Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa
File: 7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa (raw, json)
Hash identifier: umMdK2ousPlaPCGUE8QVsbLVa6xFxm0EroZYnaCBL/4=
Subject key identifier: EF:15:6C:73:A7:B9:1E:C4:84:30:34:90:44:D1:96:03:36:21:EF:1C
Certificate issuer: /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial: 019F236923758DF077C20B075378E1835DCD
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 78.138.44.0/24 maxlen: 24
185.106.204.0/24 maxlen: 24
185.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:75:8d:f0:77:c2:0b:07:53:78:e1:83:5d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef156c73a7b91ec48430349044d196033621ef1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:1b:53:88:0a:06:23:2f:0f:a7:2d:5e:6d:
95:0a:83:44:ab:21:1a:74:f1:0d:28:3c:ee:43:3b:
ea:1a:57:0a:ad:0e:72:b5:a9:71:60:55:b6:55:00:
94:5b:e2:3b:9f:3b:d0:5e:32:f7:9d:a8:42:9d:ca:
7a:28:af:72:27:d3:0f:bf:b4:28:8e:27:76:91:bd:
f6:e9:b1:5f:a3:9c:ce:43:dc:50:c5:8e:d2:58:6c:
7f:96:fa:f9:05:ee:a7:78:0b:da:f2:2d:e8:99:88:
35:c4:db:c4:db:e8:5d:9c:02:aa:30:17:ad:02:f9:
e0:40:54:f8:44:a0:86:c7:1d:90:82:f4:fa:66:fe:
b7:06:96:2d:a4:2e:24:b2:91:60:aa:2f:c2:92:82:
f9:f9:77:80:97:ae:7a:a6:67:da:9c:0d:4d:df:39:
7d:cc:a4:4d:da:07:ce:3a:40:49:47:9b:ab:79:bd:
ba:0c:f7:6c:20:31:df:18:c6:b1:7e:51:8c:ae:ce:
46:59:57:d3:c6:48:53:02:d2:39:92:00:5d:3e:75:
8b:90:f1:35:f0:59:5c:75:98:35:ee:be:1a:81:26:
0f:97:42:5e:e4:48:41:f4:a3:f9:a0:b7:c9:7d:2e:
bd:4d:a6:8b:5d:35:23:6b:93:d7:3d:41:af:b3:ec:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:15:6C:73:A7:B9:1E:C4:84:30:34:90:44:D1:96:03:36:21:EF:1C
X509v3 Authority Key Identifier:
keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/7xVsc6e5HsSEMDSQRNGWAzYh7xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.44.0/24
185.106.204.0/24
185.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cd:a8:0d:a1:8e:d9:48:50:73:45:4f:39:0e:79:ac:21:00:
d7:77:70:7e:9b:8b:66:31:02:50:32:36:e2:18:d0:ba:f5:16:
62:55:a8:df:b3:0d:99:05:70:3b:40:b2:b3:35:8b:bc:89:31:
40:42:b9:6b:96:50:c1:7a:86:78:b0:b7:ea:84:67:5a:34:b3:
86:30:21:d8:6e:9a:78:76:bf:2a:9d:13:d2:c0:63:5c:31:6f:
9e:b3:d2:05:b8:f4:f8:c4:c8:35:32:a9:40:e4:7f:da:c4:02:
37:80:6e:2a:bc:f7:12:43:23:68:19:e3:c5:21:0d:96:42:7f:
d3:59:55:80:64:05:fb:63:2a:1e:f6:3f:4c:bc:74:b6:df:1d:
d9:9d:df:2d:e4:25:f0:c3:32:b2:0e:2d:55:ff:68:1c:34:da:
d8:3e:67:e1:15:09:e4:3a:ab:90:18:b9:fd:f9:5f:a1:37:c3:
2e:8b:ce:be:50:c6:d5:3f:34:73:0d:4d:e8:d8:12:70:96:ec:
26:04:12:f6:52:dd:60:40:66:28:3a:ee:76:0a:32:49:38:f8:
b7:9f:dc:69:d8:22:cb:ca:51:05:2c:b5:e9:f3:7e:50:1a:5c:
8d:cb:34:e8:95:68:7a:c2:42:19:a1:69:ab:dc:e7:f7:aa:cc:
ca:4f:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client