Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/7238-yc1zsJP5-yGaMOBc9f0LR4.roa
File: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (raw, json)
Hash identifier: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=
Subject key identifier: EF:6D:FC:FB:27:35:CE:C2:4F:E7:EC:86:68:C3:81:73:D7:F4:2D:1E
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 019F2901110E0FEA33C92BD3190BEE5991BA
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/7238-yc1zsJP5-yGaMOBc9f0LR4.roa
Signing time: Fri 03 Jul 2026 17:22:43 +0000
ROA not before: Fri 03 Jul 2026 17:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 91.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:01:11:0e:0f:ea:33:c9:2b:d3:19:0b:ee:59:91:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 3 17:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef6dfcfb2735cec24fe7ec8668c38173d7f42d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:dd:15:39:af:c6:90:f6:78:f3:33:be:ec:ec:
c4:20:5c:56:7f:b7:7e:a5:b0:99:e0:12:13:e3:5d:
e8:0f:d7:25:23:bb:20:f1:47:16:ff:7e:00:41:af:
34:a4:d4:1f:7a:97:a9:bf:c7:6b:ef:8e:f3:d2:4d:
6a:cb:13:76:c0:f7:27:e5:c7:e0:95:4d:40:23:03:
65:30:6b:3e:2d:0d:bf:d0:b3:f9:e2:c0:1b:c5:16:
bc:f9:7d:e1:f5:a8:6d:d1:be:2b:60:28:c9:7e:79:
bd:7d:58:78:2f:38:d1:2d:41:76:c6:8d:90:b8:a6:
e9:b8:56:2c:a8:2f:88:a0:70:b2:23:e6:f9:3a:61:
15:05:3c:d3:15:da:d5:bb:8b:40:f6:90:23:c0:88:
74:9a:95:f7:35:fa:fa:72:c9:e3:52:01:ff:06:41:
24:c2:94:38:ff:0a:e1:d9:77:e9:e9:5d:a6:76:38:
c8:b9:08:4e:2d:ab:09:2d:e0:26:8d:26:26:04:42:
12:f5:c6:42:5e:7a:e2:24:f6:ae:b4:8a:85:a6:99:
57:6b:c7:89:e4:ed:0f:21:de:c9:0e:d1:03:c4:06:
7d:bb:5b:c0:1c:91:11:57:e8:db:6e:a0:63:b3:44:
76:aa:ff:ea:dd:67:a3:c2:31:41:77:fc:40:43:ea:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:FC:FB:27:35:CE:C2:4F:E7:EC:86:68:C3:81:73:D7:F4:2D:1E
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/7238-yc1zsJP5-yGaMOBc9f0LR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
20:68:58:1f:f8:a1:52:a7:94:46:0c:75:4d:a1:fa:2e:23:d0:
e2:c7:64:e8:f4:89:cf:d3:f4:a9:d5:e9:5d:b3:d8:6d:48:11:
ff:88:ce:b7:9b:18:cf:d1:03:cf:cf:5e:85:a0:6a:da:c0:67:
e5:6c:64:56:7a:ba:0e:74:31:55:fa:2e:72:65:fc:90:ff:7f:
c0:57:58:42:32:ba:af:3f:88:60:50:a3:df:cf:17:f6:d8:b6:
41:78:6d:90:e7:5e:56:ea:9f:19:96:87:0d:9e:85:bb:0e:d8:
28:cf:b5:b8:d3:b9:99:60:c9:71:f9:78:11:90:e7:35:9f:4e:
e1:fd:37:30:4d:cb:44:fc:0a:f4:48:76:f5:fc:d9:72:70:c7:
df:e2:68:45:0f:7a:cd:cb:e3:b2:9e:88:6d:3a:9c:2d:cc:c3:
f1:56:30:e8:f6:58:9f:43:16:80:d2:a4:cd:75:b8:b2:54:20:
54:d9:43:bc:15:db:0f:4e:f3:00:e6:df:1b:34:c3:92:53:3d:
89:e6:60:c8:bc:c8:46:45:d9:98:9e:17:05:11:ef:bb:99:c7:
5d:b3:8f:18:f3:86:c9:27:18:ce:b8:15:d2:a4:22:60:8d:2f:
27:5d:72:37:70:47:cf:1d:2b:b2:9c:6c:6d:4e:db:95:2d:67:
ec:6d:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client