Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/r7-Q7Z7ojDOM7JzeGTPGKcmOHLY.roa
File: r7-Q7Z7ojDOM7JzeGTPGKcmOHLY.roa (raw, json)
Hash identifier: FrhU7TlXY6zvJX7PyBnaqXNO3GBvHphJchsAXtiofdw=
Subject key identifier: AF:BF:90:ED:9E:E8:8C:33:8C:EC:9C:DE:19:33:C6:29:C9:8E:1C:B6
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 019FE122F032934EE909BBADF95B6547FD31
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/r7-Q7Z7ojDOM7JzeGTPGKcmOHLY.roa
Signing time: Sat 08 Aug 2026 11:29:51 +0000
ROA not before: Sat 08 Aug 2026 11:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44620
IP address blocks: 45.74.158.0/24 maxlen: 24
45.74.159.0/24 maxlen: 24
91.228.227.0/24 maxlen: 24
158.94.216.0/24 maxlen: 24
176.97.219.0/24 maxlen: 24
217.11.164.0/24 maxlen: 24
217.11.165.0/24 maxlen: 24
2a01:f900::/29 maxlen: 48
2a01:f900:203::/48 maxlen: 48
2a01:f900:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:22:f0:32:93:4e:e9:09:bb:ad:f9:5b:65:47:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Aug 8 11:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afbf90ed9ee88c338cec9cde1933c629c98e1cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:83:c4:68:73:58:9e:19:68:4b:07:94:dd:
3b:2b:7c:29:a9:54:95:29:7d:96:0e:4e:08:e6:61:
cc:9f:6d:95:9c:89:26:b9:f3:fe:15:6d:5f:30:47:
21:d0:3c:0f:8b:99:c6:1b:bd:0e:28:4e:31:ae:73:
23:d6:b3:1e:63:7f:72:b2:eb:81:1c:b9:cb:f5:74:
70:0a:91:9b:a8:4b:44:0a:06:0b:ec:7a:8a:c2:d0:
c5:24:86:dc:d8:9d:b4:ac:68:b0:80:3a:ce:7a:ed:
50:34:ee:a3:70:28:9a:e6:de:92:d1:75:cb:a6:da:
9d:1c:cd:b2:0b:b5:0f:a4:d7:47:05:1a:13:b4:58:
c6:51:9c:c9:3e:da:b3:4c:b8:75:ef:a0:32:bc:07:
b2:0e:49:cf:2c:62:3d:2b:a7:b9:93:02:60:f9:f4:
c7:70:e2:de:9d:54:4f:a2:18:6b:e2:10:40:a1:4d:
07:be:66:79:be:4f:6b:88:ea:97:0e:38:39:ce:af:
c0:37:15:10:79:df:6e:05:56:6d:33:69:71:45:6d:
e9:50:6e:10:34:52:2c:05:e4:0e:2f:c7:af:07:20:
5d:71:d9:f2:07:36:d4:08:47:e0:3c:cd:5a:fd:b5:
0d:b2:d5:11:43:83:69:f0:da:81:42:d3:87:25:b4:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BF:90:ED:9E:E8:8C:33:8C:EC:9C:DE:19:33:C6:29:C9:8E:1C:B6
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/r7-Q7Z7ojDOM7JzeGTPGKcmOHLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.158.0/23
91.228.227.0/24
158.94.216.0/24
176.97.219.0/24
217.11.164.0/23
IPv6:
2a01:f900::/29
Signature Algorithm: sha256WithRSAEncryption
42:e2:87:b5:52:19:5f:c0:3b:26:59:7d:f9:15:2b:93:84:eb:
e5:a1:47:b7:21:bd:d4:37:d5:77:88:a2:db:cc:4a:93:ac:bf:
81:24:a6:d5:29:ad:e5:4a:37:e2:9a:55:e3:3f:73:34:8d:3b:
6f:30:81:e2:45:31:cb:ba:6c:77:ef:fd:4c:df:fa:e3:90:cd:
45:9d:9a:77:7c:04:42:cb:77:7f:f9:32:fa:c3:67:ad:8a:6c:
1c:0d:67:97:f8:03:fb:ee:7d:e5:d3:14:85:a6:95:01:59:b2:
fd:ff:a1:1d:71:ea:63:75:44:9c:64:7e:97:e6:df:34:be:39:
fd:22:3a:49:03:73:d1:9a:14:01:0f:5c:ac:d4:67:9f:f4:bd:
81:c8:f4:fa:34:7f:9d:08:ad:8c:f4:38:40:44:03:ea:7a:d4:
d4:6d:59:ec:19:20:d2:49:4c:97:17:87:d6:7b:9b:f4:09:00:
56:70:ac:b3:85:dc:5b:62:f6:60:97:ac:67:f1:3c:ef:56:1e:
7d:49:82:d6:15:19:45:d2:25:b6:cb:fe:f9:49:17:20:87:a6:
7a:38:e6:34:4f:b6:96:16:1e:be:34:0a:69:1d:7e:e5:ba:1d:
c5:f4:bd:67:a4:e3:4b:38:97:f9:86:4d:98:3e:c2:d4:c4:8e:
c6:8e:6d:68
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZ/hIvAyk07pCbut+VtlR/0xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjU2ZDEwY2NhZDlkNjljMDE4NTZiZTBhZmFhMTdlYzY4
MmFjYmYwHhcNMjYwODA4MTEyOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmJmOTBlZDllZTg4YzMzOGNlYzljZGUxOTMzYzYyOWM5OGUxY2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyuDxGhzWJ4ZaEsHlN07K3wpqVSV
KX2WDk4I5mHMn22VnIkmufP+FW1fMEch0DwPi5nGG70OKE4xrnMj1rMeY39ysuuB
HLnL9XRwCpGbqEtECgYL7HqKwtDFJIbc2J20rGiwgDrOeu1QNO6jcCia5t6S0XXL
ptqdHM2yC7UPpNdHBRoTtFjGUZzJPtqzTLh176AyvAeyDknPLGI9K6e5kwJg+fTH
cOLenVRPohhr4hBAoU0HvmZ5vk9riOqXDjg5zq/ANxUQed9uBVZtM2lxRW3pUG4Q
NFIsBeQOL8evByBdcdnyBzbUCEfgPM1a/bUNstURQ4Np8NqBQtOHJbTpAwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFK+/kO2e6IwzjOyc3hkzxinJjhy2MB8GA1UdIwQY
MBaAFLC1bRDMrZ1pwBhWvgr6oX7Ggqy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYt
YTE5Y2M4YTc2ZDA0LzEvcjctUTdaN29qRE9NN0p6ZUdUUEdLY21PSExZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82OTQwOWUtMWVjNC00ODlkLWI2MWYtYTE5Y2M4YTc2ZDA0
LzEvc0xWdEVNeXRuV25BR0ZhLUN2cWhmc2FDckw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQBLUqeAwQA
W+TjAwQAnl7YAwQAsGHbAwQB2QukMA0EAgACMAcDBQMqAfkAMA0GCSqGSIb3DQEB
CwUAA4IBAQBC4oe1UhlfwDsmWX35FSuThOvloUe3Ib3UN9V3iKLbzEqTrL+BJKbV
Ka3lSjfimlXjP3M0jTtvMIHiRTHLumx37/1M3/rjkM1FnZp3fARCy3d/+TL6w2et
imwcDWeX+AP77n3l0xSFppUBWbL9/6EdcepjdUScZH6X5t80vjn9IjpJA3PRmhQB
D1ys1Gef9L2ByPT6NH+dCK2M9DhARAPqetTUbVnsGSDSSUyXF4fWe5v0CQBWcKyz
hdxbYvZgl6xn8TzvVh59SYLWFRlF0iW2y/75SRcgh6Z6OOY0T7aWFh6+NAppHX7l
uh3F9L1npONLOJf5hk2YPsLUxI7Gjm1o
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:25 2026 by rpki-client