Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/7e9287JiavvNibirznmGp8Ri68M.roa
File: 7e9287JiavvNibirznmGp8Ri68M.roa (raw, json)
Hash identifier: V6aikhGlnGo6wTqTxUKPIvBQH2DvVyy6y6tZnidwhEM=
Subject key identifier: ED:EF:76:F3:B2:62:6A:FB:CD:89:B8:AB:CE:79:86:A7:C4:62:EB:C3
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F6CEF8DC590A98D06C47D354153A9AB1F
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/7e9287JiavvNibirznmGp8Ri68M.roa
Signing time: Thu 16 Jul 2026 21:57:46 +0000
ROA not before: Thu 16 Jul 2026 21:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204767
IP address blocks: 131.222.213.0/24 maxlen: 24
212.21.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6c:ef:8d:c5:90:a9:8d:06:c4:7d:35:41:53:a9:ab:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 16 21:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edef76f3b2626afbcd89b8abce7986a7c462ebc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:a5:b8:39:83:91:ce:23:20:6f:f9:3e:5f:
2e:e5:0d:c9:ac:46:1c:64:73:ef:67:a5:4f:7a:35:
ff:4d:8c:df:8e:88:ca:48:55:8f:36:d7:ed:15:7e:
47:7f:a9:92:2e:56:24:e3:9d:3e:96:8a:53:59:cf:
4a:92:e5:ab:45:86:ab:20:dc:70:99:42:73:f4:89:
0c:3f:16:2f:d1:a1:f7:23:d2:85:2c:d6:13:3f:cf:
08:af:af:31:25:f5:c4:02:be:2c:e5:a7:fa:e8:d2:
06:49:fe:0a:b7:46:e2:c1:b3:eb:90:ce:c8:e3:29:
6e:32:45:cd:08:7d:1c:53:97:f1:11:58:5d:51:57:
27:4c:d8:cc:d6:87:03:70:cd:f9:a2:12:45:30:63:
e5:27:e6:d1:be:6b:2b:30:e3:3d:07:47:e9:03:10:
e7:06:d3:05:fe:5c:34:62:60:b8:52:1a:7e:49:64:
6f:44:95:09:97:d2:39:42:d0:d6:a8:94:b8:07:51:
d6:8b:9b:a2:cd:f7:5b:53:01:d3:b9:09:5f:d3:05:
8d:66:21:38:89:92:c4:4f:10:7c:4d:30:78:b6:96:
2e:c5:2d:78:1f:36:c3:fa:68:77:b1:df:ca:9c:18:
a0:c7:20:af:7a:83:12:68:ba:83:68:dc:c7:19:d2:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:76:F3:B2:62:6A:FB:CD:89:B8:AB:CE:79:86:A7:C4:62:EB:C3
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/7e9287JiavvNibirznmGp8Ri68M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.213.0/24
212.21.100.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ef:6e:7d:6f:d0:94:3b:01:34:c1:04:77:a7:ee:91:92:1f:
7f:84:83:ae:ec:41:18:38:fb:22:87:3d:1b:7e:2f:ed:74:40:
12:d9:05:80:93:f6:9a:ae:2e:1a:20:b1:e6:9d:cd:65:55:fe:
9e:40:f8:3d:7a:3a:d9:b4:5a:a7:0c:11:aa:e3:d2:26:35:cc:
bf:fb:85:ff:36:b4:c9:51:a6:01:91:a2:58:85:7d:56:3c:4f:
c2:6d:4b:01:da:8e:d1:fd:af:af:6e:d8:2c:e2:bf:41:d2:ea:
26:a4:75:63:f8:63:f2:3a:2e:46:a5:b8:8d:0d:e0:5f:78:d4:
78:3b:86:f6:4d:d7:a4:76:91:5a:87:c5:fe:b1:4b:e9:9c:2c:
24:5b:0d:a9:34:21:d3:07:d9:90:87:05:39:b3:df:dc:56:0f:
63:5e:78:90:33:d0:e5:74:29:89:43:d7:43:dd:d6:95:46:a7:
c6:4e:4e:fa:33:4c:17:64:54:a9:f1:da:c1:ec:26:92:72:cb:
af:3c:af:0b:0c:4e:cf:a8:3b:95:fa:6b:c8:e1:16:a4:db:f7:
02:65:72:21:de:f8:80:97:64:11:5a:24:58:17:5e:4f:b9:90:
6c:43:ca:d5:17:41:ea:ae:b6:38:bc:58:8a:8f:64:43:50:ed:
25:83:87:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:42 2026 by rpki-client