Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/7HBVOpyCw1FOwYRer9QdAwGd80Q.roa
File: 7HBVOpyCw1FOwYRer9QdAwGd80Q.roa (raw, json)
Hash identifier: CraZq3bKawliYQsBaYv52BC/At9GPyhy6bz4vqZGvrw=
Subject key identifier: EC:70:55:3A:9C:82:C3:51:4E:C1:84:5E:AF:D4:1D:03:01:9D:F3:44
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A06A8FBF7DF2BBB635560D4970FBF005FB
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/7HBVOpyCw1FOwYRer9QdAwGd80Q.roa
Signing time: Fri 04 Sep 2026 03:56:40 +0000
ROA not before: Fri 04 Sep 2026 03:56:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 151.145.128.0/19 maxlen: 19
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:8f:bf:7d:f2:bb:b6:35:56:0d:49:70:fb:f0:05:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 4 03:56:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec70553a9c82c3514ec1845eafd41d03019df344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:ee:f0:ae:e8:dc:6e:78:8e:2e:10:e4:3d:
ab:00:eb:fc:bc:06:a1:31:8f:56:c5:49:5f:bf:5f:
0e:3f:1f:99:2a:76:79:30:96:e2:bf:2c:c4:3a:27:
b5:e9:58:7f:32:57:5b:bc:7b:c2:96:4b:fc:ec:db:
95:37:63:eb:03:47:da:08:90:52:9b:ca:5e:8e:18:
7c:ff:25:c9:17:ba:b2:f3:5b:4b:9d:fe:24:86:1b:
c9:b6:f2:78:f9:31:28:8e:da:c6:5f:d3:f5:e9:87:
07:4f:bf:96:2b:09:40:17:5b:c3:6d:8f:1a:84:e0:
8a:7d:14:dd:cc:78:01:b8:eb:ec:c9:2e:17:8a:3e:
50:6c:f4:ef:c5:1e:68:52:54:7a:a5:65:c0:78:08:
5d:83:da:1b:55:e9:cd:6f:94:e5:34:c9:62:92:31:
f0:3d:ab:f1:a1:7f:a6:bb:e3:fc:ec:9e:95:64:47:
2c:14:ef:ad:b9:25:e3:c3:8f:9a:5a:88:ec:c6:8e:
87:09:d0:35:04:84:6a:44:cd:f7:3a:70:7b:6d:c0:
d8:ab:91:ad:a5:b6:e4:c5:d9:4b:6c:5d:d0:ff:1e:
8f:e3:a4:d4:00:87:85:3e:f2:5e:f8:8c:c8:19:ed:
1b:ef:62:ef:b6:a1:bb:2c:8e:56:2c:56:38:ae:9f:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:55:3A:9C:82:C3:51:4E:C1:84:5E:AF:D4:1D:03:01:9D:F3:44
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/7HBVOpyCw1FOwYRer9QdAwGd80Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.145.128.0/19
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:65:28:bd:6c:e8:14:6f:0d:b6:4d:6e:0e:a5:87:89:c0:
84:3e:ff:ef:29:55:ec:6d:46:df:14:72:14:ff:78:ab:cd:23:
a2:54:a2:8b:9d:13:d6:af:f7:86:70:8b:8e:9b:d5:21:38:8e:
64:72:1e:17:55:21:b0:8e:1a:20:84:a2:a3:d7:49:68:2d:fb:
08:58:06:fe:9d:b0:32:86:e6:e7:5e:ab:c3:61:21:1b:70:b5:
b9:a3:69:78:49:b1:da:95:a7:37:72:1f:93:9c:c5:d6:6e:ad:
08:58:ba:f6:f2:ca:af:fa:80:ce:33:7b:ed:a5:d6:50:88:8f:
44:4a:23:c5:b0:7a:51:ce:e5:b3:75:88:b4:27:38:fa:cf:d9:
8b:e4:b6:d7:75:c2:94:bd:22:1b:28:92:17:95:5b:13:23:8e:
67:29:dd:0e:d3:a1:09:2a:4d:95:e0:5a:3d:5f:aa:2b:e8:84:
63:3a:ef:d2:5b:ee:ec:7f:6f:57:4e:10:2a:25:95:a2:ca:2e:
5f:e7:09:b6:e3:80:02:d1:48:2b:e8:e1:b3:b1:ea:e1:75:6d:
01:14:09:3b:c3:05:b0:c2:e6:23:e6:9b:02:cf:71:38:de:33:
dc:36:69:87:47:fd:8a:6d:e9:03:33:63:58:4f:e0:14:93:9a:
d1:b7:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:47 2026 by rpki-client