Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7y4miIX_lWfX-fN2k76SB3SrHbw.roa
File: 7y4miIX_lWfX-fN2k76SB3SrHbw.roa (raw, json)
Hash identifier: sGNdk8908M1ISWNMX9nM2wU9ta85DpO6L5cd7TvwES4=
Subject key identifier: EF:2E:26:88:85:FF:95:67:D7:F9:F3:76:93:BE:92:07:74:AB:1D:BC
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01A019BDB84B9310C2FA04A5DA043CAB1F6F
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7y4miIX_lWfX-fN2k76SB3SrHbw.roa
Signing time: Wed 19 Aug 2026 11:17:38 +0000
ROA not before: Wed 19 Aug 2026 11:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 91.233.121.0/24 maxlen: 24
92.42.1.0/24 maxlen: 24
92.63.224.0/24 maxlen: 24
148.222.185.0/24 maxlen: 24
148.222.186.0/24 maxlen: 24
185.93.104.0/24 maxlen: 24
185.93.105.0/24 maxlen: 24
185.93.106.0/24 maxlen: 24
185.93.107.0/24 maxlen: 24
185.192.20.0/24 maxlen: 24
185.192.21.0/24 maxlen: 24
185.192.23.0/24 maxlen: 24
185.200.197.0/24 maxlen: 24
2a02:c6c1:2::/48 maxlen: 48
2a02:c6c1:3::/48 maxlen: 48
2a02:c6c1:e::/48 maxlen: 48
2a02:c6c1:10::/48 maxlen: 48
2a02:c6c1:141::/48 maxlen: 48
2a02:c6c1:142::/48 maxlen: 48
2a02:c6c1:151::/48 maxlen: 48
2a02:c6c1:152::/48 maxlen: 48
2a02:c6c1:153::/48 maxlen: 48
2a02:c6c1:154::/48 maxlen: 48
2a02:c6c1:155::/48 maxlen: 48
2a02:c6c1:156::/48 maxlen: 48
2a02:c6c2::/32 maxlen: 32
2a02:c6c3::/32 maxlen: 32
2a02:c6c7::/32 maxlen: 32
2a0c:6740::/29 maxlen: 29
2a0c:6741::/32 maxlen: 32
2a0e:92c0::/29 maxlen: 29
2a0e:9a40::/29 maxlen: 29
2a0e:a7c0::/29 maxlen: 29
2a0e:a7c0::/32 maxlen: 32
2a0e:a7c1:1::/48 maxlen: 48
2a0e:a7c2::/32 maxlen: 32
2a0f:4b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:bd:b8:4b:93:10:c2:fa:04:a5:da:04:3c:ab:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 19 11:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef2e268885ff9567d7f9f37693be920774ab1dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:b6:e8:53:f8:ee:1a:7a:3a:4e:d2:9f:e4:
aa:9a:36:dc:e1:d1:7c:98:07:26:f9:7b:ee:6d:d9:
36:71:55:be:8b:34:e0:f9:1b:ea:b6:c0:6f:1e:2f:
c7:df:04:ee:9b:dc:58:ed:9b:f0:71:8d:c1:ba:4a:
a0:33:73:d2:d9:b3:22:ff:91:3c:a8:35:48:2b:a6:
de:14:68:54:c6:14:a9:c7:53:c0:83:ee:f4:3b:26:
8a:8d:4f:f8:57:8a:c0:6d:ed:34:ec:9a:c4:5f:d2:
46:10:d3:90:1a:e9:72:37:92:78:66:ea:b1:ea:ef:
20:f7:2e:9f:f8:90:eb:0c:51:01:f5:35:70:a8:47:
3a:db:26:38:8a:7b:03:f9:6e:6a:22:9b:e6:ef:ae:
6b:36:b1:3f:f9:20:18:ea:aa:77:ad:aa:52:f9:cf:
c2:d8:7d:39:69:e3:92:5b:85:c0:4f:05:e3:df:dc:
b8:48:7e:ea:39:db:0e:b9:8d:12:2e:b6:5f:6d:da:
81:6a:b5:0b:db:9d:a9:96:7f:ce:9d:ab:a9:cb:8e:
b4:65:0e:17:ca:77:c5:ed:62:65:0e:ef:26:0f:82:
57:5a:6b:ec:c9:3d:52:6e:b4:98:38:e3:11:55:30:
f4:35:d3:29:69:48:93:8c:12:71:ef:98:ee:b9:cd:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2E:26:88:85:FF:95:67:D7:F9:F3:76:93:BE:92:07:74:AB:1D:BC
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/7y4miIX_lWfX-fN2k76SB3SrHbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.121.0/24
92.42.1.0/24
92.63.224.0/24
148.222.185.0-148.222.186.255
185.93.104.0/22
185.192.20.0/23
185.192.23.0/24
185.200.197.0/24
IPv6:
2a02:c6c1:2::/47
2a02:c6c1:e::/48
2a02:c6c1:10::/48
2a02:c6c1:141::-2a02:c6c1:142:ffff:ffff:ffff:ffff:ffff
2a02:c6c1:151::-2a02:c6c1:156:ffff:ffff:ffff:ffff:ffff
2a02:c6c2::/31
2a02:c6c7::/32
2a0c:6740::/29
2a0e:92c0::/29
2a0e:9a40::/29
2a0e:a7c0::/29
2a0f:4b40::/29
Signature Algorithm: sha256WithRSAEncryption
3f:1a:08:72:3c:24:de:a5:0f:df:30:99:07:a8:48:e9:20:49:
5b:06:20:4a:12:30:8a:3d:6b:0f:8a:2d:eb:30:ed:b7:ff:72:
61:13:fd:1d:e8:44:19:0e:b2:68:f4:35:37:4b:95:b8:c5:6f:
5a:2b:33:a3:00:1c:e7:63:ee:07:d4:07:30:4e:ef:16:6a:07:
ce:94:f8:bd:34:da:2d:bd:58:43:f6:e3:c8:45:80:dd:40:26:
9d:b5:ee:7c:00:9b:7f:92:93:ef:4a:2a:6f:30:1b:22:4a:c8:
4a:39:4a:d5:1e:a2:b0:4a:5b:46:c4:06:3a:41:8f:d5:27:d3:
f8:ee:aa:4d:a3:e2:ba:5b:4d:3b:c4:06:ca:5e:df:61:78:7c:
cc:53:1a:32:e9:80:c8:59:31:16:bf:87:9e:8e:e9:ba:a9:93:
ed:61:c6:70:f9:ea:e0:65:f8:5b:75:fa:55:c9:21:f6:a5:87:
32:8c:da:9a:c2:60:59:3a:5d:79:f2:1d:15:c3:de:90:69:a9:
94:4f:cd:74:7b:bc:b5:6f:e9:06:63:1c:10:40:fb:05:aa:0e:
94:55:79:7d:ed:0e:39:d0:7c:41:dc:2f:2f:b5:8c:c3:be:28:
6d:37:c2:fb:37:26:b0:8d:fc:f9:47:bd:eb:a0:2b:3f:8c:c8:
cf:5f:cb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:23 2026 by rpki-client