Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/7PriCDVWnT1HYJrwYNPM5oCvIbY.roa
File: 7PriCDVWnT1HYJrwYNPM5oCvIbY.roa (raw, json)
Hash identifier: Zt6UDdQs2XkMXhq8WXEB4GIlZFaXqIzlnXOtR6MAoiI=
Subject key identifier: EC:FA:E2:08:35:56:9D:3D:47:60:9A:F0:60:D3:CC:E6:80:AF:21:B6
Certificate issuer: /CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Certificate serial: 019EF8F7946B59CF8A78E994A38614787A4A
Authority key identifier: 1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/7PriCDVWnT1HYJrwYNPM5oCvIbY.roa
Signing time: Wed 24 Jun 2026 09:30:35 +0000
ROA not before: Wed 24 Jun 2026 09:30:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29298
IP address blocks: 195.135.220.0/22 maxlen: 24
2a07:de40::/32 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:f7:94:6b:59:cf:8a:78:e9:94:a3:86:14:78:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0fda365dc95da5729e1f589b029fd157f0233a
Validity
Not Before: Jun 24 09:30:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecfae20835569d3d47609af060d3cce680af21b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:2e:ad:98:de:04:86:dc:b6:3d:1e:09:3e:
82:f3:cb:cd:a5:25:ab:6f:31:af:99:f4:c3:25:17:
32:b3:e8:51:34:9b:de:4e:1d:28:b1:60:e3:54:9e:
50:32:5f:71:d7:c6:6b:ed:24:e9:5f:3c:7e:cd:3d:
f0:f2:1a:9d:78:1f:93:69:36:02:3b:63:6e:d2:96:
02:ba:a0:da:c0:4e:d0:b6:3f:28:9e:30:4a:b4:b0:
83:e6:5c:84:e6:c2:56:71:d1:8c:d0:ba:29:36:70:
78:49:1f:14:d8:a0:a5:fe:e4:a1:82:de:51:8b:09:
26:7c:a8:9f:58:11:2f:87:2a:19:80:df:eb:94:43:
e3:f9:07:ff:06:ec:d9:cc:eb:ad:93:f6:3b:76:e1:
77:76:5b:22:c5:77:f2:d9:86:17:ad:9e:fb:29:d2:
c1:6a:66:e7:1b:3e:74:f5:a2:3e:3d:66:70:9d:74:
01:bc:50:af:b1:44:00:73:27:9d:91:ce:34:f4:e2:
36:38:92:57:86:c6:8a:07:3b:91:a3:07:f2:0e:68:
d0:9c:48:71:20:f8:3a:c9:ad:00:61:b4:ba:0a:77:
87:3f:23:4a:67:02:25:8d:9c:20:e4:c5:8a:90:cb:
f8:57:76:4e:0d:b7:05:4f:30:c1:23:60:24:e8:74:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:E2:08:35:56:9D:3D:47:60:9A:F0:60:D3:CC:E6:80:AF:21:B6
X509v3 Authority Key Identifier:
keyid:1F:0F:DA:36:5D:C9:5D:A5:72:9E:1F:58:9B:02:9F:D1:57:F0:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw_aNl3JXaVynh9YmwKf0VfwIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/7PriCDVWnT1HYJrwYNPM5oCvIbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b1551f-4322-4056-8c77-96d2c370e1f0/1/Hw_aNl3JXaVynh9YmwKf0VfwIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.135.220.0/22
IPv6:
2a07:de40::/32
Signature Algorithm: sha256WithRSAEncryption
d6:dd:ef:62:0c:94:03:35:a9:cc:76:fa:0a:e2:82:aa:dd:57:
60:b5:20:4c:73:7c:1a:61:19:48:2d:f6:71:b8:c0:97:d6:79:
c8:b4:a6:52:69:18:6d:66:51:30:5c:12:18:7f:46:f2:07:22:
eb:cc:a0:d1:e6:ba:0f:25:b4:c2:64:7a:2f:0e:b7:e6:b8:de:
dc:3f:fe:d9:40:51:1b:fc:da:ae:52:25:25:b7:0c:f9:a1:eb:
f2:a4:11:3a:88:44:ba:70:f5:1f:b1:fc:4e:07:5a:9f:de:13:
44:8f:7b:b5:19:4d:6c:d2:3d:fb:d0:be:7d:f5:d9:ca:6c:48:
65:5a:8a:fe:90:db:7e:44:64:9f:50:94:1a:ba:27:ce:67:7e:
3e:ab:c3:24:dd:06:7e:0d:28:7b:f1:d3:c2:30:70:98:c3:58:
f6:e3:91:da:90:b4:43:b9:87:b8:22:71:0c:6d:f1:9b:3b:4b:
90:ed:b1:b3:8f:27:9d:6b:7a:70:8a:01:46:c4:8d:f2:91:9c:
68:b9:2c:ea:f7:1c:e7:7e:e2:6c:ad:5b:e6:4a:dd:1c:8a:1d:
c1:ca:84:ae:a8:53:d6:7b:34:e7:f9:b9:d5:8d:64:74:55:53:
a5:4b:75:b9:b0:c2:05:fc:90:da:db:db:e2:07:f8:08:84:0d:
87:4e:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:30 2026 by rpki-client