Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/f7Wgr4p3vhEL9zaUWY1yvpO5Xfs.roa
File: f7Wgr4p3vhEL9zaUWY1yvpO5Xfs.roa (raw, json)
Hash identifier: Byeo5L+DigRGzBSFnppQJP9p5MukzszzHjPsr2VBoWc=
Subject key identifier: 7F:B5:A0:AF:8A:77:BE:11:0B:F7:36:94:59:8D:72:BE:93:B9:5D:FB
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A14ED6AEBE4F313EAC5DA2225E2F2218EF
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/f7Wgr4p3vhEL9zaUWY1yvpO5Xfs.roa
Signing time: Sun 18 Oct 2026 11:47:34 +0000
ROA not before: Sun 18 Oct 2026 11:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 212.87.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:d6:ae:be:4f:31:3e:ac:5d:a2:22:5e:2f:22:18:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Oct 18 11:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fb5a0af8a77be110bf73694598d72be93b95dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:33:a1:1c:b1:90:94:cc:59:bf:3d:7e:d0:
1e:cf:5e:a8:c4:90:32:1a:a5:b2:1f:67:35:a0:ce:
16:9b:84:d6:6b:8f:dd:8c:b1:d2:ff:10:86:db:a4:
c4:e8:17:12:db:2c:1d:14:87:ce:ee:18:4a:71:72:
91:9a:72:50:9b:07:34:53:03:24:29:ad:da:3c:c4:
6d:11:83:ac:10:14:94:00:11:fb:53:30:9f:bd:7d:
65:5d:9e:6a:53:7a:2c:95:6e:f7:e7:76:be:e1:15:
bb:0f:f3:fe:83:ac:e8:2e:fe:dd:3d:7a:95:dd:db:
3f:2b:5a:cc:5f:6f:61:9e:c1:30:57:da:af:a8:b2:
d0:44:6b:02:17:d3:d0:be:5f:f0:d0:af:96:db:93:
28:b2:3a:7f:40:d4:99:30:17:c3:eb:2e:da:2f:3a:
2d:c2:e0:1d:ed:8d:0d:e6:ab:13:8b:74:c0:55:99:
65:38:5f:62:f2:63:11:4f:95:c8:bd:38:26:c3:2e:
20:1b:ec:73:34:7e:37:bf:80:b3:89:94:d5:b8:a0:
82:8e:14:40:46:6e:3b:e7:2f:6c:9d:da:64:7a:d5:
b2:f2:2b:04:6b:19:2a:3e:30:a1:14:89:f5:05:c6:
f8:50:40:5c:ce:da:90:7e:4d:6b:54:e8:d8:6a:5b:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B5:A0:AF:8A:77:BE:11:0B:F7:36:94:59:8D:72:BE:93:B9:5D:FB
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/f7Wgr4p3vhEL9zaUWY1yvpO5Xfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.186.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e1:f8:66:22:17:b8:56:20:f5:1e:aa:98:2d:76:84:08:7e:
6d:16:1c:f3:f0:c0:48:2b:e3:2c:8e:18:0c:be:1b:d1:58:55:
7e:4b:6c:ab:da:9d:28:6b:0f:bb:45:ad:c7:08:b1:a6:2f:61:
3c:23:64:8e:da:17:41:9e:b4:0f:60:c9:d4:61:06:62:d8:f5:
58:30:3f:dd:b2:ee:a6:00:26:68:ac:4e:1b:25:26:fc:13:f5:
59:e6:4c:64:04:ab:ed:66:8e:5a:7c:74:a0:f2:ba:e4:71:71:
ff:ae:8b:9f:f8:60:58:5f:6d:8f:b6:fd:c3:f2:42:53:7f:a1:
e5:d0:3e:0c:65:c9:20:84:2d:f7:ef:f6:c7:72:ca:70:8d:68:
7f:66:8a:47:6f:ff:ef:c6:29:75:41:6d:99:0e:b9:ea:cc:bb:
d1:50:a0:99:f5:db:d6:c8:b3:83:1d:b6:62:49:ab:3a:a7:49:
c9:b5:92:2b:22:1a:d5:63:bc:97:e6:da:d5:e4:23:3f:4a:d3:
43:91:a2:69:02:51:6d:5d:27:30:fa:25:b6:55:8c:92:68:26:
03:3d:5c:87:e7:31:a7:8e:90:a9:ef:a0:71:3f:68:e6:d7:db:
ba:d5:ff:8a:e0:e4:07:38:e1:e1:74:dd:6d:03:c2:a8:7c:ad:
b2:f5:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 10:09:13 2026 by rpki-client