Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7umQIn2F3PtoJHU4mEh8tRWSGjw.roa
File: 7umQIn2F3PtoJHU4mEh8tRWSGjw.roa (raw, json)
Hash identifier: /7hKE4zSs1lxHGTqybsH4pyb3rpOeMyCxNN8B46A10I=
Subject key identifier: EE:E9:90:22:7D:85:DC:FB:68:24:75:38:98:48:7C:B5:15:92:1A:3C
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A17FDEBB8D811DCE635D0E7B20233E1C4A
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7umQIn2F3PtoJHU4mEh8tRWSGjw.roa
Signing time: Wed 28 Oct 2026 00:17:45 +0000
ROA not before: Wed 28 Oct 2026 00:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.77.0/24 maxlen: 24
2a0c:2507::/32 maxlen: 48
2a14:6782::/48 maxlen: 48
2a14:6782:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:de:bb:8d:81:1d:ce:63:5d:0e:7b:20:23:3e:1c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 28 00:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eee990227d85dcfb6824753898487cb515921a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:a0:2d:2e:94:60:82:b9:d8:c4:0c:a8:67:
a9:65:1d:28:d6:cd:b1:5f:1d:27:57:97:c9:0f:47:
53:3d:a0:7f:84:0d:64:e7:16:a2:ad:91:74:fb:36:
3e:a4:ce:4f:16:73:d8:11:4a:df:27:2d:74:a9:21:
61:a3:03:4f:73:0f:68:bc:fb:55:73:9a:d5:0b:af:
86:fe:46:ca:01:c5:64:72:02:f4:05:2e:ef:5d:32:
3d:f1:11:93:b5:fa:2c:81:7e:c1:c1:02:cd:3b:31:
06:52:3f:c8:f1:67:9b:de:06:77:71:d6:9c:e0:9c:
c5:d6:db:e7:aa:6f:8f:9c:eb:fc:a0:92:9a:23:a1:
c0:25:cc:79:ca:bd:69:35:d0:75:18:f0:79:4c:45:
34:cd:53:d8:3e:e2:f0:c0:bb:a9:e0:c3:93:43:d3:
8a:3d:4e:55:e0:07:88:6c:9c:58:df:b9:35:ab:54:
63:d1:5f:8e:5b:88:3b:2c:5e:48:75:ce:a0:a5:7b:
f2:51:dd:19:bd:49:aa:b3:ef:13:11:c5:a2:84:28:
d4:29:38:f0:28:28:21:59:fa:19:a5:e6:26:2a:03:
8a:fc:f8:8b:46:2a:10:74:50:2d:e7:2d:79:c2:af:
df:11:21:99:a3:82:42:af:c1:7b:4b:e6:a6:07:11:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E9:90:22:7D:85:DC:FB:68:24:75:38:98:48:7C:B5:15:92:1A:3C
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/7umQIn2F3PtoJHU4mEh8tRWSGjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.77.0/24
IPv6:
2a0c:2507::/32
2a14:6782::/48
2a14:6782:202::/48
Signature Algorithm: sha256WithRSAEncryption
78:62:77:58:a3:60:d8:3f:9b:c8:01:12:53:10:a0:5f:c5:05:
5c:46:ab:25:bb:41:1c:fb:74:ce:75:76:39:6d:84:98:f4:9a:
5e:9a:06:32:53:d6:03:98:40:ca:ab:e8:4d:83:ce:62:33:51:
5b:9d:3e:92:dc:d6:38:e6:33:59:69:e9:30:e7:2c:54:77:f5:
74:31:05:b1:ec:c7:f6:52:dc:79:e9:2f:33:60:16:07:ad:e0:
05:e4:34:ff:fb:59:ca:c3:4c:ec:88:80:05:fa:61:c5:5b:d9:
ac:7f:de:d1:c4:24:48:df:9e:5e:ba:04:e5:9d:b8:d6:8f:b7:
4a:55:1c:ff:5f:37:4c:9a:cc:20:02:ac:e1:01:07:6f:2d:a7:
24:bf:ad:4f:95:09:0a:fa:67:ab:52:fc:66:21:7f:d7:31:6a:
a2:28:e9:38:74:ba:bd:07:f8:40:fe:8b:5c:ce:d0:1e:50:e6:
c8:ba:0f:aa:58:a8:f4:9f:b6:6d:59:77:1f:97:d3:5a:59:e2:
16:c9:f9:fa:f2:3f:11:1d:61:2b:40:d0:af:a7:0c:09:00:94:
15:b9:29:c0:b3:21:2a:b0:7f:86:82:6e:a8:0c:4e:b6:4e:5d:
c4:28:ee:ac:6d:b3:6a:b1:65:83:1b:03:5a:cb:d4:4e:0d:ca:
0b:8f:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:12 2026 by rpki-client