Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7OfFzqNW0NQL25TrVQF_BiapumI.roa
File: 7OfFzqNW0NQL25TrVQF_BiapumI.roa (raw, json)
Hash identifier: YT+fh85oI+5zy1kS07FvYGKTzwU1BU2GPvlU5/vt2dM=
Subject key identifier: EC:E7:C5:CE:A3:56:D0:D4:0B:DB:94:EB:55:01:7F:06:26:A9:BA:62
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019FCD4540772026F59291A77A2BFA00F4B3
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7OfFzqNW0NQL25TrVQF_BiapumI.roa
Signing time: Tue 04 Aug 2026 14:54:55 +0000
ROA not before: Tue 04 Aug 2026 14:54:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 132.243.72.0/24 maxlen: 24
132.243.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:45:40:77:20:26:f5:92:91:a7:7a:2b:fa:00:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 4 14:54:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ece7c5cea356d0d40bdb94eb55017f0626a9ba62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:21:3c:a3:ac:7a:b9:b6:3e:6f:ca:5a:d9:
7b:fb:dc:42:2a:5e:0c:a7:0a:57:2d:e3:65:cf:75:
2a:b6:bc:cc:9b:9e:ad:9d:58:b1:e5:1f:f6:59:a8:
4c:3e:2f:43:d9:6e:99:34:d2:ed:ee:f8:34:80:4d:
78:e9:af:f2:68:62:93:56:b3:81:8b:4c:e3:7e:0f:
ee:b6:c1:79:9d:3e:f1:c0:56:67:c0:b0:ca:db:ac:
00:82:9a:93:55:08:d4:c5:d5:0e:11:87:59:f3:bb:
81:b8:33:d8:b0:42:66:07:03:24:cb:12:b1:6b:68:
cd:a9:a9:f4:50:8d:4c:fd:1b:17:ac:dd:ca:88:6a:
c2:45:b2:d2:43:d2:d8:83:a9:66:6a:52:c9:7a:d7:
35:78:cc:32:33:f1:8c:86:3a:62:de:80:ab:c0:51:
17:90:fc:5a:83:50:02:14:60:77:9f:75:66:7b:8a:
7b:41:1e:13:28:1e:f0:d5:48:1e:71:1a:00:8a:99:
d6:f8:62:42:36:71:09:20:ac:e1:27:e4:bc:71:f3:
9c:c8:57:27:24:9e:51:4b:a4:80:13:fb:ba:42:42:
60:6b:bd:b6:b6:e7:5b:09:a4:f0:97:d2:34:6b:3a:
2b:39:ea:a0:ac:a1:1b:1b:c9:de:2b:fd:10:99:a0:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E7:C5:CE:A3:56:D0:D4:0B:DB:94:EB:55:01:7F:06:26:A9:BA:62
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7OfFzqNW0NQL25TrVQF_BiapumI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.72.0/24
132.243.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:3b:69:43:23:6c:9a:e3:51:b0:62:7f:d7:a8:3b:7d:41:18:
99:8f:ae:9c:c9:60:05:f0:ea:51:54:9a:9d:a3:40:c4:40:b6:
f8:9f:a5:ed:99:e2:b5:61:b3:e3:c4:15:b1:3f:a8:8a:45:e3:
b7:07:47:69:b4:c3:24:e8:38:d2:59:ee:51:fe:23:3e:82:85:
bf:ac:03:ac:22:c0:90:b3:55:de:ff:04:e3:a2:24:0d:05:88:
03:28:5c:b3:47:8c:d6:fa:d9:f7:fb:db:61:6b:8a:f9:f1:1d:
ee:50:82:c4:73:75:45:2c:0e:46:6e:42:23:5f:cf:0a:83:1c:
d3:05:27:3f:d2:9b:30:e1:6b:e3:0f:35:41:55:1a:0a:99:44:
bd:6a:24:7c:fe:60:a9:22:6c:87:d7:79:69:3e:5f:53:94:73:
db:39:83:41:4c:3f:39:4c:fd:77:5a:80:39:16:6c:cd:aa:1e:
22:8f:e4:60:5c:66:e8:2c:07:00:bf:4b:c0:bb:45:eb:d7:4b:
06:3d:67:40:c9:64:96:11:86:ae:b3:c1:42:31:67:16:2a:9b:
2d:53:dd:96:79:95:f6:47:cf:0c:92:b7:01:bc:82:ef:5b:64:
45:a0:9b:ab:64:70:dd:a9:88:fe:4d:1e:53:f4:39:5b:e9:d3:
02:f4:75:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/NRUB3ICb1kpGneiv6APSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwODA0MTQ1NDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2U3YzVjZWEzNTZkMGQ0MGJkYjk0ZWI1NTAxN2YwNjI2YTliYTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rghPKOserm2Pm/KWtl7+9xCKl4M
pwpXLeNlz3UqtrzMm56tnVix5R/2WahMPi9D2W6ZNNLt7vg0gE146a/yaGKTVrOB
i0zjfg/utsF5nT7xwFZnwLDK26wAgpqTVQjUxdUOEYdZ87uBuDPYsEJmBwMkyxKx
a2jNqan0UI1M/RsXrN3KiGrCRbLSQ9LYg6lmalLJetc1eMwyM/GMhjpi3oCrwFEX
kPxag1ACFGB3n3Vme4p7QR4TKB7w1UgecRoAipnW+GJCNnEJIKzhJ+S8cfOcyFcn
JJ5RS6SAE/u6QkJga722tudbCaTwl9I0azorOeqgrKEbG8neK/0QmaC0vQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOznxc6jVtDUC9uU61UBfwYmqbpiMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvN09mRnpxTlcwTlFMMjVUclZRRl9CaWFwdW1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAhPNIAwQA
hPNLMA0GCSqGSIb3DQEBCwUAA4IBAQCOO2lDI2ya41GwYn/XqDt9QRiZj66cyWAF
8OpRVJqdo0DEQLb4n6XtmeK1YbPjxBWxP6iKReO3B0dptMMk6DjSWe5R/iM+goW/
rAOsIsCQs1Xe/wTjoiQNBYgDKFyzR4zW+tn3+9tha4r58R3uUILEc3VFLA5GbkIj
X88KgxzTBSc/0psw4WvjDzVBVRoKmUS9aiR8/mCpImyH13lpPl9TlHPbOYNBTD85
TP13WoA5FmzNqh4ij+RgXGboLAcAv0vAu0Xr10sGPWdAyWSWEYaus8FCMWcWKpst
U92WeZX2R88MkrcBvILvW2RFoJurZHDdqYj+TR5T9Dlb6dMC9HUT
-----END CERTIFICATE-----
Generated at Fri Sep 4 01:40:47 2026 by rpki-client