Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/x7X4IhRx8R31zbrI_fkDFLJclLM.roa
File: x7X4IhRx8R31zbrI_fkDFLJclLM.roa (raw, json)
Hash identifier: 3Kt/g3hdmBw96M1CeEe5O0V80J3A8nueYPJIfjF0KKU=
Subject key identifier: C7:B5:F8:22:14:71:F1:1D:F5:CD:BA:C8:FD:F9:03:14:B2:5C:94:B3
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 019EFEB0C4F04A505D5130FBD08EA7776438
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/x7X4IhRx8R31zbrI_fkDFLJclLM.roa
Signing time: Thu 25 Jun 2026 12:10:58 +0000
ROA not before: Thu 25 Jun 2026 12:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16080
IP address blocks: 80.70.216.0/23 maxlen: 23
80.70.222.0/23 maxlen: 23
80.89.114.0/24 maxlen: 24
2a02:d48:bb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b0:c4:f0:4a:50:5d:51:30:fb:d0:8e:a7:77:64:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jun 25 12:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7b5f8221471f11df5cdbac8fdf90314b25c94b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:b0:43:0a:eb:69:ae:03:fe:0d:24:5b:a0:
15:d0:a1:9f:33:4c:24:e6:38:58:cf:a6:c7:6b:4b:
c2:5e:47:fa:46:25:8b:71:94:09:d8:a5:3d:44:84:
6a:90:5c:81:c2:09:67:d0:a4:0c:8b:ba:78:08:95:
ce:db:cf:33:f2:e9:ae:ed:53:f3:b7:f7:07:fb:cd:
53:09:c1:28:d1:d9:3e:28:a0:69:30:8a:4a:59:6e:
1e:6b:eb:24:8a:b3:d0:b8:c9:6f:23:8c:73:65:0c:
bf:ae:a4:68:07:7d:3e:f8:00:5a:8f:db:b3:a0:b7:
cd:57:a4:fe:8d:4c:fa:a0:56:64:6e:ed:f5:d5:5e:
c6:b2:0f:d8:34:49:c4:72:09:51:3a:16:ae:62:6f:
21:9d:e4:54:66:12:05:9a:4c:16:c5:17:46:17:b6:
7d:40:6c:cf:04:9a:33:7c:f7:be:8b:d2:8f:72:f5:
b0:7a:5a:71:2b:09:80:c6:7b:e1:54:f2:d5:c2:45:
c7:7a:6f:16:45:a4:42:bb:e9:45:d6:da:66:4b:83:
7d:cb:0d:be:7d:73:ba:c0:15:9f:1e:d3:39:31:67:
85:78:23:3d:d7:a3:65:b6:70:18:ab:32:6b:d4:4e:
7f:bd:fb:94:2f:bb:24:ac:27:bf:25:ac:b6:02:79:
68:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:F8:22:14:71:F1:1D:F5:CD:BA:C8:FD:F9:03:14:B2:5C:94:B3
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/x7X4IhRx8R31zbrI_fkDFLJclLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.216.0/23
80.70.222.0/23
80.89.114.0/24
IPv6:
2a02:d48:bb::/48
Signature Algorithm: sha256WithRSAEncryption
7e:e8:6a:ef:15:68:e6:5b:03:d2:1b:04:74:78:e6:51:fd:8a:
e6:17:15:6b:9b:7f:9a:a0:57:de:6e:78:a8:97:b6:4f:07:c4:
ff:c2:82:07:71:db:2c:e6:a8:42:95:5e:63:24:04:69:e1:e2:
1b:85:74:22:5c:da:15:d4:57:d8:92:2d:ba:da:6a:18:ed:75:
f5:e3:d1:e5:4a:81:61:47:eb:50:2d:95:42:1f:92:85:1f:7d:
74:23:3d:a5:3b:a4:49:06:49:f3:8f:3b:49:a5:d4:16:cd:67:
0b:90:8c:a4:3d:a7:9e:58:d7:b4:07:81:e4:fe:94:25:93:23:
55:46:69:1b:c7:89:d5:98:7a:fc:31:ca:8a:6d:f2:a6:9e:6e:
ca:bd:2b:b4:b3:af:00:07:32:91:38:99:e8:b1:88:22:99:a2:
15:a3:a9:a8:38:a6:31:77:20:05:87:25:a4:51:5f:6b:8e:60:
ac:a6:35:8c:47:5e:ed:cd:b5:f1:e0:01:ab:66:f1:e1:fa:92:
17:2a:f5:73:4d:7b:2e:82:cf:60:97:70:87:9e:e7:91:c0:64:
30:42:0a:78:d9:60:80:5f:e2:65:a6:6f:fd:c9:d5:ea:e3:ec:
c0:a5:84:06:44:87:b2:ea:ba:4b:8e:f6:59:bc:57:ac:88:fe:
5e:65:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:35:54 2026 by rpki-client