Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/7GR9tyFM_wMH98KUr6tNPpAI-jI.roa
File: 7GR9tyFM_wMH98KUr6tNPpAI-jI.roa (raw, json)
Hash identifier: arvKwCfJlej86zLOUUxwoknPTtk8k66vGEDXuGtJauo=
Subject key identifier: EC:64:7D:B7:21:4C:FF:03:07:F7:C2:94:AF:AB:4D:3E:90:08:FA:32
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A11C7D75973DADDC2AF2F40703BD329711
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/7GR9tyFM_wMH98KUr6tNPpAI-jI.roa
Signing time: Thu 08 Oct 2026 17:09:06 +0000
ROA not before: Thu 08 Oct 2026 17:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52194
IP address blocks: 77.91.67.0/24 maxlen: 24
185.157.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:7d:75:97:3d:ad:dc:2a:f2:f4:07:03:bd:32:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Oct 8 17:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec647db7214cff0307f7c294afab4d3e9008fa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:be:f1:3f:61:18:8f:9b:c5:31:22:ab:32:
71:a0:cc:94:80:ba:7c:42:2d:16:4f:4f:1a:3c:ee:
6e:3c:c8:87:a8:ee:9f:5a:38:81:f5:34:af:25:73:
bf:3d:e7:2b:4e:68:94:f7:63:fc:e1:6f:d3:d4:a6:
2a:53:1f:de:c1:d9:5c:29:ab:55:6d:61:fb:bb:da:
25:10:1d:de:bd:e4:cc:c1:25:c9:48:59:18:81:10:
6f:6d:9f:96:ab:3e:50:f9:1a:89:97:f4:20:b6:9e:
d4:e5:52:7f:35:7e:c5:83:6f:ba:96:a9:d9:05:83:
79:76:d5:2c:83:f0:85:09:81:9a:4a:50:f6:3b:86:
e7:0f:4c:75:d9:9c:cb:ec:2e:5f:a5:6a:d0:4a:00:
fc:0f:32:d7:20:83:cb:60:a6:ef:60:96:80:3a:96:
f1:72:75:cb:47:b6:d9:a9:2c:4e:7f:a4:d9:71:46:
9c:74:85:54:32:2c:51:61:84:39:5a:30:d1:49:39:
57:83:25:e1:2f:42:0e:d7:6e:b2:d2:b3:b4:44:94:
71:07:5a:21:4f:28:13:4e:e4:6a:30:66:88:da:98:
80:c3:91:45:5e:73:c3:a8:3d:0c:eb:ea:8b:46:4c:
35:a8:66:a0:00:90:6e:6c:32:d1:82:8d:39:1b:7f:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:64:7D:B7:21:4C:FF:03:07:F7:C2:94:AF:AB:4D:3E:90:08:FA:32
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/7GR9tyFM_wMH98KUr6tNPpAI-jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.67.0/24
185.157.120.0/24
Signature Algorithm: sha256WithRSAEncryption
00:76:b9:9c:38:9f:f7:f6:72:09:3a:68:c3:f5:6a:22:f7:00:
d4:3d:cc:21:79:9e:54:c7:4c:62:51:7a:4f:f1:87:e1:db:c2:
0d:db:9b:40:cf:69:db:d4:42:47:a5:89:d6:e3:6e:73:2c:76:
1f:c6:0a:2b:95:c7:f7:fb:c8:97:1b:4f:55:1b:26:79:33:75:
9a:dc:ad:0e:32:fe:50:3c:81:49:c9:7d:34:fe:d6:35:d5:5c:
4f:f2:65:77:84:01:02:b7:f0:e6:2d:82:85:10:89:d7:b4:51:
ec:e6:cc:00:bd:80:76:c4:c2:7c:45:ef:1c:e6:5c:60:ad:91:
e4:63:22:01:25:be:ff:7a:c4:0f:20:ce:95:93:f2:0e:6f:c3:
42:40:25:f6:6b:7c:ae:97:96:e3:92:6d:86:1b:dd:4a:47:0f:
6d:9d:88:73:40:f4:0e:17:a8:f7:53:b9:4d:4d:0d:c7:35:7d:
7f:ea:dc:cc:2e:0d:45:11:00:a9:5e:34:a2:85:3c:fb:ff:5f:
c1:32:e1:29:07:e9:b8:47:88:3f:20:ac:3f:62:31:56:34:97:
e3:61:1f:a7:4d:84:60:92:d1:5e:7d:7f:55:d0:bb:ab:4d:23:
8f:cb:b5:ff:ff:45:32:2d:b8:2c:1d:fd:03:13:ed:65:a8:9b:
62:5a:02:72
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEcfXWXPa3cKvL0BwO9MpcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZGI5NWI0MzZmNTMxYzRlNjAyZjM5NjEwYWQ1M2UyNmZk
ZmYxNTMwHhcNMjYxMDA4MTcwOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzY0N2RiNzIxNGNmZjAzMDdmN2MyOTRhZmFiNGQzZTkwMDhmYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO2+8T9hGI+bxTEiqzJxoMyUgLp8
Qi0WT08aPO5uPMiHqO6fWjiB9TSvJXO/PecrTmiU92P84W/T1KYqUx/ewdlcKatV
bWH7u9olEB3eveTMwSXJSFkYgRBvbZ+Wqz5Q+RqJl/Qgtp7U5VJ/NX7Fg2+6lqnZ
BYN5dtUsg/CFCYGaSlD2O4bnD0x12ZzL7C5fpWrQSgD8DzLXIIPLYKbvYJaAOpbx
cnXLR7bZqSxOf6TZcUacdIVUMixRYYQ5WjDRSTlXgyXhL0IO126y0rO0RJRxB1oh
TygTTuRqMGaI2piAw5FFXnPDqD0M6+qLRkw1qGagAJBubDLRgo05G39lHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOxkfbchTP8DB/fClK+rTT6QCPoyMB8GA1UdIwQY
MBaAFAPblbQ29THE5gLzlhCtU+Jv3/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAt
MzM3MTMzYWJiM2UwLzEvN0dSOXR5Rk1fd01IOThLVXI2dE5QcEFJLWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8zMWQyMzgtOTQ0Yi00MjgzLWI3MTAtMzM3MTMzYWJiM2Uw
LzEvQTl1VnREYjFNY1RtQXZPV0VLMVQ0bV9mOFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVtDAwQA
uZ14MA0GCSqGSIb3DQEBCwUAA4IBAQAAdrmcOJ/39nIJOmjD9Woi9wDUPcwheZ5U
x0xiUXpP8Yfh28IN25tAz2nb1EJHpYnW425zLHYfxgorlcf3+8iXG09VGyZ5M3Wa
3K0OMv5QPIFJyX00/tY11VxP8mV3hAECt/DmLYKFEInXtFHs5swAvYB2xMJ8Re8c
5lxgrZHkYyIBJb7/esQPIM6Vk/IOb8NCQCX2a3yul5bjkm2GG91KRw9tnYhzQPQO
F6j3U7lNTQ3HNX1/6tzMLg1FEQCpXjSihTz7/1/BMuEpB+m4R4g/IKw/YjFWNJfj
YR+nTYRgktFefX9V0LurTSOPy7X//0UyLbgsHf0DE+1lqJtiWgJy
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:29 2026 by rpki-client