Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/7kfOat6vbQm7qvrLeeWgvLuWLvk.roa
File: 7kfOat6vbQm7qvrLeeWgvLuWLvk.roa (raw, json)
Hash identifier: HpoNblvC5ioVlNcg5dKmP7Lwvwk13vS9NFrrQr61CLE=
Subject key identifier: EE:47:CE:6A:DE:AF:6D:09:BB:AA:FA:CB:79:E5:A0:BC:BB:96:2E:F9
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21C9EACBBBAF04955B8430623E583C4
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/7kfOat6vbQm7qvrLeeWgvLuWLvk.roa
Signing time: Thu 12 Mar 2026 12:54:12 +0000
ROA not before: Thu 12 Mar 2026 12:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201167
IP address blocks: 62.212.235.0/24 maxlen: 24
85.132.8.0/24 maxlen: 24
85.132.9.0/24 maxlen: 24
85.132.10.0/24 maxlen: 24
85.132.11.0/24 maxlen: 24
85.132.97.0/24 maxlen: 24
94.20.42.0/24 maxlen: 24
94.20.52.0/24 maxlen: 24
94.20.96.0/24 maxlen: 24
94.20.97.0/24 maxlen: 24
94.20.98.0/24 maxlen: 24
94.20.99.0/24 maxlen: 24
94.20.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:9e:ac:bb:ba:f0:49:55:b8:43:06:23:e5:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee47ce6adeaf6d09bbaafacb79e5a0bcbb962ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:2a:8e:34:67:3c:30:dc:e3:66:13:f3:af:
0f:a2:fa:14:53:99:e8:69:21:57:c9:ef:cb:b5:7a:
cc:84:e6:21:5b:cf:23:81:16:bc:e4:72:cb:69:8c:
92:c1:a6:b1:02:4c:0b:11:4e:ed:86:2b:21:5d:10:
f5:3c:87:1e:b8:5e:3f:6c:c8:eb:b0:4c:8d:fe:43:
8b:d6:b8:bf:ac:f5:c9:84:11:ec:09:2e:7f:e3:0c:
91:83:0b:72:95:9c:92:da:29:47:85:ee:51:0a:f1:
72:40:fb:9d:ca:8d:66:23:d0:80:c1:e0:43:10:28:
23:bc:b0:0c:cb:7c:da:2c:cf:d5:fd:62:cd:48:9d:
7a:2e:8b:47:48:64:0f:57:8f:19:5d:15:cb:d0:e2:
bf:bd:d4:9d:29:11:08:88:82:7b:29:ab:66:e7:96:
67:76:3e:19:8a:77:08:8e:8a:bb:1e:af:4a:1b:d3:
e5:a8:44:14:6a:ad:c0:4e:82:93:38:ff:f2:bf:4a:
76:51:1b:d0:d9:81:1a:f0:6a:00:e5:0c:5d:e3:ad:
49:46:0e:c2:a7:86:00:18:b9:1a:09:bc:1a:06:3f:
bb:89:78:69:a7:71:25:39:80:04:85:63:b8:12:b0:
4b:d3:31:0b:72:9b:ca:56:0a:83:46:67:b8:95:35:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:CE:6A:DE:AF:6D:09:BB:AA:FA:CB:79:E5:A0:BC:BB:96:2E:F9
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/7kfOat6vbQm7qvrLeeWgvLuWLvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.212.235.0/24
85.132.8.0/22
85.132.97.0/24
94.20.42.0/24
94.20.52.0/24
94.20.96.0/22
94.20.239.0/24
Signature Algorithm: sha256WithRSAEncryption
61:39:6d:d8:98:b0:64:e9:ae:59:80:43:d6:7c:bb:18:c7:5b:
db:93:f0:54:c1:2e:a3:27:8a:ba:3d:8c:d9:9f:fd:57:b1:b5:
5b:cb:39:b6:43:22:b9:26:92:a9:0c:77:c1:99:48:dd:39:59:
a4:3c:80:c2:03:8d:54:ae:75:2c:ef:98:c1:6c:ac:46:a4:f3:
0c:b1:5c:1a:ce:b7:2f:6d:64:2c:3e:68:79:bd:44:27:54:cb:
a3:eb:dc:6b:9b:c2:c1:39:33:59:f6:aa:85:d6:51:c4:78:bb:
37:0e:58:2c:02:69:43:db:b0:30:6e:9f:e1:f0:ca:d7:68:39:
01:c3:b8:7a:b4:d8:09:7b:99:53:7e:ca:d7:19:34:ce:da:a7:
27:f2:85:4c:f0:56:1e:51:9f:b6:32:b6:ac:84:36:3a:74:0c:
aa:61:b0:f1:7d:25:aa:ec:b7:eb:00:a9:ef:f4:a5:a3:7f:78:
b2:7e:80:e7:73:41:05:96:a4:38:66:6a:1a:d8:ad:bd:41:c6:
82:fa:48:b3:19:ab:42:f0:bd:26:b6:4b:47:6e:54:a4:1a:75:
d8:7a:6c:36:7c:dc:78:06:ee:cf:04:d2:bb:5d:79:ad:9b:ac:
a6:bd:a0:1f:12:1c:b6:04:aa:aa:f4:d4:85:a4:b0:e0:82:72:
31:7e:bc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:01:57 2026 by rpki-client