Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7DGBvxTSj-yyAD1WImY8TyyPY48.roa
File: 7DGBvxTSj-yyAD1WImY8TyyPY48.roa (raw, json)
Hash identifier: rPsU0E1HeF7DbItCwwntaB7K8pzGC58ma91UPSxXGeA=
Subject key identifier: EC:31:81:BF:14:D2:8F:EC:B2:00:3D:56:22:66:3C:4F:2C:8F:63:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FAEF00A47652C5CFA02588814D7C20049
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7DGBvxTSj-yyAD1WImY8TyyPY48.roa
Signing time: Wed 29 Jul 2026 17:33:14 +0000
ROA not before: Wed 29 Jul 2026 17:33:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213035
IP address blocks: 194.85.250.0/24 maxlen: 24
212.192.218.0/24 maxlen: 24
212.192.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:f0:0a:47:65:2c:5c:fa:02:58:88:14:d7:c2:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 29 17:33:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec3181bf14d28fecb2003d5622663c4f2c8f638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:e4:eb:c0:86:6d:2a:98:49:39:54:9a:30:
c7:1f:ce:5f:af:9f:b5:ae:98:bc:f3:0a:d1:20:df:
94:a3:b7:1e:50:90:48:58:2c:36:6a:c9:5f:f8:5a:
fa:99:64:d9:96:dc:34:8b:d2:79:21:f6:e7:7a:bd:
62:36:75:e2:b4:81:41:87:3d:74:fc:47:bc:c3:2c:
fe:9a:20:64:1c:43:6a:c4:06:8d:56:2e:08:e6:31:
4b:c4:a2:cc:95:76:bb:68:bd:c5:51:9b:e8:5b:07:
f9:48:15:77:ee:75:ef:fd:66:56:0a:ea:c4:0a:dd:
35:04:00:ac:97:cc:17:0d:46:c4:ee:5d:4d:b9:11:
41:d1:22:ef:3e:a7:71:76:aa:e9:3a:ed:fc:57:4a:
6d:30:75:17:5e:9e:c3:05:ac:60:11:36:fe:c2:d7:
74:78:6f:17:48:75:2c:89:4e:ce:4d:fe:41:56:dc:
c0:42:79:76:39:63:fe:f4:02:83:f2:13:11:c7:f8:
4c:2e:40:f6:f9:6e:2f:86:f7:fb:46:9e:c3:3b:26:
83:37:36:b0:0b:cd:be:23:df:a1:11:79:4c:ae:18:
7f:ab:b5:0c:58:13:93:90:e9:71:67:70:c2:9f:34:
44:71:54:de:43:96:1b:8d:62:e9:8f:d3:41:86:f6:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:31:81:BF:14:D2:8F:EC:B2:00:3D:56:22:66:3C:4F:2C:8F:63:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7DGBvxTSj-yyAD1WImY8TyyPY48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.250.0/24
212.192.218.0/23
Signature Algorithm: sha256WithRSAEncryption
27:3c:75:2a:87:a1:de:b6:cb:c5:0e:1e:68:c8:10:8d:18:0a:
be:c3:61:46:f4:d6:3e:f3:b4:34:59:fc:f3:f1:17:b3:b0:da:
73:f9:f9:df:d7:6a:90:4e:59:76:24:fc:8f:15:b1:7b:c4:a6:
d9:91:8d:6a:50:74:9a:08:4d:00:2c:17:46:92:cf:5b:ec:c3:
39:ad:fd:6b:f7:9e:72:41:f7:a1:58:c1:41:68:40:18:a2:8b:
a4:90:80:c7:e2:bd:93:00:17:b6:4d:e3:27:35:a1:0a:ab:4b:
c2:cc:02:65:f1:2f:03:b1:5d:55:50:31:af:c6:88:35:16:d5:
90:8f:9c:0a:bf:aa:75:64:c7:97:e5:77:8a:30:bf:67:a2:00:
d4:52:9e:19:1f:94:9d:db:ec:ac:bc:b9:d7:70:52:c0:85:0d:
c2:65:20:bf:5c:65:70:26:7f:e8:ff:18:41:09:b1:d8:ca:d6:
b1:e9:de:e3:b9:e2:67:af:3c:0b:e8:07:19:5c:fa:e4:a8:d2:
05:e8:90:7f:d3:0a:12:50:f5:6d:4e:0c:f9:d5:6f:8b:91:0b:
26:71:91:01:ea:cb:a4:7b:a5:9e:d5:59:9e:08:90:90:77:3b:
07:b7:5c:79:7b:0b:06:61:06:05:62:8a:5b:4d:9b:e3:83:7e:
83:cb:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:28 2026 by rpki-client