Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS7720.roa
File: AS7720.roa (raw, json)
Hash identifier: oYkAiXU9JRP6Dj5bom3ApYsQEC3tcltkpscxgao+5dg=
Subject key identifier: AC:A8:81:B9:2B:F8:A1:7A:59:9B:2E:9D:B6:41:F5:07:F6:7C:65:C3
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 45C9857C51552B94B2693A0E9540EF09F639C950
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS7720.roa
Signing time: Mon 10 Aug 2026 16:06:15 +0000
ROA not before: Mon 10 Aug 2026 16:01:15 +0000
ROA not after: Mon 09 Aug 2027 16:06:15 +0000
asID: 7720
IP address blocks: 2a14:7580:fff3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c9:85:7c:51:55:2b:94:b2:69:3a:0e:95:40:ef:09:f6:39:c9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Aug 10 16:01:15 2026 GMT
Not After : Aug 9 16:06:15 2027 GMT
Subject: CN=ACA881B92BF8A17A599B2E9DB641F507F67C65C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:6e:e2:96:d0:82:e8:cc:8f:d6:e5:3f:c0:
73:c3:59:85:ee:0f:4e:1c:c4:c3:c5:a6:31:54:b6:
a0:d8:ab:c7:5a:2c:7b:47:1a:bd:3f:11:f3:e6:07:
4c:c8:90:73:94:71:6e:67:ee:44:20:95:54:63:bf:
d6:92:18:17:99:5c:df:45:7a:7e:13:79:65:e1:42:
54:25:24:7b:52:e5:f4:54:d7:60:48:48:e8:84:59:
5a:15:f5:29:1b:e1:94:66:09:67:a3:f9:80:17:33:
e1:8b:65:15:2f:c8:aa:48:df:bf:4b:6f:25:48:0a:
2e:ea:bc:c1:b1:64:2c:98:d8:63:0c:da:7b:cf:44:
43:e5:ed:0a:f4:66:78:3b:e6:5c:02:9c:b7:d8:cc:
13:be:1f:5e:fc:ed:b1:99:5c:0a:1c:34:55:e9:64:
0e:8f:fc:b6:3d:50:9e:59:4e:49:38:0e:04:80:30:
2d:94:92:05:50:2e:c1:11:f1:46:11:91:ee:ec:03:
10:26:47:7e:66:34:ef:98:02:7b:8c:59:81:b0:69:
b1:51:bb:87:1c:9a:87:dc:0b:c1:a1:8f:1b:43:58:
e5:89:3f:c0:5f:e2:64:08:6a:73:fc:53:2c:f6:47:
4e:23:a0:57:af:61:e6:6c:0f:97:54:17:25:9c:45:
70:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:81:B9:2B:F8:A1:7A:59:9B:2E:9D:B6:41:F5:07:F6:7C:65:C3
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS7720.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:fff3::/48
Signature Algorithm: sha256WithRSAEncryption
99:e3:ba:53:cf:49:dc:ec:bf:17:65:db:a6:33:d2:4b:d1:4d:
87:70:23:97:c7:6e:83:4e:81:21:38:7b:cc:af:39:ff:71:a4:
56:4e:0c:e6:e8:ef:60:05:7a:85:66:d9:74:27:68:c5:d8:34:
30:f5:41:34:16:b3:90:e8:87:3d:9a:0c:c2:9d:61:19:5f:72:
b2:76:e1:47:e2:91:e4:da:1b:2a:49:15:0d:a2:c7:80:6f:52:
45:fc:7b:97:bc:6e:4f:86:d5:76:45:a5:a7:ea:36:24:21:97:
2e:99:f7:29:49:e4:c8:01:e7:c9:cb:8e:ac:1d:1b:20:e0:34:
8d:1c:68:50:2a:60:30:21:11:46:39:64:58:95:b5:61:97:10:
12:6f:ca:d3:6b:70:00:7a:d7:a8:98:a3:0f:26:03:91:65:ec:
4f:56:67:19:ff:6d:f7:aa:33:19:6c:89:00:c9:98:32:18:1c:
9d:6b:3f:f5:30:e0:5b:05:82:6b:77:7b:01:31:71:16:9d:f2:
8c:01:57:d6:b7:25:60:6c:d2:bf:88:d1:31:d2:67:6c:61:ee:
8e:25:db:80:83:1a:0a:18:f7:32:f5:24:9d:a4:f2:72:c7:57:
6e:cf:d0:03:18:09:e2:65:c2:cd:35:88:84:18:a3:56:26:0c:
e1:91:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:14 2026 by rpki-client