Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7u4RVlV52XWyTyDw_qznuD0UgXs.roa
File: 7u4RVlV52XWyTyDw_qznuD0UgXs.roa (raw, json)
Hash identifier: vYm6Nz0cS2O84RBnN+siuod691AUb0y3q4ys6CicPZI=
Subject key identifier: EE:EE:11:56:55:79:D9:75:B2:4F:20:F0:FE:AC:E7:B8:3D:14:81:7B
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019F5F97AE25468E285ED7AE200BA09DBDFF
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7u4RVlV52XWyTyDw_qznuD0UgXs.roa
Signing time: Tue 14 Jul 2026 07:46:43 +0000
ROA not before: Tue 14 Jul 2026 07:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.137.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:97:ae:25:46:8e:28:5e:d7:ae:20:0b:a0:9d:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 14 07:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeee11565579d975b24f20f0feace7b83d14817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:f4:8d:d5:75:14:5b:3d:55:e2:20:25:c7:
74:e7:e6:69:21:e4:50:53:4f:f6:b9:bc:73:ee:80:
49:0a:08:96:57:e0:c3:d0:1e:57:98:83:5d:d2:ff:
17:10:1a:33:af:1a:ea:11:78:d4:32:3e:88:db:98:
e5:dd:3a:5a:99:05:c4:8d:f8:66:ca:c2:d8:b3:82:
a1:23:b8:2e:18:58:ff:2e:47:ba:6f:58:19:eb:49:
fe:06:ae:bb:06:a2:90:95:94:c1:ea:4c:0e:00:e3:
21:2b:19:e3:f7:66:d1:6b:d7:e3:68:88:ec:ac:e2:
6b:0b:f4:20:9c:32:f3:40:c0:5b:36:6e:15:64:46:
b3:ca:59:e8:8e:a6:01:2f:06:2a:87:7e:83:a1:b7:
8c:75:e9:7e:84:dd:e8:62:97:45:5c:ce:cc:4e:e3:
38:87:4b:4c:aa:54:87:e0:d1:7f:f4:a4:7a:25:2f:
4d:59:d5:3f:51:d4:7d:20:0a:23:2c:58:55:98:2a:
f2:0f:09:f7:0b:83:06:a2:ed:c9:e5:be:88:bd:ba:
fa:8a:87:27:84:d9:85:ec:09:a3:63:4f:54:b3:2a:
56:82:de:a6:0d:e6:55:0f:61:19:ee:22:ca:f0:7c:
39:c6:53:6a:c1:80:e6:29:67:48:0d:d1:0d:3e:3a:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EE:11:56:55:79:D9:75:B2:4F:20:F0:FE:AC:E7:B8:3D:14:81:7B
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/7u4RVlV52XWyTyDw_qznuD0UgXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.137.0/24
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b7:fe:ff:8f:9e:6c:61:12:3c:9c:bf:2d:bd:a8:4a:78:3d:
7e:c6:c2:b1:90:85:c6:34:c0:59:1e:20:09:42:6d:cc:e9:bc:
bb:dd:85:36:1b:aa:db:5c:a5:a2:02:9f:ce:b3:67:77:b7:3b:
35:ed:fb:63:d0:49:94:87:20:d9:96:93:1a:78:43:ca:12:14:
8f:64:b7:ea:ed:b7:c8:eb:2e:0d:0c:36:bc:4b:d4:7b:83:4c:
b0:08:72:3d:fd:97:11:38:63:56:69:48:87:5b:e1:44:79:61:
b0:99:48:7d:9f:27:b8:10:bd:5b:7b:6f:42:50:1b:c7:a3:eb:
ab:b5:66:b2:21:3c:0b:1c:d0:30:59:12:da:c0:10:ad:1c:07:
1b:b8:aa:af:21:eb:04:c0:a7:8d:f7:f2:37:32:84:55:a3:5c:
2f:48:74:48:67:aa:49:5c:c2:58:33:75:cf:85:12:cb:f0:f0:
d1:c3:69:31:39:35:52:fa:5a:07:56:a5:7e:6d:29:c5:89:90:
a3:f2:ac:6b:c0:51:d8:a0:b0:ae:16:6d:32:db:48:c9:33:4b:
70:ca:df:98:a6:2b:35:0f:a1:3b:25:43:0e:1b:a8:db:72:0a:
47:2d:85:a9:97:87:48:33:8f:51:a5:2d:4c:fc:96:7d:4b:77:
ef:0f:27:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:32 2026 by rpki-client