Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7myELMOedh6suWBCnKInDdIIjt0.roa
File: 7myELMOedh6suWBCnKInDdIIjt0.roa (raw, json)
Hash identifier: 0JTOlO7SjOuM0WVPoQ+8+sFa81gHbOu+oMby3E4kqjs=
Subject key identifier: EE:6C:84:2C:C3:9E:76:1E:AC:B9:60:42:9C:A2:27:0D:D2:08:8E:DD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FFFDEA29D8DF218159AE1B50C6B986191
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7myELMOedh6suWBCnKInDdIIjt0.roa
Signing time: Fri 14 Aug 2026 10:43:28 +0000
ROA not before: Fri 14 Aug 2026 10:43:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215102
IP address blocks: 45.87.121.0/24 maxlen: 24
89.125.15.0/24 maxlen: 24
153.76.208.0/24 maxlen: 24
185.254.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:de:a2:9d:8d:f2:18:15:9a:e1:b5:0c:6b:98:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 14 10:43:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee6c842cc39e761eacb960429ca2270dd2088edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:58:2a:83:7b:db:5f:24:3b:91:9f:f9:fd:33:
85:b5:d4:f5:83:6c:c1:ed:4a:b3:10:5b:a4:9b:75:
e9:e9:10:fc:42:7b:b1:f8:bb:8d:73:98:80:f9:6c:
6f:6c:67:69:e2:94:e7:f4:e0:cc:83:8d:3b:3b:78:
de:51:17:a3:0c:73:d6:78:45:32:73:c2:af:51:aa:
f5:ef:3e:f1:d8:3e:5d:74:58:99:bf:00:45:1d:3c:
20:9d:28:f3:9b:9e:56:15:71:18:8e:7f:eb:78:fa:
9f:71:b1:be:a6:4b:b7:83:56:4d:e5:3c:59:bc:9b:
9e:04:23:16:c9:bf:f2:6d:32:62:8d:bd:96:ec:66:
13:6a:00:63:9c:a3:09:8c:c4:60:60:b3:01:6f:ad:
eb:76:f3:5c:3e:91:c2:4c:4e:cc:02:47:12:72:e9:
70:ea:e9:87:e0:3c:3e:83:6d:cf:10:56:49:e3:81:
14:f2:b8:c7:b4:8b:f6:49:4c:2f:4c:10:8e:10:52:
92:35:ad:f9:09:1b:ad:23:ab:aa:b1:77:5d:81:b2:
52:6c:2c:9f:db:e6:6c:9a:eb:90:c2:ce:d6:9a:71:
47:40:61:8c:67:4d:36:2a:03:8c:c1:1f:f8:da:e0:
6c:e7:01:a8:db:32:00:03:05:4a:57:c6:6a:e4:1f:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6C:84:2C:C3:9E:76:1E:AC:B9:60:42:9C:A2:27:0D:D2:08:8E:DD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7myELMOedh6suWBCnKInDdIIjt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.121.0/24
89.125.15.0/24
153.76.208.0/24
185.254.67.0/24
Signature Algorithm: sha256WithRSAEncryption
70:81:e6:8b:15:fc:a1:4d:b8:94:bb:16:d5:0c:c5:10:c1:f7:
b9:b9:32:57:52:e2:89:8c:08:c5:ee:8a:74:61:3f:a8:2d:4c:
39:72:1d:2c:f9:f2:e8:bf:fb:ab:33:db:63:37:4d:82:1f:23:
cd:a9:35:5d:23:6e:fd:e3:3d:ce:cc:6f:68:b6:43:ee:b0:9e:
45:2d:1c:b2:5e:73:4e:f3:b1:f5:7b:cd:01:7f:6f:36:20:ef:
9f:89:e3:99:75:21:95:af:b7:23:cb:99:a7:82:3b:0a:59:98:
3e:ff:b2:21:0e:cb:ee:a8:70:ea:8e:c7:f0:f8:7d:f6:90:c7:
1d:6a:68:77:68:45:a0:7e:75:d1:86:95:d1:2b:81:ff:dd:6f:
08:6e:01:09:e6:ca:64:b6:ca:6a:9c:1c:77:80:44:7b:3d:ea:
cf:85:6c:68:45:44:63:4c:65:32:40:e1:40:0a:16:e4:24:2b:
a3:61:b8:40:58:36:89:97:3c:61:56:bd:b9:78:da:11:7a:3a:
f6:b6:8a:56:d2:70:7d:53:1c:9b:c8:3e:5f:c5:56:25:dd:d1:
f0:ea:b4:be:1b:c6:ee:34:dc:b9:ef:4e:cc:63:4a:0c:ae:40:
a3:8f:7b:0f:48:3f:d7:f6:ca:67:fc:4e:41:6b:b8:2f:af:ee:
d7:29:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:41 2026 by rpki-client