Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/7FB4kaxu5CRxWYM61d7oLvZQaT8.roa
File: 7FB4kaxu5CRxWYM61d7oLvZQaT8.roa (raw, json)
Hash identifier: ojOfj8adDD7vbcpxRUkv3WidLTCizqV1QsfHJE9iFcU=
Subject key identifier: EC:50:78:91:AC:6E:E4:24:71:59:83:3A:D5:DE:E8:2E:F6:50:69:3F
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 01A01FB04B89173D980249AB80E424387B15
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/7FB4kaxu5CRxWYM61d7oLvZQaT8.roa
Signing time: Thu 20 Aug 2026 15:00:42 +0000
ROA not before: Thu 20 Aug 2026 15:00:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51320
IP address blocks: 83.97.38.0/23 maxlen: 23
89.30.232.0/21 maxlen: 21
91.195.122.0/23 maxlen: 23
93.91.32.0/20 maxlen: 20
93.93.232.0/21 maxlen: 21
95.129.16.0/24 maxlen: 24
95.129.17.0/24 maxlen: 24
95.129.18.0/24 maxlen: 24
95.129.19.0/24 maxlen: 24
95.129.20.0/22 maxlen: 22
109.70.224.0/21 maxlen: 21
178.211.192.0/20 maxlen: 20
178.211.208.0/21 maxlen: 21
178.211.216.0/22 maxlen: 22
178.211.220.0/24 maxlen: 24
178.211.221.0/24 maxlen: 24
178.237.112.0/20 maxlen: 20
185.101.120.0/22 maxlen: 22
185.170.176.0/22 maxlen: 22
185.207.36.0/24 maxlen: 24
193.192.192.0/19 maxlen: 19
194.0.158.0/24 maxlen: 24
194.54.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:4b:89:17:3d:98:02:49:ab:80:e4:24:38:7b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Aug 20 15:00:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec507891ac6ee4247159833ad5dee82ef650693f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9d:77:70:a1:e9:35:dd:f3:79:b1:ae:3b:72:
f7:61:1c:d2:4e:3c:69:d5:9b:ca:5f:a2:bb:00:6a:
b3:13:09:2c:a3:08:2e:db:ab:59:e1:62:1f:8c:46:
1f:bc:6b:eb:c7:4a:3a:3e:1c:49:8a:29:3b:a3:72:
7e:f4:f9:fb:55:2a:20:07:1e:b4:f0:ea:d7:4f:81:
9a:f0:50:99:7e:63:2b:8a:ac:9b:62:75:c0:de:5c:
3b:bc:26:02:c3:74:be:1a:ba:5c:72:18:4c:0c:81:
6f:60:85:c4:ec:d6:f9:f2:2c:f5:21:b1:74:c9:03:
bd:9d:1b:ea:25:23:75:47:c8:78:ee:f4:08:8e:64:
26:e7:52:b5:ce:36:da:49:bd:bb:e2:6a:00:42:3a:
45:f0:cf:64:ec:6d:08:12:69:c5:a9:56:28:a6:2c:
99:62:e8:12:8f:d1:70:42:b6:0e:eb:78:11:22:27:
fe:cb:7e:41:6b:77:ad:36:bb:a8:6e:7c:36:63:11:
eb:1d:1e:2a:8e:36:92:f4:27:26:e0:7b:09:c7:e0:
0f:8d:e6:84:9a:9e:47:68:38:a7:fb:95:fb:29:0b:
07:90:4a:9a:3a:5d:31:1f:b6:ab:a9:9f:cd:cf:50:
fa:a1:af:fe:3f:3c:8f:74:92:44:8f:9e:78:8e:41:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:78:91:AC:6E:E4:24:71:59:83:3A:D5:DE:E8:2E:F6:50:69:3F
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/7FB4kaxu5CRxWYM61d7oLvZQaT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.38.0/23
89.30.232.0/21
91.195.122.0/23
93.91.32.0/20
93.93.232.0/21
95.129.16.0/21
109.70.224.0/21
178.211.192.0-178.211.221.255
178.237.112.0/20
185.101.120.0/22
185.170.176.0/22
185.207.36.0/24
193.192.192.0/19
194.0.158.0/24
194.54.172.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a6:52:89:24:79:3b:b5:4a:c7:8f:eb:33:f7:11:1f:62:d7:
7c:72:5c:57:2c:9d:2f:40:92:c3:ed:5f:df:b8:b7:a0:1d:9c:
b9:67:26:ab:7b:52:81:a3:ae:e6:04:1c:2d:6c:c5:be:db:ec:
70:89:e7:16:ca:b3:ed:7b:96:a7:e9:9c:75:a8:97:a1:f5:8b:
2d:6b:56:c3:3b:83:ef:bd:fa:84:42:36:2b:25:f7:ef:c4:f9:
8a:66:3e:e0:1f:ae:09:db:a1:47:63:94:84:91:c7:dc:fb:70:
c5:da:c0:ff:82:ba:24:da:4a:50:23:67:70:66:42:90:08:51:
96:57:65:cd:4f:8f:90:f8:42:63:98:fe:25:48:3e:ef:2c:87:
5e:dc:ac:a0:77:c1:7a:a1:a8:70:c7:48:1c:fe:16:ce:6a:96:
ff:2c:98:75:61:32:6f:44:06:9e:76:29:ae:1f:de:9b:d4:b3:
c3:28:8d:34:e2:3f:83:be:c4:5c:57:6b:a3:a6:2c:3e:9f:9a:
f0:a7:ba:9f:ff:af:45:a7:a6:7b:85:14:f6:c8:1b:4f:3d:f0:
51:22:74:99:08:37:3f:02:6b:48:35:e2:61:31:96:25:66:ce:
b3:1f:6b:24:71:b9:16:39:0f:9a:4b:44:75:bf:81:ae:f5:26:
5e:c2:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:35 2026 by rpki-client