Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7G4Hoj8dC3Iix4RA6T3BtT8SAXc.roa
File: 7G4Hoj8dC3Iix4RA6T3BtT8SAXc.roa (raw, json)
Hash identifier: TV5Hyt8pM36A8XosEaKEDEc87t+5KBWqAdOJeIXyguA=
Subject key identifier: EC:6E:07:A2:3F:1D:0B:72:22:C7:84:40:E9:3D:C1:B5:3F:12:01:77
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019FB292D852D8446FD380573E74F47E500C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7G4Hoj8dC3Iix4RA6T3BtT8SAXc.roa
Signing time: Thu 30 Jul 2026 10:29:55 +0000
ROA not before: Thu 30 Jul 2026 10:29:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.252.0/24 maxlen: 24
45.8.253.0/24 maxlen: 24
85.208.105.0/24 maxlen: 24
193.168.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:92:d8:52:d8:44:6f:d3:80:57:3e:74:f4:7e:50:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 30 10:29:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec6e07a23f1d0b7222c78440e93dc1b53f120177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cd:2e:0b:70:29:15:76:a8:9b:49:0b:85:e9:
18:a8:00:33:d4:93:7e:2d:de:84:ce:57:f3:2c:4d:
5f:f6:41:c3:f7:a0:01:7a:c0:91:ed:4d:9e:65:43:
e3:88:f4:92:44:93:ea:04:48:3a:24:ff:60:d2:6d:
73:6e:e4:23:f0:5a:cc:94:5b:a9:53:b3:c6:2d:ae:
4a:5e:4a:c9:6a:eb:81:f2:d8:8e:fb:19:00:49:67:
4e:50:98:f2:c4:8d:fe:85:7a:32:06:3a:34:19:de:
fc:33:af:62:4c:7c:4c:05:6b:2f:d7:83:42:6b:2c:
ce:13:40:22:67:a5:9b:b9:b7:58:78:6e:22:5b:2e:
49:cc:a4:a2:c8:a8:ec:25:33:77:d7:a0:cc:2b:43:
9e:f4:e7:b7:ea:79:c6:9f:28:ce:bf:00:be:74:06:
b4:f9:72:bb:13:30:42:00:16:6e:41:e8:25:f0:a8:
5b:4b:7b:36:b2:49:c2:bd:1d:58:de:95:32:17:5d:
36:0d:b1:08:8a:b0:cc:19:c8:ca:9b:08:fd:06:1f:
df:8a:7b:b6:64:eb:31:ab:f6:bf:cd:c7:03:20:ff:
4e:93:7a:cf:a5:e5:54:93:7e:c4:d5:6e:c7:14:8d:
9d:5c:3a:aa:5a:3b:15:56:b8:61:0b:7e:8b:b1:43:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:07:A2:3F:1D:0B:72:22:C7:84:40:E9:3D:C1:B5:3F:12:01:77
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7G4Hoj8dC3Iix4RA6T3BtT8SAXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.252.0/23
85.208.105.0/24
193.168.210.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fb:a2:09:bb:6f:a4:62:9b:30:c5:82:e0:82:a6:4a:20:58:
57:84:70:36:d1:4a:99:dc:a4:ab:06:06:cf:a6:8d:c1:8e:5d:
70:73:98:3b:db:3e:7e:22:0a:7b:f0:ef:ad:b8:53:55:45:6c:
0a:22:c5:95:23:b7:89:a0:ac:b1:10:51:42:1e:3a:2a:cb:be:
75:91:55:52:40:57:92:55:7c:6c:9a:73:20:37:d9:9d:b6:28:
eb:fc:b1:63:d7:ed:38:97:ab:ac:2a:98:74:c4:3b:aa:cb:96:
cf:e9:fb:6a:d9:eb:27:a6:34:86:ef:44:55:fa:8b:ff:1b:78:
d9:d9:44:2f:e5:76:00:dd:74:af:59:cb:5e:17:bc:20:2c:f3:
6f:a2:95:8d:6e:35:c7:17:1f:62:c3:b3:df:88:85:b1:d5:70:
6e:47:d4:61:82:0f:f0:03:b5:e7:00:a1:e5:9d:8f:3a:22:5f:
2f:bd:5d:80:04:c5:cd:a3:3a:94:38:bd:73:fc:38:fe:72:17:
ac:e6:6d:1e:8b:0d:c3:be:c9:c0:34:44:60:78:c6:6f:1c:75:
bb:c1:64:c2:f6:87:67:0b:64:75:ec:ad:43:75:b8:25:2f:47:
9a:c3:4c:34:b9:4c:aa:66:f6:29:8e:3c:d0:a4:ec:99:1a:f5:
c4:5f:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 14:25:55 2026 by rpki-client