Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/7Rp3GdcKfVUWm4cQ63fBxEuydME.roa
File: 7Rp3GdcKfVUWm4cQ63fBxEuydME.roa (raw, json)
Hash identifier: pT/MLKvd9rZPCZ0i8dhFBDQSL+HDF/WyEyWHYfgrkVc=
Subject key identifier: ED:1A:77:19:D7:0A:7D:55:16:9B:87:10:EB:77:C1:C4:4B:B2:74:C1
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 019B7A59AC3B17567DE8F222F2662D2D4983
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/7Rp3GdcKfVUWm4cQ63fBxEuydME.roa
Signing time: Thu 01 Jan 2026 16:17:35 +0000
ROA not before: Thu 01 Jan 2026 16:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20545
IP address blocks: 109.205.40.0/21 maxlen: 24
185.212.252.0/22 maxlen: 22
217.147.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:59:ac:3b:17:56:7d:e8:f2:22:f2:66:2d:2d:49:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Jan 1 16:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed1a7719d70a7d55169b8710eb77c1c44bb274c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:99:46:88:b0:c2:87:cd:3e:d0:5a:5d:89:
df:76:4c:17:ab:69:aa:b3:aa:7b:93:f6:f2:09:e9:
3e:a9:ea:1c:78:59:e2:dc:1d:79:22:ab:06:41:1a:
92:f9:38:49:d3:7a:b6:95:c8:b1:88:e1:99:b6:d8:
01:35:44:de:57:fb:ea:e2:49:c9:40:4a:64:30:84:
99:42:55:32:6a:9b:0f:99:0f:7d:14:c8:e4:19:72:
2c:83:bc:45:e3:ad:26:47:0c:2c:47:cc:19:25:15:
c9:1f:72:6f:6d:5e:00:bf:34:bc:f9:39:a6:dc:4b:
a9:4c:b4:00:d5:1f:51:aa:a2:61:b0:1a:62:a0:85:
d1:ba:3e:2a:6c:8c:50:7d:e0:1f:89:69:f6:18:7c:
73:cc:8e:ec:79:e9:28:cd:c5:4a:46:88:53:64:b7:
ac:12:a4:db:d5:4b:a6:3a:d8:4a:79:5a:f3:d8:8e:
51:87:d2:14:cd:b4:72:79:54:06:d3:3d:19:ee:bf:
7e:9b:60:08:ff:07:2f:67:9e:dd:bc:f2:31:af:17:
de:aa:58:ff:fb:a0:b6:e7:79:ec:9a:ab:37:3e:e2:
37:cb:36:eb:6d:52:30:32:df:2d:59:43:f1:d1:c3:
06:4f:b9:32:cd:63:e4:cc:4f:3c:9b:37:d4:8e:33:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1A:77:19:D7:0A:7D:55:16:9B:87:10:EB:77:C1:C4:4B:B2:74:C1
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/7Rp3GdcKfVUWm4cQ63fBxEuydME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.40.0/21
185.212.252.0/22
217.147.224.0/20
Signature Algorithm: sha256WithRSAEncryption
93:76:88:35:e0:22:38:ce:6d:a8:cf:bf:1b:04:16:f8:de:14:
4c:77:76:43:df:cc:a2:25:78:9e:ee:49:96:60:2f:df:13:b6:
d0:1d:3c:c6:fb:bf:9f:4d:a2:d7:a0:24:9f:e0:f0:fc:b8:47:
27:bf:52:d1:d9:8c:c1:be:ea:de:5c:cd:9e:17:83:fc:94:4c:
25:d7:47:b2:9d:41:48:99:ca:76:34:3e:53:39:e2:76:30:12:
b8:62:ca:de:31:0a:c6:c7:cc:3c:da:73:cc:22:c7:db:53:b4:
f9:ca:58:4a:83:aa:ab:d3:4e:d1:50:31:67:ab:d3:bc:c1:18:
19:0c:f0:88:a2:72:b1:84:83:a1:a9:a5:a4:ab:18:33:0a:61:
3a:74:19:ed:e2:f0:79:76:29:65:70:80:bf:49:c4:ce:7d:b1:
10:bf:95:24:36:b5:e8:05:9a:54:18:b9:e1:63:1b:98:b0:76:
32:e2:8b:8c:5b:23:0a:87:b3:79:4a:f3:f1:a6:c9:de:05:3c:
2c:fb:a6:43:02:cc:f8:8e:6e:94:e6:07:ee:a1:e7:32:69:6b:
10:d9:db:24:bc:f4:11:92:1f:5a:6a:d2:b8:99:2f:3b:98:e4:
9c:a1:d2:ca:61:bb:70:ae:df:7b:69:2d:5e:1a:97:fe:97:5d:
e9:34:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:09 2026 by rpki-client