Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7RyWvRC2Y0TftwhFj5iQJQz3_ag.roa
File: 7RyWvRC2Y0TftwhFj5iQJQz3_ag.roa (raw, json)
Hash identifier: nnMDjyO2WOvwEHmLiOn3cUezXD9HK3mnTmiDaCIFDnE=
Subject key identifier: ED:1C:96:BD:10:B6:63:44:DF:B7:08:45:8F:98:90:25:0C:F7:FD:A8
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A009EFD5185F1FA465874C59973F3D2D0D
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7RyWvRC2Y0TftwhFj5iQJQz3_ag.roa
Signing time: Sun 16 Aug 2026 09:38:27 +0000
ROA not before: Sun 16 Aug 2026 09:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 93.89.218.0/24 maxlen: 24
132.243.66.0/24 maxlen: 24
132.243.67.0/24 maxlen: 24
212.87.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:ef:d5:18:5f:1f:a4:65:87:4c:59:97:3f:3d:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 16 09:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed1c96bd10b66344dfb708458f9890250cf7fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5e:9b:49:97:18:4a:fa:92:f5:68:c1:db:e0:
1e:de:10:3c:f5:3e:c8:2c:28:b4:6e:6a:10:fc:5d:
7f:df:c2:03:ae:5e:fd:05:a0:0d:62:e2:5f:57:a0:
7f:22:2d:80:52:f0:59:1c:b6:df:d0:f1:d3:c1:82:
7c:f6:93:9a:24:19:19:86:d6:1a:24:21:ea:5a:68:
e7:bb:8c:d7:28:e3:88:c5:ad:73:d3:40:d1:72:e9:
fd:91:27:9c:d2:eb:c1:61:03:29:15:58:34:d6:43:
f7:35:2c:54:c7:bd:4a:2e:86:95:d4:7d:e1:31:f5:
00:82:ec:da:b8:3a:e6:9c:b6:3c:f8:6f:9e:51:12:
56:a1:cb:2c:1e:76:42:63:2b:c6:77:b7:3f:e0:ad:
72:04:cf:df:cc:87:5d:85:4b:4c:b7:36:3a:0c:66:
ea:73:ae:ea:08:1c:32:8f:ff:e3:84:a0:22:8e:93:
8f:63:57:5b:7d:4d:4b:5d:74:60:53:c8:c0:0f:47:
e6:de:8b:a7:e1:b3:68:18:a3:71:ea:31:92:b7:86:
fe:5d:e6:0f:a9:4e:c8:73:94:6d:1e:93:7e:0c:ce:
a8:21:e9:af:8f:5a:bb:30:0d:d6:10:06:16:e6:ff:
97:ab:9a:49:04:54:75:bc:3c:87:41:ce:64:89:f7:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1C:96:BD:10:B6:63:44:DF:B7:08:45:8F:98:90:25:0C:F7:FD:A8
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7RyWvRC2Y0TftwhFj5iQJQz3_ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.218.0/24
132.243.66.0/23
212.87.190.0/24
Signature Algorithm: sha256WithRSAEncryption
75:95:00:55:0c:6a:6d:57:3b:72:8c:6f:25:3f:e7:41:0d:a1:
1e:9d:a3:b9:c8:6d:4e:c2:12:b1:e7:76:c0:0a:5b:e0:97:89:
f5:c2:81:48:fc:21:bf:7a:2a:dd:b7:55:70:77:3a:e1:81:84:
ba:f8:c0:49:54:8e:d9:13:19:ca:b0:73:79:a6:6a:fc:fa:c9:
60:f2:58:02:fa:9c:86:9c:bd:a7:b1:a6:d4:c0:0c:c6:91:b0:
7e:64:fd:53:9f:10:3c:77:03:16:78:7a:2d:00:1d:e4:8e:0e:
74:7d:0a:16:05:ee:21:f4:11:ac:5c:12:cc:93:f8:6f:5a:98:
61:12:52:85:d6:4d:52:39:40:df:38:e4:f8:ab:38:71:1f:7c:
c7:01:48:00:ae:a1:3d:5f:c8:a4:44:df:2e:4b:e7:af:c8:c9:
4c:03:c2:8d:78:f8:33:cc:b0:af:4b:50:56:83:9f:bc:9b:07:
91:3b:9a:f9:a7:b9:49:b6:7a:2d:fa:bd:d8:ee:74:b7:f4:af:
2e:13:81:13:5e:c7:62:97:c6:25:42:e6:5b:0d:53:a7:8c:19:
ad:fa:be:2a:a6:aa:18:be:fa:24:79:1c:56:fd:f6:26:1e:4e:
32:51:62:f8:4c:45:16:61:c1:da:0e:70:ea:98:92:3d:bc:01:
53:54:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:28 2026 by rpki-client