Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ILt3tRaBwvDmxRcp9pAtmThBQQ.roa
File: 7ILt3tRaBwvDmxRcp9pAtmThBQQ.roa (raw, json)
Hash identifier: UTeuLb21OXYLzr+OgLnrywjDX9fAAXFqeiRc8iiwPtg=
Subject key identifier: EC:82:ED:DE:D4:5A:07:0B:C3:9B:14:5C:A7:DA:40:B6:64:E1:05:04
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A10B0C9501320D8FF9CBCB80A9ACC6C8B1
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ILt3tRaBwvDmxRcp9pAtmThBQQ.roa
Signing time: Mon 05 Oct 2026 07:52:16 +0000
ROA not before: Mon 05 Oct 2026 07:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48539
IP address blocks: 89.21.84.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:0c:95:01:32:0d:8f:f9:cb:cb:80:a9:ac:c6:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 5 07:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec82edded45a070bc39b145ca7da40b664e10504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:f6:db:4b:5f:35:ce:dc:4b:6f:6e:78:da:
c1:94:0e:d8:d4:46:22:fb:c3:30:d9:2d:c6:dd:30:
00:ff:7a:d5:cd:1c:f9:61:f6:67:73:21:4c:5f:b6:
3b:f7:48:e5:1f:a6:99:1a:07:d8:4f:34:df:0a:cc:
29:a1:57:42:1f:e1:c7:f7:a0:94:b2:8f:20:2c:0e:
b0:23:aa:7e:f7:a6:94:5a:f7:cc:a4:9c:fc:34:8d:
4c:78:fb:93:6e:1a:28:b4:04:f9:31:e7:36:3c:6e:
b9:58:ca:b6:44:64:3c:4b:9a:1d:b2:ee:03:db:b9:
37:0f:49:f6:7b:26:13:e7:7b:d0:07:8e:7b:56:20:
bc:a7:b4:03:d5:45:42:0d:26:dc:40:7e:00:bf:62:
23:a7:d4:80:33:30:42:74:99:22:0a:3f:af:1a:fc:
7a:b3:80:31:58:fc:32:0e:1d:cb:bd:c2:af:64:33:
f7:00:98:49:9f:50:d5:ba:98:dc:7b:3c:08:cb:94:
e8:32:08:e9:01:2a:69:eb:b1:f5:88:2b:50:19:5d:
bf:6d:cd:26:b0:a6:1c:19:91:9e:22:be:09:39:30:
4a:6e:f5:06:0b:84:c0:40:bd:0f:df:cd:54:aa:c1:
e1:0f:90:f0:8e:f3:fe:4a:0d:de:fb:49:52:14:17:
87:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:ED:DE:D4:5A:07:0B:C3:9B:14:5C:A7:DA:40:B6:64:E1:05:04
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7ILt3tRaBwvDmxRcp9pAtmThBQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.84.0/24
89.251.27.0/24
89.251.31.0/24
91.226.57.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
02:51:0c:c8:08:ec:c6:00:bf:c0:3e:34:96:0a:14:5b:98:ba:
05:02:e8:fa:46:ff:ba:09:87:9b:e3:d9:d9:a6:a6:89:64:f2:
e1:56:88:f3:2e:c6:c8:ed:f4:5f:24:c6:3b:b9:8f:36:0e:c8:
3f:37:20:0b:e3:52:88:f1:b2:df:fd:e2:da:21:f6:da:98:49:
fc:82:a0:78:ef:2c:4c:2e:2b:13:43:bb:3d:16:b0:f2:7e:12:
4c:5c:e0:24:66:6c:63:fc:dd:2e:aa:09:fd:dd:f5:34:30:09:
c1:36:17:fe:42:f1:4e:49:db:a9:10:ae:75:c8:8b:7d:13:71:
f2:f1:40:de:df:44:d3:6c:fb:a3:5a:e4:c2:45:b0:40:66:4b:
a9:ff:ca:b4:2b:41:ba:04:22:de:46:60:23:ff:ab:d0:91:9b:
65:e3:82:92:1d:02:e1:55:73:44:48:ef:8c:88:13:81:a5:ea:
49:90:7a:d3:4d:86:b2:09:81:d5:c7:b1:6f:5a:b2:1e:fa:5d:
e0:77:a9:75:88:84:f6:9d:e0:f9:b2:1e:5e:53:92:ff:5d:a3:
2f:1f:dc:40:b4:9a:0f:e4:53:30:56:df:26:51:fe:3b:a3:d7:
61:d6:fd:ea:c9:34:86:80:a0:f2:0e:40:52:c0:27:5d:63:95:
71:2b:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:14:57 2026 by rpki-client