Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/7YhBZ7NArw0eSpGJGzdZL6Xd9LI.roa
File: 7YhBZ7NArw0eSpGJGzdZL6Xd9LI.roa (raw, json)
Hash identifier: 9PtG5SAhmPuIvjkG4xvn789Z3mHnr1quGuZQ4Ri0QLs=
Subject key identifier: ED:88:41:67:B3:40:AF:0D:1E:4A:91:89:1B:37:59:2F:A5:DD:F4:B2
Certificate issuer: /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial: 019FF49CE66C486A1FFB1DC4A5E8C731C31E
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/7YhBZ7NArw0eSpGJGzdZL6Xd9LI.roa
Signing time: Wed 12 Aug 2026 06:15:51 +0000
ROA not before: Wed 12 Aug 2026 06:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205516
IP address blocks: 45.86.80.0/22 maxlen: 24
45.86.80.0/24 maxlen: 24
45.86.81.0/24 maxlen: 24
45.86.82.0/24 maxlen: 24
45.86.83.0/24 maxlen: 24
45.130.4.0/24 maxlen: 24
45.130.5.0/24 maxlen: 24
45.130.6.0/24 maxlen: 24
45.130.7.0/24 maxlen: 24
89.223.4.0/24 maxlen: 24
89.223.11.0/24 maxlen: 24
91.147.96.0/22 maxlen: 24
91.147.96.0/24 maxlen: 24
91.147.97.0/24 maxlen: 24
91.147.99.0/24 maxlen: 24
185.215.160.0/22 maxlen: 24
185.215.160.0/24 maxlen: 24
185.215.161.0/24 maxlen: 24
185.215.162.0/24 maxlen: 24
185.215.163.0/24 maxlen: 24
2a0b:abc0::/29 maxlen: 48
2a0e:db80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:9c:e6:6c:48:6a:1f:fb:1d:c4:a5:e8:c7:31:c3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
Validity
Not Before: Aug 12 06:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed884167b340af0d1e4a91891b37592fa5ddf4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:97:d6:cf:82:bd:c6:dc:b7:66:8d:ea:19:
9b:56:0e:1f:05:2a:be:6d:0b:a8:0f:ba:bf:60:e3:
ca:4c:ef:0d:59:3f:62:2d:3f:4b:60:87:77:d7:04:
02:2b:77:5d:c9:79:d0:aa:c7:cf:85:33:79:94:57:
d9:bd:17:ee:45:4d:eb:c3:2e:c7:43:36:2a:8a:35:
d5:88:a7:9c:37:f7:08:c7:a1:97:1e:4f:f2:28:95:
b4:e3:03:e4:00:5d:a8:4b:a0:de:3e:e9:55:13:44:
f8:e3:52:d3:3f:79:aa:a1:90:ba:30:22:d1:8b:58:
e3:43:09:f3:c2:9d:af:53:47:ad:4a:5b:6f:41:87:
15:86:63:f2:05:13:58:54:16:1b:38:53:1f:40:ca:
fe:7a:aa:2c:c0:69:a1:86:78:9f:cb:ed:9f:37:2c:
a5:56:41:32:01:8d:fa:d2:8a:40:14:a1:7c:39:26:
6e:d2:20:ae:62:f2:40:86:c0:79:a3:99:c8:97:9f:
94:d4:e3:05:78:7a:2c:d3:66:e6:f9:7b:96:e0:82:
e7:6f:4a:99:be:b6:b4:c0:a4:f5:e9:31:88:0e:62:
8f:98:5a:c5:61:b1:67:59:82:9c:e3:65:f6:c4:2f:
b8:a5:d3:ea:ab:86:c0:50:07:07:86:97:46:aa:5e:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:88:41:67:B3:40:AF:0D:1E:4A:91:89:1B:37:59:2F:A5:DD:F4:B2
X509v3 Authority Key Identifier:
keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/7YhBZ7NArw0eSpGJGzdZL6Xd9LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.80.0/22
45.130.4.0/22
89.223.4.0/24
89.223.11.0/24
91.147.96.0/22
185.215.160.0/22
IPv6:
2a0b:abc0::/29
2a0e:db80::/29
Signature Algorithm: sha256WithRSAEncryption
3b:8d:56:99:8d:b8:47:2b:d2:10:3b:96:6c:6e:89:52:c0:d0:
a0:a9:9a:30:2b:fa:42:ce:ba:3d:7c:9a:6b:11:64:b6:89:57:
2e:7a:71:51:d4:33:3d:ba:81:39:4c:e3:cf:aa:9c:b1:e0:68:
ae:3e:3e:27:fd:dc:f3:70:1d:f1:da:7d:e0:04:fd:1f:49:d9:
82:0e:f4:e6:5a:2e:b3:7e:44:f8:1c:c0:a9:73:2b:4b:9a:99:
40:60:51:b6:95:e0:f7:90:2d:7e:02:e5:6e:0a:13:0b:d0:d2:
ed:09:88:bc:1c:1e:49:6d:ec:cb:18:07:63:9e:92:d2:19:3c:
50:7f:f9:48:94:af:19:4f:6f:03:32:52:08:94:c2:2e:cb:7b:
1a:ef:62:5c:2a:cc:5a:55:5b:4c:e7:ad:f5:a0:b8:d3:b9:78:
5b:1a:6d:f6:bd:54:0c:4d:9f:cb:55:81:ac:5f:4d:cb:d8:2c:
4e:b2:80:aa:ad:fb:c7:ce:fb:cd:9a:22:5b:76:f6:93:47:4f:
4c:59:15:18:e4:e6:ee:72:98:fa:12:c1:21:a3:d3:2c:b2:27:
fe:98:d8:de:88:43:82:72:97:1d:7b:ba:77:28:f8:24:71:eb:
a8:85:ac:ab:b3:ec:8e:3a:27:00:7e:6e:b3:06:f6:d4:b0:26:
14:ac:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:48 2026 by rpki-client