Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/7Scik-X8N5D-2aMEU2Z1kPCqKhM.roa
File: 7Scik-X8N5D-2aMEU2Z1kPCqKhM.roa (raw, json)
Hash identifier: NGWgIYynYlQ1UVE8iCJVPsg4/pEPdgtPoDN8hUbSWAQ=
Subject key identifier: ED:27:22:93:E5:FC:37:90:FE:D9:A3:04:53:66:75:90:F0:AA:2A:13
Certificate issuer: /CN=6688f0f1b5d341670069202717d63c0540464ff5
Certificate serial: 019E6DEB26959F64E7E7AA918D3ED4AB9F7C
Authority key identifier: 66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/7Scik-X8N5D-2aMEU2Z1kPCqKhM.roa
Signing time: Thu 28 May 2026 09:29:47 +0000
ROA not before: Thu 28 May 2026 09:29:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60814
IP address blocks: 185.25.128.0/23 maxlen: 23
185.25.130.0/23 maxlen: 23
185.25.130.0/24 maxlen: 24
185.25.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:eb:26:95:9f:64:e7:e7:aa:91:8d:3e:d4:ab:9f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6688f0f1b5d341670069202717d63c0540464ff5
Validity
Not Before: May 28 09:29:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed272293e5fc3790fed9a30453667590f0aa2a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:5f:51:78:ce:9f:71:a1:41:57:87:38:e8:
41:68:af:70:3e:c6:21:ca:f9:96:b1:ef:0f:1a:e0:
42:d4:3c:97:00:82:2d:bf:d5:32:94:2e:ad:cf:20:
b7:e0:46:1d:5a:13:17:c5:86:b3:9d:c0:c1:d2:13:
58:87:c5:50:e6:b8:12:1f:02:d4:f0:fb:6c:c8:e9:
dd:95:d4:d4:74:53:75:03:07:8a:02:f5:3a:a7:2a:
94:de:a1:e8:31:68:75:19:10:e7:6d:d2:99:9b:f6:
8a:69:81:7b:5f:fe:c4:09:84:cc:c8:88:21:b3:4f:
75:91:9c:3f:4e:a7:c4:d2:1b:5e:22:ca:a0:22:d6:
77:d5:f3:ce:d6:a5:b5:b9:e9:18:c8:73:54:3a:b6:
d7:7e:6e:91:1c:55:ef:8b:78:95:9f:db:ac:3d:c6:
5d:32:ce:9e:ab:69:59:4a:98:1a:47:99:ff:a1:be:
2a:12:b3:4f:4f:0a:21:51:01:f8:c2:d6:2c:cf:85:
43:70:d1:0f:1c:26:c3:a1:71:8d:5d:3e:36:df:31:
4f:53:11:b1:0f:18:04:47:6f:b7:d4:8d:36:69:2c:
1c:9b:af:ab:9e:2e:53:81:c4:80:18:70:57:6e:31:
ac:f4:92:22:33:3a:ab:c7:e2:0b:2e:af:7a:fa:1c:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:27:22:93:E5:FC:37:90:FE:D9:A3:04:53:66:75:90:F0:AA:2A:13
X509v3 Authority Key Identifier:
keyid:66:88:F0:F1:B5:D3:41:67:00:69:20:27:17:D6:3C:05:40:46:4F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/7Scik-X8N5D-2aMEU2Z1kPCqKhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9c1b14-e3a9-4d92-be7a-b13d2fed1dc6/1/Zojw8bXTQWcAaSAnF9Y8BUBGT_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.128.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:da:a1:6b:b1:16:a4:0f:c5:07:54:97:46:a0:2f:b6:6a:28:
2d:92:e3:ca:80:70:d1:9d:5d:7e:72:55:4f:48:2c:c6:27:0c:
77:9f:94:50:6d:fc:b2:d1:44:a2:d5:99:a5:a1:99:8d:b6:d9:
60:50:95:5f:7f:1f:15:5c:22:1a:f2:ac:f8:64:96:de:6b:fe:
d4:64:13:14:ed:ff:cc:a4:df:d3:ad:6b:b7:0f:a1:99:93:ae:
33:d4:8e:cf:fa:81:b0:74:d9:75:7d:86:df:f4:4a:59:42:5f:
8b:5d:bf:60:0b:37:43:ae:fd:03:ba:37:32:15:1d:a7:dc:e4:
59:09:91:e6:ad:ab:70:06:ba:aa:60:9d:8b:c8:8e:bd:40:51:
e1:cb:89:75:bd:12:14:df:6b:c3:a3:50:76:50:56:67:2d:a1:
e9:bb:5f:77:02:ed:6c:0b:dd:4e:fe:aa:45:0c:35:16:44:71:
5d:86:7f:98:0e:b5:f3:70:e8:7f:ba:86:ec:7d:db:1d:07:30:
a2:2c:42:24:16:3f:4b:36:fa:48:f0:e6:85:79:2a:88:f5:e9:
dc:b7:7c:a0:95:6f:2e:36:37:b2:f4:5a:ff:e8:e5:06:51:81:
75:4e:c3:aa:82:f0:5b:ef:25:cc:25:47:bb:7c:6e:37:ec:ee:
29:3e:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:59:54 2026 by rpki-client