Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e7CFcaiH-kkAxQQS3sHMoDQfdDw.roa
File: e7CFcaiH-kkAxQQS3sHMoDQfdDw.roa (raw, json)
Hash identifier: 8z/IhMkFBjmkiiuZrsm0R7bybl3TSfX4HRXmhxFB7ao=
Subject key identifier: 7B:B0:85:71:A8:87:FA:49:00:C5:04:12:DE:C1:CC:A0:34:1F:74:3C
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 019DFDDBF0CC0C3A07CF97588EEF2BC60A1B
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e7CFcaiH-kkAxQQS3sHMoDQfdDw.roa
Signing time: Wed 06 May 2026 15:15:42 +0000
ROA not before: Wed 06 May 2026 15:15:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20738
IP address blocks: 168.199.169.0/24 maxlen: 24
168.199.234.0/24 maxlen: 24
168.199.235.0/24 maxlen: 24
185.171.255.0/24 maxlen: 24
185.226.204.0/24 maxlen: 24
185.226.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:db:f0:cc:0c:3a:07:cf:97:58:8e:ef:2b:c6:0a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: May 6 15:15:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bb08571a887fa4900c50412dec1cca0341f743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f7:76:37:fc:20:12:90:b4:b0:00:0b:4f:c3:
a7:f5:de:da:c5:d8:d7:93:73:40:5f:d9:d4:71:63:
23:ef:aa:92:25:d6:2e:c2:58:99:c6:1b:be:9d:ea:
09:17:7b:3f:83:fa:5c:1f:8a:76:5d:13:5d:1e:56:
7b:43:7c:7c:b6:68:b4:76:00:c3:3d:18:b2:a0:5c:
9b:b7:62:5b:ea:d0:04:95:f8:b6:d4:a1:0a:95:19:
d8:a3:f5:78:39:5d:d7:b4:8f:2a:3b:bb:48:43:17:
d8:39:a9:0b:20:47:a4:f2:e2:65:33:98:b2:7d:7f:
1f:db:e2:fc:6d:a5:6c:7e:e3:e8:36:97:84:c7:c5:
67:89:08:9a:21:e0:8a:c8:3c:28:a1:70:7c:ab:b7:
48:9c:f9:25:35:5e:fe:30:24:27:df:fd:bf:4c:f8:
6d:fb:13:fd:e0:cf:47:2f:3b:3d:0e:07:27:43:e6:
25:a4:c7:94:d3:d5:12:52:50:01:e3:00:0e:1b:c0:
fc:1c:6b:1c:a1:a7:62:44:1b:b8:4a:36:ee:dd:50:
8b:5a:a5:f0:21:71:f2:3f:bc:78:a5:f3:a1:51:91:
f7:4c:a2:8c:94:40:8b:04:26:b1:de:77:fb:99:4a:
94:08:cb:5d:46:a5:c8:18:47:7d:2e:9c:82:b8:33:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B0:85:71:A8:87:FA:49:00:C5:04:12:DE:C1:CC:A0:34:1F:74:3C
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/e7CFcaiH-kkAxQQS3sHMoDQfdDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.169.0/24
168.199.234.0/23
185.171.255.0/24
185.226.204.0/24
185.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
89:4a:e2:80:c7:9d:bf:7c:e9:0b:c8:be:a1:86:4f:54:2b:cd:
95:2e:89:31:22:0f:8c:e2:d3:08:4a:b8:11:63:d4:21:89:1c:
19:ad:4b:2e:db:f6:24:b8:8e:90:7b:c0:39:4e:d1:c5:4f:1d:
0c:8f:04:e1:f2:50:e3:40:18:cc:4b:c3:cd:ec:d5:27:3c:1c:
a7:23:b8:be:65:13:8f:f6:75:d0:89:06:c0:4e:19:50:f7:ec:
96:63:9f:c1:c7:67:8d:11:39:4e:a7:39:af:20:bf:2c:cf:59:
73:23:45:ea:26:b9:d7:8d:a6:e4:81:4a:ed:83:0e:39:c9:ac:
7d:d0:30:8b:6c:a6:c9:45:3b:9b:ad:54:4b:3c:f4:f0:8c:2a:
73:88:c1:f2:0e:8b:5c:3a:88:fc:b3:7d:4a:0e:2f:c5:28:e5:
16:1f:f3:cb:e3:f5:e5:76:1c:9e:a0:ef:03:a7:52:5d:bd:23:
9e:03:2f:43:bf:aa:96:c3:53:ed:45:af:56:eb:51:22:62:d2:
03:88:46:9b:e8:5d:ea:cd:8c:4a:ff:e1:0c:e4:e9:50:fe:43:
a3:5a:53:9e:83:c3:d5:af:c7:ff:16:e6:56:9f:63:c1:c0:b6:
48:6a:de:ef:ba:c4:35:e6:4d:d2:b4:58:f7:66:6d:c7:b8:ee:
a5:04:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:13:29 2026 by rpki-client