Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/7zX_66DzWbNab47LnWkuxaI2ZeU.roa
File: 7zX_66DzWbNab47LnWkuxaI2ZeU.roa (raw, json)
Hash identifier: wy9qem7nqDqqjQsxYwFug1iQNRjmqIRNbrnoyYQEvNU=
Subject key identifier: EF:35:FF:EB:A0:F3:59:B3:5A:6F:8E:CB:9D:69:2E:C5:A2:36:65:E5
Certificate issuer: /CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Certificate serial: 019E68AA0E9D00F16DA5376C538737A07E0E
Authority key identifier: 2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/7zX_66DzWbNab47LnWkuxaI2ZeU.roa
Signing time: Wed 27 May 2026 09:00:35 +0000
ROA not before: Wed 27 May 2026 09:00:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 31.222.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:aa:0e:9d:00:f1:6d:a5:37:6c:53:87:37:a0:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e43dac8ea55693439dd1b8b4812ba71834f1031
Validity
Not Before: May 27 09:00:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef35ffeba0f359b35a6f8ecb9d692ec5a23665e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:46:16:95:6d:8c:f4:d4:28:38:e3:a9:07:
5f:9d:94:4b:7c:f3:50:0c:a6:75:a3:4c:05:b2:6d:
fb:bd:c5:71:da:cb:13:d7:f4:2e:61:58:87:86:0e:
81:0a:81:0a:9b:ac:97:91:6f:5f:7a:31:5f:93:d7:
03:6f:e9:1f:31:b9:fe:c1:94:94:2c:ce:93:15:cd:
7f:18:5b:3d:fc:4b:ec:33:10:bb:47:24:7e:d0:ba:
6d:78:2b:ab:b0:69:79:ca:df:30:07:ce:22:4d:be:
1d:69:93:bb:85:b9:23:cf:95:5c:e8:d7:11:34:26:
15:2f:2e:9a:95:e7:05:32:68:9f:03:29:73:d7:6e:
a9:c2:27:b0:8f:e8:45:95:29:82:69:98:3f:77:2b:
42:47:85:2c:c3:a6:51:03:bf:b8:e8:62:38:8a:41:
e7:9c:ac:8f:8d:53:ed:b2:f0:3d:05:2a:40:87:ef:
60:89:b3:17:db:b3:65:59:40:73:96:ab:b9:7b:01:
63:1e:13:e2:28:d9:eb:be:11:29:2f:16:e0:68:17:
6a:5b:d4:70:17:7d:55:17:77:7f:86:ba:8c:2d:63:
e8:3d:1c:4d:21:53:8f:af:c5:61:34:fc:15:48:01:
ef:b8:98:9b:fe:4b:cc:08:d7:30:8f:7d:e5:18:cc:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:35:FF:EB:A0:F3:59:B3:5A:6F:8E:CB:9D:69:2E:C5:A2:36:65:E5
X509v3 Authority Key Identifier:
keyid:2E:43:DA:C8:EA:55:69:34:39:DD:1B:8B:48:12:BA:71:83:4F:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LkPayOpVaTQ53RuLSBK6cYNPEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/7zX_66DzWbNab47LnWkuxaI2ZeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/86ba36-78b8-44bb-9fb4-26c7c963a769/1/LkPayOpVaTQ53RuLSBK6cYNPEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d5:9e:28:c8:ef:94:b5:2c:33:6e:8c:fc:6e:89:b0:b4:2c:
ff:9f:a5:c7:33:6d:21:51:2f:26:8e:a5:76:46:6a:b6:10:18:
2c:02:5a:79:02:ea:80:a7:3d:1a:96:8b:09:a2:8b:de:62:cb:
5a:46:40:a7:5f:a8:0e:ec:8c:0e:71:ab:87:2b:fd:cd:4a:7c:
87:0c:64:3d:06:5e:63:e0:5a:e4:24:74:31:d8:84:31:ed:bb:
35:a5:6f:0e:2b:6b:39:a3:1e:92:5b:c8:11:3a:87:95:f5:7d:
19:40:a0:f0:e0:ba:13:d6:9a:df:4e:4e:c3:73:56:47:bf:af:
73:9e:0f:9a:d3:23:77:2a:8f:38:a9:9a:5d:e6:05:94:20:f4:
4b:d2:29:19:b5:ae:1a:b4:70:e4:d6:23:10:2b:03:9d:32:c5:
87:72:70:88:28:ca:1c:a1:43:32:dd:18:4c:c8:09:78:e9:3e:
72:f6:06:c0:5f:a1:f2:b5:84:bc:50:ea:4b:be:1d:12:98:28:
63:24:5f:06:c5:f8:d6:44:0a:14:23:07:0e:5a:1b:33:43:f5:
5d:a2:ad:4c:02:aa:b9:13:78:56:f4:af:f4:11:cb:82:ce:a0:
b0:75:8f:65:6d:c3:c0:8f:58:5e:8d:2c:42:9d:ff:6a:17:e9:
76:6e:d6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:08 2026 by rpki-client