Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa
File: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (raw, json)
Hash identifier: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=
Subject key identifier: C7:C1:1F:F2:45:24:D4:00:54:18:3A:DD:BE:93:D7:DA:AF:AC:33:96
Certificate issuer: /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial: 019EF9ABEBDC173F7A145099843F54A9C807
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa
Signing time: Wed 24 Jun 2026 12:47:34 +0000
ROA not before: Wed 24 Jun 2026 12:47:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12735
IP address blocks: 185.50.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:ab:eb:dc:17:3f:7a:14:50:99:84:3f:54:a9:c8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749304120ce64942efb3896623b386a041dcb364
Validity
Not Before: Jun 24 12:47:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7c11ff24524d40054183addbe93d7daafac3396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:87:df:3b:c3:d2:f5:15:30:38:af:26:8f:
b3:73:1c:dc:0e:f5:d7:80:26:c7:36:ea:0e:25:f1:
e9:eb:f6:26:20:0c:8e:7f:a2:0a:88:79:ce:ce:25:
80:3f:5c:58:fc:0d:4c:0b:7f:49:cd:27:3d:c1:d0:
e6:b5:20:50:cd:53:f5:5a:01:bc:d7:2f:b9:bf:1a:
dd:cf:15:af:4e:1a:50:34:a6:90:a2:dd:06:3c:49:
da:42:dd:b2:4b:b3:5a:09:4d:18:cc:28:ca:6d:d4:
84:b0:57:d3:b7:84:5a:ad:2d:94:6b:cd:dc:a8:e4:
66:44:26:a9:9d:88:f6:4e:dd:73:34:2a:1f:1b:75:
7c:d4:c9:99:02:86:ad:83:1a:94:86:be:5b:a0:1e:
97:ed:aa:8b:27:d6:08:e3:e4:2f:b8:06:d1:3e:59:
7b:a3:43:48:fc:7a:9e:35:79:69:7f:c8:3f:66:78:
68:5b:b9:5d:e8:e5:37:1c:85:50:48:d2:a8:01:21:
33:59:f2:e5:9f:ad:ce:f0:e3:5d:91:55:7e:17:74:
00:7c:04:6e:77:87:b6:40:fa:4d:80:5e:da:a4:49:
90:23:a0:7a:75:63:17:bb:15:bf:91:62:42:66:b0:
ec:52:e6:bd:e7:0b:7b:cd:79:e7:34:7d:4d:9c:f9:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:1F:F2:45:24:D4:00:54:18:3A:DD:BE:93:D7:DA:AF:AC:33:96
X509v3 Authority Key Identifier:
keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.167.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d2:32:53:3a:c3:89:d1:37:cc:48:7b:ec:56:da:36:53:c7:
a5:d5:92:ec:6d:a0:aa:38:fc:21:d9:65:c9:33:56:d2:47:26:
78:ad:82:b2:ea:15:2c:d9:a4:50:00:8b:43:c6:e8:ba:c7:ca:
7b:27:d7:33:2b:73:42:bc:44:d8:d9:cd:bb:60:eb:e1:6f:16:
82:3a:6d:61:ee:19:ff:af:22:44:73:08:80:64:2c:5c:cd:cd:
23:0c:f4:f4:bb:b8:56:3e:5b:59:a9:7c:c1:83:2b:b1:af:5f:
ef:fc:72:09:48:ed:63:b1:23:1c:5b:88:39:6e:77:21:77:ba:
84:0d:11:9c:94:d0:77:0c:c8:96:53:ea:19:49:c8:06:07:5c:
d4:98:bd:e1:f5:32:58:b7:59:fd:4c:a3:70:b8:99:17:8c:2c:
f8:82:7f:72:e5:94:9c:89:72:b2:e1:fe:af:d2:58:85:e0:8a:
2b:11:db:1c:09:a7:7c:20:14:18:96:6b:59:f7:7b:68:99:ed:
3e:00:2b:cd:36:6e:02:15:b9:aa:28:02:4b:98:bb:bf:67:35:
ca:4d:a7:32:5c:f0:03:26:99:16:48:a7:ef:2f:05:a2:87:7f:
08:ac:94:9a:cb:e7:9b:96:08:7c:6a:a4:f6:6b:2d:d2:d5:78:
15:b7:38:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:15 2026 by rpki-client