Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa
File: 7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa (raw, json)
Hash identifier: sYMFJLdO959jWZrAYfMJzmtj0yKZjN2K1lebp0gq+TM=
Subject key identifier: EF:2B:80:8E:E1:D4:B8:14:20:23:D2:CA:14:44:C3:62:7F:C2:67:91
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 019EEF576CA2718AD1F2398E17ABF1519A9B
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa
Signing time: Mon 22 Jun 2026 12:39:04 +0000
ROA not before: Mon 22 Jun 2026 12:39:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206503
IP address blocks: 91.204.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:57:6c:a2:71:8a:d1:f2:39:8e:17:ab:f1:51:9a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Jun 22 12:39:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef2b808ee1d4b8142023d2ca1444c3627fc26791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:e1:96:36:b2:f7:8f:fe:0a:69:e0:c9:50:
c2:75:d9:3c:a9:e3:1e:11:15:c1:a8:22:02:55:cd:
07:0d:37:9a:8f:1d:0f:d2:2f:c0:14:cf:e5:81:61:
70:8e:60:03:5e:78:f1:ee:6a:d2:0a:d9:02:e2:61:
c1:0e:ab:f3:6c:2d:c2:73:13:9d:18:78:bd:d0:96:
3e:c3:b6:ff:74:1e:46:ef:1c:4c:3a:4e:38:cf:ed:
27:67:8f:6b:35:ab:c7:28:29:7a:71:99:e2:65:84:
df:78:38:8b:c2:b3:22:62:e6:64:4c:35:3b:5b:aa:
d7:02:58:84:6c:10:b0:05:80:88:01:20:4c:6b:4e:
c3:21:55:e2:11:fc:dc:a5:64:47:04:63:de:6f:1f:
5b:6e:36:15:11:a1:e4:9d:cd:84:90:f1:e8:89:4f:
da:4b:2d:07:01:52:77:69:59:f5:f5:45:81:09:14:
44:1e:73:97:ec:03:10:49:a9:bc:bc:4d:c3:b0:78:
48:71:4b:a5:cf:46:a7:af:fe:79:d2:e0:bb:29:dd:
06:53:28:42:e7:a3:cc:1c:a7:18:53:af:92:05:af:
ea:4f:17:9d:c6:bb:b9:b5:0f:af:69:da:61:3d:2e:
f0:d0:3d:7d:5f:41:34:31:01:ae:d4:0f:37:bc:2e:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:80:8E:E1:D4:B8:14:20:23:D2:CA:14:44:C3:62:7F:C2:67:91
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/7yuAjuHUuBQgI9LKFETDYn_CZ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:55:c1:53:04:7f:d1:be:f2:b1:a1:2e:de:93:6f:aa:9f:c8:
f3:e7:b4:52:5b:57:67:15:d4:b0:ee:d4:7e:47:7c:8a:7b:db:
90:58:25:99:cd:b6:3d:22:23:a3:1d:c6:1f:e3:a3:fa:48:78:
0c:bc:62:5b:04:b6:43:35:cd:4b:e3:69:c8:22:60:8f:5d:fd:
80:43:6c:31:02:1e:23:24:0d:44:2c:10:58:78:45:05:34:ad:
b3:dc:da:e4:18:e7:47:d3:0f:9a:35:29:00:19:dc:6c:b7:11:
ec:df:ea:fe:e5:80:63:70:8f:cc:a0:81:c0:39:6f:11:90:2b:
1f:2d:10:5f:fa:57:2f:12:22:53:b9:59:10:af:d2:29:ad:d1:
ed:6b:60:8a:ae:72:df:31:c9:3c:07:f4:0b:21:99:8d:2a:02:
3c:c1:eb:32:89:ec:5a:d6:f4:fe:ec:32:d8:f1:06:f4:a7:5e:
69:fe:d1:19:e4:18:3d:25:c2:cd:5f:3f:fe:c3:26:d1:01:b0:
93:3b:ae:97:06:03:98:7d:95:ce:7e:70:92:79:f8:28:a0:ce:
d9:fa:4c:af:5d:85:bb:4c:89:a2:f3:1e:69:f0:a1:15:5c:6d:
e7:ec:c5:6b:7e:05:6a:68:d7:0b:81:07:33:89:b9:de:9b:a2:
cc:28:ec:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7vV2yicYrR8jmOF6vxUZqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjYwNjIyMTIzOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjJiODA4ZWUxZDRiODE0MjAyM2QyY2ExNDQ0YzM2MjdmYzI2NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2rhljay94/+CmngyVDCddk8qeMe
ERXBqCICVc0HDTeajx0P0i/AFM/lgWFwjmADXnjx7mrSCtkC4mHBDqvzbC3CcxOd
GHi90JY+w7b/dB5G7xxMOk44z+0nZ49rNavHKCl6cZniZYTfeDiLwrMiYuZkTDU7
W6rXAliEbBCwBYCIASBMa07DIVXiEfzcpWRHBGPebx9bbjYVEaHknc2EkPHoiU/a
Sy0HAVJ3aVn19UWBCRREHnOX7AMQSam8vE3DsHhIcUulz0anr/550uC7Kd0GUyhC
56PMHKcYU6+SBa/qTxedxru5tQ+vadphPS7w0D19X0E0MQGu1A83vC4P0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8rgI7h1LgUICPSyhREw2J/wmeRMB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvN3l1QWp1SFV1QlFnSTlMS0ZFVERZbl9DWjVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8yDMA0G
CSqGSIb3DQEBCwUAA4IBAQAcVcFTBH/RvvKxoS7ek2+qn8jz57RSW1dnFdSw7tR+
R3yKe9uQWCWZzbY9IiOjHcYf46P6SHgMvGJbBLZDNc1L42nIImCPXf2AQ2wxAh4j
JA1ELBBYeEUFNK2z3NrkGOdH0w+aNSkAGdxstxHs3+r+5YBjcI/MoIHAOW8RkCsf
LRBf+lcvEiJTuVkQr9IprdHta2CKrnLfMck8B/QLIZmNKgI8wesyiexa1vT+7DLY
8Qb0p15p/tEZ5Bg9JcLNXz/+wybRAbCTO66XBgOYfZXOfnCSefgooM7Z+kyvXYW7
TImi8x5p8KEVXG3n7MVrfgVqaNcLgQczibnem6LMKOxB
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:07:44 2026 by rpki-client