Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/d7lqAUzGr5Jc883I2HWBv_nEhIM.roa
File: d7lqAUzGr5Jc883I2HWBv_nEhIM.roa (raw, json)
Hash identifier: BNKZdUryXFyz1omY36pPU2N0lM3FeOgjtMztkteKae8=
Subject key identifier: 77:B9:6A:01:4C:C6:AF:92:5C:F3:CD:C8:D8:75:81:BF:F9:C4:84:83
Certificate issuer: /CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Certificate serial: 019F2368CBFFACDAF98CFB8003A7CF0DEA26
Authority key identifier: 2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/d7lqAUzGr5Jc883I2HWBv_nEhIM.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47447
IP address blocks: 185.117.215.0/24 maxlen: 24
2a06:8781::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:ff:ac:da:f9:8c:fb:80:03:a7:cf:0d:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7a99e9d2d95d32b7fa5c256a62c4aff60b1f37
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b96a014cc6af925cf3cdc8d87581bff9c48483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:12:ba:ce:0c:21:9e:e7:cb:f2:3c:37:01:f5:
dc:81:f1:66:a0:0b:6e:6c:46:f7:ad:b4:42:d4:80:
11:3e:a3:12:7d:9f:78:ca:03:63:69:20:61:ff:42:
42:5d:71:72:10:44:a7:7f:90:db:c0:e4:2b:b8:8b:
a5:40:f5:b4:a2:4f:6f:48:24:ce:71:59:1c:90:ab:
aa:4a:e6:92:36:e3:9f:7d:3b:38:f3:9e:08:35:73:
37:98:73:ac:62:2a:59:3f:8b:3f:b6:1d:c7:cb:62:
40:36:74:05:a0:a5:61:90:41:80:1a:75:5c:80:83:
6a:1d:19:24:53:ed:22:21:32:ef:38:63:30:eb:6c:
12:bb:3c:88:af:5c:e2:cc:e3:50:20:fd:35:97:9d:
a2:3a:71:11:f0:32:23:45:81:83:78:8e:ba:dc:06:
71:72:a2:91:6e:91:8c:4c:79:91:c2:38:89:95:76:
36:4f:e0:56:6c:b2:94:4b:72:97:18:9d:66:83:4b:
eb:6e:77:16:a3:eb:c5:ab:cf:39:cf:00:e4:88:ba:
38:c8:16:3f:1f:11:6b:0b:a1:67:cf:d7:09:4b:bc:
25:41:e3:ba:e0:6e:13:a8:e8:a2:5e:45:00:5d:2e:
a8:e3:50:dd:85:f7:36:a4:4c:a6:d4:fa:93:5b:dd:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:6A:01:4C:C6:AF:92:5C:F3:CD:C8:D8:75:81:BF:F9:C4:84:83
X509v3 Authority Key Identifier:
keyid:2E:7A:99:E9:D2:D9:5D:32:B7:FA:5C:25:6A:62:C4:AF:F6:0B:1F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LnqZ6dLZXTK3-lwlamLEr_YLHzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/d7lqAUzGr5Jc883I2HWBv_nEhIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/LnqZ6dLZXTK3-lwlamLEr_YLHzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.215.0/24
IPv6:
2a06:8781::/40
Signature Algorithm: sha256WithRSAEncryption
6d:03:8c:05:ea:2c:22:a7:fa:9f:a0:f7:81:11:b8:e8:e4:36:
b7:98:56:e0:33:cb:b7:d4:a3:3f:5d:59:38:ec:63:82:59:43:
a6:88:12:9a:69:66:08:01:94:7c:47:08:be:ef:6f:3d:13:18:
a7:30:99:2f:fb:f8:10:4d:aa:1c:1e:5d:b4:15:e0:d3:c5:57:
37:cb:cd:b4:d6:a1:09:76:ed:b2:5e:c4:b3:98:68:e0:16:e7:
ff:69:20:8f:a5:07:63:69:be:87:5c:0e:5f:ce:e8:cb:3b:d8:
e6:07:19:33:62:2c:8c:b3:23:ec:0e:f3:93:27:c8:c4:75:87:
c4:57:eb:f2:0d:22:62:d1:cb:68:dd:0d:8d:15:fa:36:d7:9c:
ee:b8:b3:11:a9:9a:a5:ef:b3:99:0e:11:e6:f5:7f:58:2c:40:
96:0e:12:ca:54:64:19:68:86:c4:0c:a5:e9:34:a6:54:71:39:
7d:12:76:e1:4e:24:9f:5e:df:4d:9d:dc:d5:1a:4b:4c:26:57:
98:7c:15:12:2c:c9:75:b5:11:bb:a5:03:3c:7c:34:c3:f0:d2:
27:bb:7f:d5:a7:46:b6:e3:c5:0c:05:14:86:05:35:ac:08:e7:
4e:54:23:e0:fc:45:a2:0a:c9:c2:4e:8f:a3:d0:20:b1:8c:43:
3b:cb:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:52 2026 by rpki-client