Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7EuSQ48gnhAFlb-Pzzm3ZSKj8Ck.roa
File: 7EuSQ48gnhAFlb-Pzzm3ZSKj8Ck.roa (raw, json)
Hash identifier: 9UWRIO5SH078ahKLFhKjMl0FFXpK43BeDLKryt/ngUI=
Subject key identifier: EC:4B:92:43:8F:20:9E:10:05:95:BF:8F:CF:39:B7:65:22:A3:F0:29
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FD91BA68B7596608260F034E9F96A0A8C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7EuSQ48gnhAFlb-Pzzm3ZSKj8Ck.roa
Signing time: Thu 06 Aug 2026 22:04:55 +0000
ROA not before: Thu 06 Aug 2026 22:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29931
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Aug 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:1b:a6:8b:75:96:60:82:60:f0:34:e9:f9:6a:0a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 6 22:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec4b92438f209e100595bf8fcf39b76522a3f029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:d3:53:54:d6:cc:63:5e:ec:71:ec:e3:36:
5d:b6:8a:f5:f6:16:06:06:d3:c7:7f:cc:5c:01:94:
02:64:b1:11:ce:51:9b:d1:d8:32:ce:3d:db:56:20:
f9:27:ad:8f:75:c1:04:91:ef:f5:0a:c1:59:96:3e:
97:d3:c3:77:13:34:2a:25:57:31:c0:a7:7e:7e:b6:
99:f9:21:05:31:2c:93:74:6a:9d:f0:36:22:5e:d8:
6f:ba:41:68:69:ad:79:ae:25:3d:12:4c:d4:b7:da:
ec:32:6d:ef:b5:2b:0c:78:a0:63:4c:2e:3c:59:5a:
05:f9:71:3f:08:b2:1a:7b:82:16:3e:9a:fb:60:b5:
07:4b:ab:8c:6d:23:14:12:d4:2d:29:3f:e1:af:cf:
a8:97:d6:e6:e1:f1:8c:ab:35:3a:d4:88:03:89:ff:
fb:1b:6e:a8:43:41:28:a0:8d:62:a1:2d:dc:a6:3e:
64:32:a7:d5:53:3b:bf:3c:c8:fb:59:fe:1c:fb:23:
72:6f:ed:aa:52:1c:ab:df:da:af:ff:a0:5f:67:30:
1e:cb:b0:4b:84:c8:59:47:27:f5:04:fc:08:90:75:
5c:86:ae:32:ac:ad:6d:91:8f:d0:f3:56:2d:47:55:
02:24:a7:0a:ca:27:23:81:ef:fb:54:1e:83:2e:66:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:92:43:8F:20:9E:10:05:95:BF:8F:CF:39:B7:65:22:A3:F0:29
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7EuSQ48gnhAFlb-Pzzm3ZSKj8Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:7d:2f:cf:4b:6b:b4:7b:f9:d4:55:ab:7d:99:c3:f1:8e:7c:
0b:b6:93:f9:e0:e2:53:0a:9f:ea:eb:19:40:45:32:d3:82:59:
d4:1d:1a:c7:85:3a:81:06:51:59:1f:4a:9a:e9:8f:a8:38:06:
cf:31:c4:30:c2:05:e4:56:dd:14:e6:79:ec:ca:df:b5:32:c4:
df:14:6e:85:fe:85:40:e1:25:ed:5a:34:49:fb:08:73:ab:a2:
a8:49:c0:1b:4c:8e:46:ab:2b:62:e1:2a:0f:d3:5f:66:e5:59:
ef:98:1d:9b:35:73:d6:25:dd:f4:02:d6:a6:b8:32:6f:8b:a4:
74:1e:4d:7c:6b:28:23:b0:a7:71:69:90:6b:be:40:ff:84:6b:
d3:e2:99:bf:07:48:db:e9:75:1c:24:59:98:0c:76:d9:27:a9:
9e:c0:0f:a8:30:6c:86:7f:60:0e:55:77:ba:d7:b0:d4:74:4a:
cf:f0:0d:84:7b:ee:26:15:64:5a:86:fa:28:c3:3c:d3:da:25:
0d:90:f8:57:9b:7f:6a:1b:5d:e0:71:ad:72:55:db:a5:b0:e2:
63:af:01:94:71:b4:f5:7f:ce:fd:1d:54:e4:a1:51:32:29:5c:
60:f6:f3:c5:f0:5e:f2:d4:a6:32:40:dd:a2:3a:22:ec:2d:36:
1b:94:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 20:10:49 2026 by rpki-client