Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/7qUnNbCSaKjLyMVLzVWG0PH3YYA.roa
File: 7qUnNbCSaKjLyMVLzVWG0PH3YYA.roa (raw, json)
Hash identifier: UlZz/QtcfVudk2Ha/32gUuS89H8bAd3Hx8j/Eq/yQXk=
Subject key identifier: EE:A5:27:35:B0:92:68:A8:CB:C8:C5:4B:CD:55:86:D0:F1:F7:61:80
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A162BA1E59AC09F32D4BDE2968589D8F58
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/7qUnNbCSaKjLyMVLzVWG0PH3YYA.roa
Signing time: Thu 22 Oct 2026 08:28:47 +0000
ROA not before: Thu 22 Oct 2026 08:28:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 77.216.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:ba:1e:59:ac:09:f3:2d:4b:de:29:68:58:9d:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Oct 22 08:28:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eea52735b09268a8cbc8c54bcd5586d0f1f76180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:59:06:1b:84:5c:de:c4:0e:84:eb:d2:bb:
cf:de:65:28:fa:b3:de:7a:8f:d1:8e:53:6a:ea:b0:
3a:4f:98:a4:b8:cf:37:95:d7:38:19:dc:fe:e3:61:
d0:58:f0:6e:09:3d:71:df:85:b8:a7:fd:54:69:17:
3e:9a:7f:cc:c8:f8:f7:0d:e0:38:e1:99:0f:7e:8a:
f2:92:96:be:f8:9b:f5:68:26:ea:a7:bb:d1:9c:ab:
f6:41:c3:d6:0c:1f:2c:59:44:7e:47:e3:d1:30:08:
75:d2:4b:b0:d2:dd:d6:8a:df:fe:dc:00:7e:77:2c:
fc:f9:ce:c6:8a:3a:bc:cb:82:41:f5:ec:0e:c8:0d:
f4:3a:ab:03:7e:9c:34:64:6c:25:62:66:6c:68:86:
24:4c:ac:d4:ee:fd:dc:f3:e5:3e:69:b5:6b:2f:cf:
bb:80:68:b7:ae:f9:dd:fa:cf:64:5e:bb:15:43:98:
9d:c2:07:3b:7c:6b:f4:3a:da:3d:e8:0d:bb:61:23:
58:ef:84:7b:9e:12:b7:b5:61:41:76:2c:ca:38:59:
e4:94:25:81:56:72:a3:f7:79:70:67:16:ff:e8:c9:
eb:5a:a4:27:c5:47:89:9d:36:40:d8:d9:ec:f5:ab:
e7:dc:bb:01:b2:01:cf:e8:cb:ea:56:a5:10:59:81:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:27:35:B0:92:68:A8:CB:C8:C5:4B:CD:55:86:D0:F1:F7:61:80
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/7qUnNbCSaKjLyMVLzVWG0PH3YYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.3.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e6:a7:15:81:9a:67:3f:38:8d:03:51:71:ea:2c:68:f1:b8:
28:89:fd:39:9f:61:1c:0a:86:e3:78:2e:33:20:14:5a:8e:2d:
75:33:78:5e:4e:eb:a5:fa:2e:d6:61:bc:e0:5e:74:bd:63:39:
39:2c:18:5c:2a:87:73:68:51:d6:00:68:ec:f2:91:14:ac:f2:
c9:9a:e1:26:b5:15:56:1f:73:47:57:3a:41:fd:61:6c:5e:90:
93:78:db:04:cc:6e:6e:41:b0:43:e8:3e:2e:bd:f2:7c:df:6d:
1a:6c:4d:6a:be:5a:7b:44:55:ac:73:15:88:9d:f1:78:e0:e3:
2d:3c:3f:6b:46:bb:34:8b:ee:6b:2b:db:4a:4d:56:59:0c:3c:
1f:0b:b2:f9:e2:41:68:24:70:af:17:69:7b:a2:16:f0:ca:11:
f0:ac:47:38:7a:47:0c:d2:8c:04:a5:4d:95:65:e5:1b:b7:7c:
84:71:23:4b:11:85:7b:a8:09:4e:eb:39:bc:0c:64:63:ab:12:
0f:56:92:bc:93:cd:6f:ec:5b:66:81:55:c7:75:ac:66:f0:e8:
ee:f0:1e:56:28:b5:22:bd:97:3c:2c:f5:d8:0e:3a:c2:ce:3f:
1c:79:9e:a5:37:fb:9b:20:a2:2c:2b:86:9a:2b:25:42:98:08:
73:c0:e3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:18 2026 by rpki-client