Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/7Ev4pPLmsyvYerb0on_2ycPvjhY.roa
File: 7Ev4pPLmsyvYerb0on_2ycPvjhY.roa (raw, json)
Hash identifier: gLjOH0/LgfDmhdEX2dqo2Y4R5qiWj5EqAr1S6u4t4/o=
Subject key identifier: EC:4B:F8:A4:F2:E6:B3:2B:D8:7A:B6:F4:A2:7F:F6:C9:C3:EF:8E:16
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 01A04D932DB5C95D8C5FDEBADE075522E541
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/7Ev4pPLmsyvYerb0on_2ycPvjhY.roa
Signing time: Sat 29 Aug 2026 12:51:26 +0000
ROA not before: Sat 29 Aug 2026 12:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.85.13.0/24 maxlen: 24
193.43.142.0/23 maxlen: 24
193.43.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 18:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:93:2d:b5:c9:5d:8c:5f:de:ba:de:07:55:22:e5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Aug 29 12:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec4bf8a4f2e6b32bd87ab6f4a27ff6c9c3ef8e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b3:08:e0:2c:5f:6a:2b:d8:4e:f0:f0:0b:51:
ab:ff:23:81:93:ff:78:db:e4:a2:e8:34:27:43:d5:
1a:82:a7:ce:ff:91:ee:a5:99:22:93:02:fd:22:0e:
a6:c3:8a:d9:a2:ac:9f:a9:16:e8:ab:31:cb:c8:64:
9c:14:a2:55:4d:cc:bc:1b:2c:c1:d9:9e:71:8e:58:
bf:a9:ad:4d:36:da:ae:bd:0a:fc:e6:dc:b5:2e:ce:
4b:15:bd:5c:0d:ed:e5:69:01:a3:f3:4c:62:95:8c:
96:0f:32:6a:79:66:b6:07:1d:02:28:20:16:e6:3b:
03:d3:4a:4b:ef:51:34:ce:26:c4:b4:10:46:70:e4:
54:3a:db:4c:a9:2a:ce:1c:d8:3a:aa:9f:78:11:6d:
ce:39:29:8e:5b:3f:bd:3a:97:20:bd:4d:1d:6e:72:
eb:95:f0:53:08:f5:13:b1:1f:f4:d1:e4:0e:f7:9a:
79:93:78:e5:61:a6:c1:ae:6b:06:3e:fc:d8:24:c7:
d7:7c:dd:21:aa:1c:b6:c1:39:af:7e:71:b9:f8:94:
ca:7c:1d:34:d3:3d:35:ff:b1:15:5c:95:fa:81:1b:
7e:57:91:c1:f5:83:12:ef:fb:06:a7:e4:30:89:d8:
12:f3:49:38:d5:d0:2f:dc:c9:67:c6:00:11:65:fd:
a5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4B:F8:A4:F2:E6:B3:2B:D8:7A:B6:F4:A2:7F:F6:C9:C3:EF:8E:16
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/7Ev4pPLmsyvYerb0on_2ycPvjhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.13.0/24
193.43.142.0/23
Signature Algorithm: sha256WithRSAEncryption
38:26:20:e3:a1:e9:c9:41:fb:6e:c7:6c:aa:ad:cc:d4:01:1f:
c6:8e:77:fc:cc:f5:ce:42:54:5a:a6:d0:c7:4c:cb:a6:51:fe:
e8:49:66:ac:ee:24:2c:b9:dc:58:34:e7:d7:f3:86:84:89:8b:
f5:96:5f:08:b0:c7:26:c6:0d:b4:7c:4e:3d:f3:95:1c:bb:f5:
ed:ee:3a:c4:69:90:f1:21:01:6d:81:68:07:83:e8:7d:69:88:
c3:b1:83:0e:b0:75:97:4d:e2:17:e7:5f:50:1b:c9:13:56:40:
07:df:f1:12:9f:d9:fa:0e:5e:88:ee:bb:e7:69:57:67:e5:ca:
d0:e5:eb:97:b7:79:9f:59:d8:06:80:cc:17:52:28:9f:05:9a:
fc:71:43:b5:d9:4f:89:2a:90:aa:7b:84:ec:8f:2d:eb:2d:89:
ec:2e:de:3d:15:aa:b7:3e:c0:e8:73:df:37:db:59:97:9b:8e:
33:d7:7f:5b:4c:56:3a:e6:dc:d6:fc:5f:15:39:d7:07:18:20:
f5:5b:49:03:60:f9:44:88:55:97:3d:d9:f5:23:0a:06:05:5c:
18:0b:d6:22:e7:d3:f0:2d:f7:1e:17:29:8f:e4:7c:39:c9:00:
3a:17:3f:1a:e4:90:6d:a4:8b:1e:1c:63:d0:0f:2a:5f:35:af:
b1:96:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 02:14:59 2026 by rpki-client