Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa
File: ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa (raw, json)
Hash identifier: fcj6iTqUPy26aGGnXwajRdM6fbwzNnBSUbT+6zg93yE=
Subject key identifier: 7A:4E:C5:B9:45:39:42:A6:6D:99:6E:1C:D9:AD:41:87:F3:6F:CD:ED
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019C4660288EFE2F75696BABA9A28EAC4E77
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa
Signing time: Tue 10 Feb 2026 07:07:12 +0000
ROA not before: Tue 10 Feb 2026 07:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 185.221.197.0/24 maxlen: 24
185.238.88.0/24 maxlen: 24
185.238.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:60:28:8e:fe:2f:75:69:6b:ab:a9:a2:8e:ac:4e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Feb 10 07:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a4ec5b9453942a66d996e1cd9ad4187f36fcded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:f4:94:11:8f:75:b0:66:7b:9d:77:c2:c5:
74:0e:94:fa:99:e9:fe:76:83:c6:23:96:9c:95:c6:
96:e6:6c:24:fb:a9:4c:fc:72:a8:83:73:a0:5b:2d:
7d:23:03:34:7a:ac:f7:da:dd:45:0e:3b:66:df:7c:
48:d1:e1:d5:89:97:5b:0d:b1:07:1b:50:61:15:85:
a1:94:ee:cf:31:7e:3e:88:65:68:2a:a7:bb:57:18:
6b:84:bb:12:a2:3d:e0:0e:1b:94:6b:8c:a5:42:7e:
7f:98:39:bf:bf:71:dd:14:31:a5:f8:5e:f8:49:c5:
ce:d4:24:ac:5c:86:4e:8c:bd:59:da:98:5d:92:46:
35:5e:c3:5a:76:3c:b5:3d:e9:a7:eb:f3:2a:cf:40:
5e:cf:6e:22:cf:90:80:53:3a:3d:1b:7e:a6:1d:8e:
dd:ce:4f:2d:e0:e0:79:34:de:d0:3b:60:54:fb:08:
3e:4d:c3:57:26:fd:98:b2:6a:f8:60:56:63:67:3c:
c1:67:23:23:74:d4:97:91:68:4e:d3:8b:a6:8a:7b:
7a:8c:63:8a:93:cb:4a:7c:11:39:5d:2e:e8:d2:62:
c4:42:0a:df:4b:61:fd:a4:12:18:27:1a:88:25:99:
45:27:a2:0a:01:63:18:bd:be:c3:c1:2f:c0:24:0d:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:C5:B9:45:39:42:A6:6D:99:6E:1C:D9:AD:41:87:F3:6F:CD:ED
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/ek7FuUU5QqZtmW4c2a1Bh_Nvze0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.197.0/24
185.238.88.0/23
Signature Algorithm: sha256WithRSAEncryption
09:81:a2:47:33:2a:4d:18:60:b9:c3:85:fe:e0:dc:4d:ce:29:
6c:32:63:dc:5c:d4:20:5d:db:04:19:f2:42:84:8a:14:bc:81:
a6:3c:8e:4b:c8:04:6d:25:1b:b7:5b:4b:f2:3a:cf:bd:a7:3a:
02:a1:7a:98:ae:d0:6f:a8:d9:52:a6:ef:b1:63:16:da:35:e7:
e0:1a:7e:32:4e:15:cc:71:27:22:51:93:29:eb:70:f2:f8:76:
e9:5b:a6:cb:a5:5d:0d:bb:ec:bf:18:e1:1a:06:ef:ff:61:d3:
a7:74:b4:53:ec:c2:13:1c:0b:ee:f3:05:ff:cf:c6:ca:36:26:
a8:bd:fb:71:5a:e1:00:3d:ca:c2:72:e5:da:ee:05:d3:cb:26:
04:53:1a:9c:e6:6b:12:d2:91:07:61:ef:21:25:3a:a7:86:9b:
44:54:1c:7a:83:27:89:bc:23:71:ac:d5:57:ca:03:65:90:a9:
98:fe:f1:f1:73:72:4c:cc:38:39:75:e2:ed:92:4e:6c:82:90:
94:d7:3a:bc:0f:65:80:0e:d4:87:72:ce:7d:f7:ff:9e:c4:cf:
68:99:bb:66:6b:0f:b0:92:08:e0:18:86:bb:fb:9f:30:51:4c:
71:af:40:ed:81:6f:e9:89:29:c9:2e:cf:73:01:30:c4:83:aa:
47:cf:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:57 2026 by rpki-client