Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/7FxLncSDYVoZ6Iufw5pur3BUHiE.roa
File: 7FxLncSDYVoZ6Iufw5pur3BUHiE.roa (raw, json)
Hash identifier: YgYsqBmeiNBHe4niuDgW9xPkD23Iui2p8MLylcQcAk4=
Subject key identifier: EC:5C:4B:9D:C4:83:61:5A:19:E8:8B:9F:C3:9A:6E:AF:70:54:1E:21
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 01A0A3617130C0DFA7740D145FF6A7E3FD71
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/7FxLncSDYVoZ6Iufw5pur3BUHiE.roa
Signing time: Tue 15 Sep 2026 04:44:27 +0000
ROA not before: Tue 15 Sep 2026 04:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11179
IP address blocks: 78.159.140.0/24 maxlen: 24
78.159.141.0/24 maxlen: 24
78.159.142.0/24 maxlen: 24
78.159.143.0/24 maxlen: 24
147.75.224.0/24 maxlen: 24
147.75.225.0/24 maxlen: 24
147.75.226.0/24 maxlen: 24
147.75.227.0/24 maxlen: 24
147.75.228.0/24 maxlen: 24
147.75.229.0/24 maxlen: 24
147.75.230.0/24 maxlen: 24
147.75.231.0/24 maxlen: 24
147.75.232.0/24 maxlen: 24
147.75.233.0/24 maxlen: 24
147.75.234.0/24 maxlen: 24
147.75.235.0/24 maxlen: 24
147.75.236.0/24 maxlen: 24
147.75.237.0/24 maxlen: 24
147.75.238.0/24 maxlen: 24
147.75.239.0/24 maxlen: 24
159.100.192.0/24 maxlen: 24
159.100.193.0/24 maxlen: 24
159.100.194.0/24 maxlen: 24
159.100.195.0/24 maxlen: 24
159.100.196.0/24 maxlen: 24
159.100.197.0/24 maxlen: 24
159.100.198.0/24 maxlen: 24
159.100.199.0/24 maxlen: 24
159.100.200.0/24 maxlen: 24
159.100.201.0/24 maxlen: 24
159.100.202.0/24 maxlen: 24
159.100.203.0/24 maxlen: 24
159.100.204.0/24 maxlen: 24
159.100.205.0/24 maxlen: 24
159.100.206.0/24 maxlen: 24
159.100.207.0/24 maxlen: 24
185.94.18.0/24 maxlen: 24
185.114.76.0/24 maxlen: 24
185.114.77.0/24 maxlen: 24
185.114.78.0/24 maxlen: 24
185.114.79.0/24 maxlen: 24
185.152.129.0/24 maxlen: 24
185.152.130.0/24 maxlen: 24
185.152.131.0/24 maxlen: 24
212.59.80.0/24 maxlen: 24
212.59.81.0/24 maxlen: 24
212.59.82.0/24 maxlen: 24
212.59.83.0/24 maxlen: 24
212.59.84.0/24 maxlen: 24
212.59.86.0/24 maxlen: 24
212.59.87.0/24 maxlen: 24
212.59.88.0/24 maxlen: 24
212.59.90.0/24 maxlen: 24
212.59.91.0/24 maxlen: 24
212.59.92.0/24 maxlen: 24
212.59.93.0/24 maxlen: 24
212.59.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:61:71:30:c0:df:a7:74:0d:14:5f:f6:a7:e3:fd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Sep 15 04:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec5c4b9dc483615a19e88b9fc39a6eaf70541e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:fa:d6:93:62:d7:fa:24:14:4a:db:27:75:
2c:29:85:57:bc:49:3b:11:77:8d:9d:05:e2:36:39:
78:07:f9:f1:91:30:06:89:a6:83:a8:45:90:d3:13:
0e:92:90:38:24:ca:7e:60:39:96:3d:37:ce:35:37:
79:40:cc:97:10:8c:d3:ac:46:d1:03:18:b7:79:65:
84:04:25:c2:b7:f8:db:a9:fe:6b:3a:40:48:85:36:
a9:62:b1:ec:b3:84:bc:22:ad:03:55:42:cb:79:66:
76:44:4e:71:c2:25:9c:59:51:87:77:34:f4:59:dd:
11:55:c9:39:da:bf:d4:2c:b9:7c:63:3b:0d:de:81:
82:66:6e:94:f8:cc:f8:6a:b6:5a:e0:ed:d2:00:fd:
83:42:86:28:dd:96:79:32:56:17:69:a8:5e:47:df:
1a:e3:90:36:9f:95:55:3d:21:99:97:ad:c6:42:a7:
bb:86:43:d5:57:6c:aa:5e:9a:cd:fb:c3:4f:b1:f1:
fe:04:1a:c6:8e:bf:0b:9e:91:d5:e1:70:06:0b:29:
c7:6b:6c:e2:d3:e9:7a:7e:c9:4d:2c:ba:c2:14:62:
92:97:08:1d:3d:89:65:93:cf:48:a5:fb:e4:bd:88:
d0:2a:71:8f:ed:db:40:c7:24:e1:57:96:0b:dd:33:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:4B:9D:C4:83:61:5A:19:E8:8B:9F:C3:9A:6E:AF:70:54:1E:21
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/7FxLncSDYVoZ6Iufw5pur3BUHiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.140.0/22
147.75.224.0/20
159.100.192.0/20
185.94.18.0/24
185.114.76.0/22
185.152.129.0-185.152.131.255
212.59.80.0-212.59.84.255
212.59.86.0-212.59.88.255
212.59.90.0-212.59.93.255
212.59.95.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f0:98:22:34:d8:0e:bf:78:db:21:74:b1:0c:47:d1:0d:c4:
e5:62:df:f5:6e:c0:3f:82:57:ad:10:ea:23:f0:ae:73:87:20:
a0:4a:a8:79:38:51:e9:89:29:ae:68:2e:46:04:35:24:6d:ae:
00:5a:45:87:b0:dd:d7:cb:1b:f8:90:a4:87:0c:16:88:f0:dd:
9a:62:e8:ff:cf:6c:19:f8:8f:bd:9f:01:7b:5c:aa:dd:01:2c:
17:e7:34:39:46:c6:6f:b9:51:c8:f4:42:02:8b:11:aa:4e:5e:
6a:21:24:0f:b8:14:99:e6:a0:5f:be:75:96:48:6f:1b:58:41:
e6:8b:3e:27:37:b4:07:dc:22:27:13:f8:99:cd:25:67:e8:14:
fd:1e:50:bc:8a:6d:4d:85:22:fd:cb:80:72:3b:99:10:34:a8:
eb:3a:4e:ee:92:1c:56:ab:97:e8:75:c1:4b:3a:45:d8:ef:e6:
98:46:6a:88:a9:42:b8:2e:fa:fe:3c:f7:fc:8c:83:ef:06:9c:
1e:75:83:25:8e:5c:57:de:65:52:81:5e:26:a0:58:cf:9a:61:
3f:b4:47:b3:49:24:ff:2d:63:be:af:c0:3f:e1:3d:b8:b9:99:
c8:c2:e0:87:2e:a1:08:32:c7:87:36:31:23:d1:31:0a:97:c9:
fe:6d:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:32 2026 by rpki-client