Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/cv_P7ef5M7mZZAwvDIQrKIgGKsk.roa
File: cv_P7ef5M7mZZAwvDIQrKIgGKsk.roa (raw, json)
Hash identifier: f055NGVAPhpKMRQ1gA1KRHrYcp8Qvl4TghrtybFAzTM=
Subject key identifier: 72:FF:CF:ED:E7:F9:33:B9:99:64:0C:2F:0C:84:2B:28:88:06:2A:C9
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 019F23690644A66466B8833F96EF4F343799
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/cv_P7ef5M7mZZAwvDIQrKIgGKsk.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:44:a6:64:66:b8:83:3f:96:ef:4f:34:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72ffcfede7f933b999640c2f0c842b2888062ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c1:df:51:19:83:92:ac:f4:0a:91:1a:6c:85:
2f:d6:b4:04:dc:15:15:31:6a:73:21:28:24:97:cc:
d9:00:fd:cf:c7:0c:13:d1:30:3b:9b:ff:e2:59:05:
cb:74:6f:7e:10:62:f6:9d:17:55:ed:40:05:9f:d6:
42:a5:4b:56:a0:f4:f4:64:bd:ff:f3:bb:3b:8b:a6:
a2:e1:d7:d5:cf:96:5c:78:3c:1f:99:10:80:cd:4b:
9d:fe:80:c2:1b:58:5c:48:46:f5:20:8c:05:4a:f5:
29:66:31:7a:6d:14:98:3c:8d:c1:9d:13:b8:7d:ef:
8c:cc:52:ee:9e:9f:a2:59:b5:ef:19:f7:33:22:64:
fb:8f:7f:71:6d:23:04:82:6d:d2:26:2f:2c:47:db:
9c:5e:d6:d6:ab:59:d1:99:62:56:2f:23:e1:a6:90:
52:86:ed:84:a6:a6:db:52:47:7b:9a:a9:07:a4:5f:
ba:0a:89:a7:e6:0c:d5:ef:5a:18:93:5c:8e:f3:13:
f6:bc:f4:0f:5f:13:50:13:dd:28:74:19:e8:91:fc:
73:9e:93:df:0c:0e:ad:bf:e6:80:6e:78:b2:ab:04:
3d:7a:7b:6c:53:c9:04:d4:d0:fd:cc:18:f5:0e:db:
d6:f1:3d:28:2c:b3:d1:88:99:fe:6e:2e:3f:9b:49:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:CF:ED:E7:F9:33:B9:99:64:0C:2F:0C:84:2B:28:88:06:2A:C9
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/cv_P7ef5M7mZZAwvDIQrKIgGKsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.20.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b9:e7:52:85:34:50:47:78:4f:eb:13:e4:97:b0:8a:14:8e:
b5:c3:62:ff:21:b7:aa:e1:69:a3:9d:b9:ff:7b:e7:14:c7:ab:
7f:58:1a:b5:47:c6:e0:a2:3c:a6:61:aa:a0:b5:39:63:1d:ce:
22:53:e9:82:c4:fd:1b:74:af:11:b8:bb:5b:4c:a6:34:69:90:
3b:4d:40:de:b6:4d:19:80:3e:cd:32:0b:2d:f0:4d:89:52:03:
22:ce:a9:31:b0:8d:34:e4:0e:4a:01:11:6a:7e:f3:43:e4:46:
3d:66:e8:41:ca:a5:97:42:6e:89:a5:23:14:85:da:d3:60:bf:
76:8c:b7:52:ce:7a:3d:f6:23:12:ac:22:5d:39:c5:ac:0d:28:
14:53:88:4e:e8:db:47:b5:cf:1e:59:6b:9a:07:7d:11:6b:0c:
f1:91:f7:df:66:b1:20:be:9e:34:ce:6a:58:a8:5e:a1:ca:d2:
b7:b2:ab:7d:67:fb:d6:84:4d:c4:c9:14:7f:47:5c:ff:14:7a:
24:ad:93:e8:62:5e:b1:33:e9:68:d2:aa:46:13:ff:22:e0:ae:
a2:78:5f:6a:67:26:2b:a3:98:93:e1:14:db:db:da:ce:3c:95:
fb:1e:e5:0f:b7:b1:5c:53:f9:2b:05:5b:f7:67:67:88:b8:9d:
fd:17:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:00 2026 by rpki-client