Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/a7dC-fTyRsxAqjUqXt-V2l_sFRk.roa
File: a7dC-fTyRsxAqjUqXt-V2l_sFRk.roa (raw, json)
Hash identifier: Yi2vsWWavytIaBmtL4DN0PmLyI2j0Zs4YPCaJ/VDFVs=
Subject key identifier: 6B:B7:42:F9:F4:F2:46:CC:40:AA:35:2A:5E:DF:95:DA:5F:EC:15:19
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 019C27996537889BA0AB4A27C32FA20386E6
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/a7dC-fTyRsxAqjUqXt-V2l_sFRk.roa
Signing time: Wed 04 Feb 2026 07:41:30 +0000
ROA not before: Wed 04 Feb 2026 07:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60388
IP address blocks: 185.31.108.0/22 maxlen: 22
212.73.96.0/19 maxlen: 19
212.73.96.0/23 maxlen: 23
212.73.98.0/24 maxlen: 24
212.73.99.0/24 maxlen: 24
212.73.100.0/23 maxlen: 23
212.73.102.0/24 maxlen: 24
212.73.103.0/24 maxlen: 24
212.73.104.0/21 maxlen: 21
212.73.104.0/24 maxlen: 24
212.73.105.0/24 maxlen: 24
212.73.106.0/24 maxlen: 24
212.73.107.0/24 maxlen: 24
212.73.108.0/24 maxlen: 24
212.73.109.0/24 maxlen: 24
212.73.110.0/24 maxlen: 24
212.73.111.0/24 maxlen: 24
212.73.112.0/20 maxlen: 20
212.73.113.0/24 maxlen: 24
212.73.114.0/24 maxlen: 24
2a00:b4a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:27:99:65:37:88:9b:a0:ab:4a:27:c3:2f:a2:03:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Feb 4 07:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bb742f9f4f246cc40aa352a5edf95da5fec1519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:31:31:46:3b:e7:a1:85:6a:20:6d:99:10:
19:d8:4e:9e:5b:93:7a:2a:97:13:fb:f1:4b:39:03:
8c:d0:e7:a0:b9:be:34:b2:55:3b:c1:95:9c:51:68:
fc:79:25:6f:75:c5:ef:2e:c4:56:d2:54:d2:62:7c:
af:5c:15:b4:12:e6:94:10:04:89:17:3a:7b:20:c8:
35:b8:8c:c0:d9:bb:0b:e4:7e:fd:f0:80:14:d3:dd:
c3:b6:6a:d6:e9:ac:85:28:65:80:80:8b:6c:60:89:
7e:1a:ea:f0:e7:4d:21:3d:db:d3:e1:13:7a:ef:6d:
70:cb:1a:8c:d0:59:08:90:df:fe:85:74:5f:c2:f8:
d8:f7:d9:a1:a8:43:38:59:28:91:af:ea:fc:ee:ed:
32:5b:1f:cd:ba:02:50:fd:5a:c2:29:04:a3:a1:0b:
f2:ad:d3:ed:b9:c2:41:1f:75:1f:25:6a:b0:80:90:
fb:52:ca:98:d9:ff:4a:69:c2:26:1c:2b:8b:8d:c2:
9f:ed:d7:c0:72:b7:2e:23:f8:26:7a:99:1f:b7:fd:
17:81:b3:d8:2d:7b:90:64:80:4c:ae:47:79:e5:58:
a0:fa:08:1b:4f:6e:57:68:ca:e3:63:4d:09:6d:02:
cc:6d:2a:16:1b:ca:e3:53:02:33:2b:08:48:5b:72:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B7:42:F9:F4:F2:46:CC:40:AA:35:2A:5E:DF:95:DA:5F:EC:15:19
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/a7dC-fTyRsxAqjUqXt-V2l_sFRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.108.0/22
212.73.96.0/19
IPv6:
2a00:b4a0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:08:4e:71:52:bd:26:f1:1f:a5:a2:6f:b0:95:b1:62:61:91:
05:e0:0f:75:9a:cb:43:e3:8c:ab:b4:45:d3:ca:b6:51:aa:20:
08:ef:49:a0:1c:0d:6b:60:32:8f:e4:c7:93:b4:a6:4a:8d:bb:
63:dc:81:f1:f4:93:b5:43:03:85:2b:ed:46:9b:92:24:92:09:
63:85:1c:98:d5:63:da:5d:a0:e7:de:07:aa:1a:0c:d9:48:af:
1c:e3:d8:c3:08:9a:b6:03:ae:74:dd:48:e1:01:1c:75:51:86:
b7:77:56:59:74:2a:af:4c:e5:e3:ab:d5:81:c6:ee:9b:e4:fb:
b8:db:80:e7:3a:2d:e4:79:d2:29:a2:76:75:93:26:64:8b:b3:
bb:b7:ed:2d:fa:90:3a:83:0e:58:b8:fb:38:5c:7b:f2:a9:ee:
3d:a3:73:bd:ca:5c:ec:fe:4f:eb:4c:3e:2c:ae:19:6e:0a:e0:
d0:4b:47:9a:10:55:ab:f9:73:e4:0d:b2:42:3b:6e:8c:9c:a4:
9c:75:1f:dd:c9:e3:e6:58:26:27:d3:c2:ef:f4:fb:60:51:c0:
69:f9:35:af:b3:b0:4f:1b:70:b5:d7:16:3e:4c:6e:77:ee:68:
30:4c:e3:46:3d:7c:19:a9:32:05:74:f8:04:66:14:99:0b:8b:
e6:90:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:12:11 2026 by rpki-client