKTmxwZUhRZWgwWWhBYWFCTWFKeUh3ZlJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLZR2AwQA
XrF6AwQAixxjAwQAwjJeMA0GCSqGSIb3DQEBCwUAA4IBAQDNgNIg50zQL6qMwnJ/
WTpxuddsmihj3KYNRV8MfLPhbSIYYZbA3nYOs9pcE8eAz7rhs/j0CvL+6n2f681g
WgAguW/E7nRj9Vg16Sph7QT0U661i//CZDAjObOuEyQIUYWWgkELrNJ4HsQfxjK3
1irhkshHMFQFkPW9Az0KdRtXmPART7gPH2ji52BUcVDHd7CLGILboQpV5vhMSjbr
te8VDG6ACqtm7nF9UtCHt/23ciINcNqbZuwWB0luZ/MenWJjhXUkPYU51asdns7u
AdgdSL5M5cwt4evL9HfjPnJP7gK6sGGsOLIonbhFmNjVBKx2RvfLXI8il0/hEXTt
kXqD
-----END CERTIFICATE-----
Generated at Sun Mar 1 07:18:36 2026 by rpki-client