Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/7D1sveZ5ApJWInnFiJ_FKQ_55xY.roa
File: 7D1sveZ5ApJWInnFiJ_FKQ_55xY.roa (raw, json)
Hash identifier: s79h2fgFpjB17mm/majDdwpJwf3lbUq+QbmIYXJuXV8=
Subject key identifier: EC:3D:6C:BD:E6:79:02:92:56:22:79:C5:88:9F:C5:29:0F:F9:E7:16
Certificate issuer: /CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Certificate serial: 019F0FAE1AF01DF64A02679A943E472D30E6
Authority key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/7D1sveZ5ApJWInnFiJ_FKQ_55xY.roa
Signing time: Sun 28 Jun 2026 19:21:36 +0000
ROA not before: Sun 28 Jun 2026 19:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 193.138.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:ae:1a:f0:1d:f6:4a:02:67:9a:94:3e:47:2d:30:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c
Validity
Not Before: Jun 28 19:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec3d6cbde6790292562279c5889fc5290ff9e716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:eb:b4:b9:b5:17:7a:a2:cc:8a:5b:45:df:
83:d6:0c:f0:65:ba:27:ab:82:71:c7:e4:c9:51:07:
12:e5:01:7a:4f:a6:82:67:d9:2d:df:90:e5:c6:c7:
cf:25:7b:dd:e6:d0:63:0d:e6:9d:68:38:6c:a1:a2:
8f:ae:96:3f:5c:09:24:02:b6:48:62:14:db:27:eb:
82:df:3a:29:4b:4c:8a:4c:55:26:43:75:5b:23:4b:
b6:10:4b:27:b1:2b:8e:e4:cc:58:c3:63:e2:fa:6b:
79:c3:cd:32:d5:ba:e3:7b:3c:1e:d9:7e:5b:27:61:
46:80:05:41:f3:26:92:21:5e:cc:74:5e:dc:52:27:
bc:f0:0b:1f:bd:07:5f:a5:d7:80:6e:9c:09:a9:e4:
16:a9:54:f6:db:ab:41:c8:88:47:57:75:a4:ed:f7:
87:be:0a:9e:0a:14:15:4c:be:74:21:0d:c4:9b:4a:
a4:d8:a5:dd:51:d6:25:ad:26:80:8c:0f:aa:09:28:
2b:74:54:e4:c7:53:88:8c:76:ef:98:62:fd:20:c0:
1f:cf:51:b2:12:d8:4b:fe:e7:86:d5:e5:f1:be:e4:
66:f6:04:49:2d:a7:dd:50:d7:b2:e1:6e:c1:6d:78:
a3:55:07:61:13:8f:45:c7:fa:95:45:0c:73:42:a0:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:6C:BD:E6:79:02:92:56:22:79:C5:88:9F:C5:29:0F:F9:E7:16
X509v3 Authority Key Identifier:
keyid:DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/7D1sveZ5ApJWInnFiJ_FKQ_55xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.77.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2a:c5:c3:b4:3d:a7:a2:42:08:1c:7f:7c:3b:53:42:67:ea:
21:b0:de:53:8c:18:dd:5c:e2:7b:e0:26:c6:a3:83:99:10:21:
a0:2c:20:21:59:3a:a3:65:07:0b:1f:5e:90:39:de:da:15:ca:
11:10:c5:dc:d4:b7:90:85:35:3c:0d:eb:5d:6d:fa:6b:e9:0b:
56:16:83:b2:2c:5d:96:d3:f5:8a:ff:a8:da:e7:68:88:9c:da:
f5:03:88:e1:f5:1d:92:e5:53:87:cc:f6:de:4d:7b:38:79:25:
88:02:b5:1b:75:4b:94:70:8c:1f:01:3f:9d:64:54:ea:ba:e3:
d9:a9:55:2b:d7:2c:86:b4:fa:ca:82:2d:34:de:15:2f:a9:e7:
bd:16:10:4f:fb:ff:e1:ae:7b:f2:8e:f3:35:85:23:16:e9:f2:
9b:f7:07:66:91:3c:c6:b3:2d:b7:cf:6a:a6:66:7c:d1:1a:94:
d1:9e:49:68:9a:f0:12:a2:40:bd:2d:2a:3c:56:9b:f4:7b:be:
85:ce:d1:eb:28:2f:f7:78:fd:9f:7d:c2:dc:37:c6:bc:fd:21:
fc:ef:49:9c:d1:f4:9b:35:89:0f:64:ee:94:9e:de:78:7c:e2:
56:e4:ab:3e:a9:6c:ec:50:5b:33:a8:39:6f:fc:93:8d:2f:6f:
01:66:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:13 2026 by rpki-client