Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7z8wHNrtXnXTyAOgrIlCBmG0KWY.roa
File: 7z8wHNrtXnXTyAOgrIlCBmG0KWY.roa (raw, json)
Hash identifier: LRF1dzzr7nJwIEzttizpraIOpoHUP0LnhBi5GMAu2iU=
Subject key identifier: EF:3F:30:1C:DA:ED:5E:75:D3:C8:03:A0:AC:89:42:06:61:B4:29:66
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019E43E6741E38C9E2B83CD3D61B27BA616F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7z8wHNrtXnXTyAOgrIlCBmG0KWY.roa
Signing time: Wed 20 May 2026 05:40:36 +0000
ROA not before: Wed 20 May 2026 05:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 80.71.224.0/24 maxlen: 24
81.29.144.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:43:e6:74:1e:38:c9:e2:b8:3c:d3:d6:1b:27:ba:61:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 20 05:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef3f301cdaed5e75d3c803a0ac89420661b42966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:c6:a6:00:a9:b0:d7:7e:96:c1:5a:a6:09:
a5:62:76:07:1d:5f:a4:9a:71:21:18:70:ff:7e:93:
8b:26:fe:ed:0c:b6:61:9e:eb:68:10:94:2c:92:a3:
0b:8a:ce:35:79:eb:4a:59:fe:a2:57:77:88:a1:a7:
2e:d7:04:a4:9a:7e:00:f2:7e:d1:fd:d7:63:de:c4:
0c:b3:f5:84:95:7c:78:ed:11:86:05:9d:63:dc:e9:
a5:90:76:ac:4f:e6:41:54:33:34:36:71:fa:77:30:
6d:cf:02:85:0a:84:3a:85:77:7c:bb:10:ee:38:ec:
84:ce:ae:0d:0f:d7:ff:1e:a2:21:a7:bd:03:7e:18:
ff:f8:be:79:b7:a6:e1:dd:9f:9c:a8:5e:b0:bc:8f:
f3:23:cb:60:74:09:ff:80:73:dd:bb:d3:8d:8c:ba:
3c:9f:72:d0:8b:6a:5e:02:1a:35:2a:8f:2b:8d:dd:
7e:36:f5:55:26:79:e8:6b:da:ef:53:b7:f4:5e:d5:
15:40:c4:b1:37:1a:6b:46:4e:36:48:64:31:f9:0b:
17:fe:64:8a:2e:dd:35:a4:4e:1f:72:43:dc:98:5d:
33:fd:37:b8:93:6e:93:f7:89:0e:8c:00:3a:3a:f7:
21:5a:66:81:13:23:e8:1b:2e:18:86:2d:21:c0:06:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3F:30:1C:DA:ED:5E:75:D3:C8:03:A0:AC:89:42:06:61:B4:29:66
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/7z8wHNrtXnXTyAOgrIlCBmG0KWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
81.29.144.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:38:ba:48:d7:3f:e6:15:08:0a:9f:f4:2e:b0:7c:7d:0d:9c:
23:46:39:af:f7:65:8d:06:3c:90:52:89:a3:47:77:54:26:67:
93:43:ae:79:3a:a9:16:6e:85:f7:10:3c:7e:36:26:ff:ec:44:
86:a0:13:cd:1e:ea:c6:b1:fd:46:f3:c6:6d:0d:31:a7:fb:f2:
45:f8:3c:eb:50:37:49:15:b4:9b:e5:54:60:5b:d9:06:96:b8:
93:e7:70:d0:7c:09:c4:2e:cd:b0:2b:53:4c:72:5a:0c:88:c1:
1b:75:9e:e1:fd:9a:ef:f3:07:50:63:a8:51:6a:b2:e4:42:10:
3a:fc:e3:94:2d:d7:e6:47:32:0c:01:5c:f8:a5:7b:f9:3d:0e:
bd:fa:3d:40:9d:e8:bb:81:3e:9c:1c:73:c1:6d:22:e6:41:3f:
72:00:5f:c4:f0:20:cb:03:11:1c:e0:05:25:11:17:9f:a8:56:
7c:1f:bd:9f:e6:5d:74:dc:53:32:66:db:63:5b:40:ad:a7:88:
bd:16:03:f2:96:36:e3:84:d8:e2:85:33:5e:17:e0:8e:c1:3d:
0b:44:2c:71:61:99:86:d2:e7:ab:1c:f9:e0:da:5b:1f:c5:b1:
d1:40:cb:28:23:f0:67:b4:2b:92:b8:7f:8f:c6:df:4b:37:17:
86:f6:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:00 2026 by rpki-client