Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/7CnxpDPVlxKH81qFN_dOyKbsUss.roa
File: 7CnxpDPVlxKH81qFN_dOyKbsUss.roa (raw, json)
Hash identifier: /xY/rPneqbupFZk4cdAOyaaqNwLCD9obEUgK/3SZ7HQ=
Subject key identifier: EC:29:F1:A4:33:D5:97:12:87:F3:5A:85:37:F7:4E:C8:A6:EC:52:CB
Certificate issuer: /CN=a804ff75b90312fd516b80d84454dd78f4a38923
Certificate serial: 019F2368B7F41D48B95559ACD163FD9F197E
Authority key identifier: A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/7CnxpDPVlxKH81qFN_dOyKbsUss.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205613
IP address blocks: 46.17.218.0/24 maxlen: 24
46.17.219.0/24 maxlen: 24
46.17.220.0/24 maxlen: 24
46.17.221.0/24 maxlen: 24
46.17.222.0/24 maxlen: 24
46.17.223.0/24 maxlen: 24
83.229.16.0/24 maxlen: 24
91.224.0.0/24 maxlen: 24
91.224.1.0/24 maxlen: 24
185.107.20.0/24 maxlen: 24
185.107.21.0/24 maxlen: 24
185.107.22.0/24 maxlen: 24
185.107.23.0/24 maxlen: 24
193.200.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:f4:1d:48:b9:55:59:ac:d1:63:fd:9f:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a804ff75b90312fd516b80d84454dd78f4a38923
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec29f1a433d5971287f35a8537f74ec8a6ec52cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:de:87:b6:8a:f6:fd:83:dc:4b:aa:43:2b:13:
1d:69:de:35:2e:1d:7b:0b:67:52:d1:3e:0f:eb:52:
49:1a:0c:9c:2e:90:cd:ac:6a:38:90:30:4d:56:eb:
ea:da:85:4e:1b:b0:bc:f4:02:9c:e6:06:fe:05:0c:
10:26:4a:b6:c6:6c:88:b8:73:a6:45:e4:76:9f:fe:
2a:bb:18:fc:e0:e8:1f:f5:7f:75:3c:0b:4d:81:d6:
1f:fb:b2:3d:2c:c9:ef:02:4c:a9:0d:a5:1a:96:4f:
53:6d:eb:6c:b5:8a:49:c9:46:42:ab:6e:b8:ec:6c:
4c:4c:0c:7d:07:47:cd:72:c5:7d:a7:b9:17:ae:dd:
e4:1b:95:56:fd:f1:b1:28:fa:4a:02:f3:f9:4c:fe:
53:9b:c9:7b:ba:da:11:86:16:09:fb:d3:d5:ff:7a:
8b:cb:74:cd:f7:ba:7c:f0:6b:d6:58:f9:2a:ce:47:
97:d4:b2:d6:bd:7d:da:a7:9b:a9:15:96:2e:02:3b:
7f:21:40:46:53:5b:04:60:6d:d9:fb:78:7c:72:ea:
ee:9f:35:51:a3:50:6c:c9:e9:5d:a9:c1:47:80:fc:
98:b7:e9:41:e8:3a:26:23:f5:db:84:34:74:2f:45:
55:d1:d9:0f:f8:38:3f:3d:74:c0:6c:4d:c0:14:cd:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:F1:A4:33:D5:97:12:87:F3:5A:85:37:F7:4E:C8:A6:EC:52:CB
X509v3 Authority Key Identifier:
keyid:A8:04:FF:75:B9:03:12:FD:51:6B:80:D8:44:54:DD:78:F4:A3:89:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAT_dbkDEv1Ra4DYRFTdePSjiSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/7CnxpDPVlxKH81qFN_dOyKbsUss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/qAT_dbkDEv1Ra4DYRFTdePSjiSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.218.0-46.17.223.255
83.229.16.0/24
91.224.0.0/23
185.107.20.0/22
193.200.154.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bc:8f:cb:b6:e5:3f:3c:01:7a:2b:77:d7:3d:4d:4c:5c:d9:
05:ee:7f:32:15:c3:ce:52:13:2f:81:91:61:8b:86:f6:d8:d1:
7d:89:ae:f3:56:a7:36:c0:78:c1:1e:18:b7:6d:df:34:34:63:
d0:fa:79:1b:8a:f3:d0:f3:84:6b:ac:e8:e9:58:d6:c5:7e:87:
f9:1f:cf:92:1a:35:d8:e6:54:47:8c:58:07:f6:63:1b:e4:9f:
85:57:5c:47:e2:c6:d9:ab:0a:6b:80:f2:e3:fa:04:a4:07:3e:
1f:10:92:f1:30:9e:b0:9b:9e:ab:a5:bf:9f:01:df:87:93:d1:
54:bc:30:e5:d6:8b:1a:1d:c8:6d:3b:81:aa:e7:ec:69:81:1e:
47:12:91:ec:f1:22:20:cf:7e:51:ea:b9:b7:c7:b2:3e:48:13:
c2:d4:08:27:23:79:6c:3a:8f:e7:00:46:00:7e:1b:68:1d:8a:
49:a8:fa:9f:e1:f3:9b:4f:a4:9f:cb:2e:2e:36:7d:25:7b:19:
b5:d9:5e:1b:f2:20:2b:d1:8a:59:a1:f9:68:56:01:2c:f7:46:
c2:50:16:84:b3:3f:14:b3:27:f6:67:48:f5:be:82:32:7c:3f:
a9:6e:04:bf:8b:2e:9e:85:b8:aa:a7:34:4d:2d:5b:99:57:17:
2d:80:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:36 2026 by rpki-client