Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/7qVO45pVF7TizoyZ3tGtHXhleIo.roa
File: 7qVO45pVF7TizoyZ3tGtHXhleIo.roa (raw, json)
Hash identifier: gATl7peABL1S3wTIKJvI8pKX7Z470X6U51KJ5zpO3XQ=
Subject key identifier: EE:A5:4E:E3:9A:55:17:B4:E2:CE:8C:99:DE:D1:AD:1D:78:65:78:8A
Certificate issuer: /CN=969d46361b6af720fb9836acec965b0f52f4b09c
Certificate serial: 019D9021627420F385F85EC786496846415A
Authority key identifier: 96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/7qVO45pVF7TizoyZ3tGtHXhleIo.roa
Signing time: Wed 15 Apr 2026 07:53:20 +0000
ROA not before: Wed 15 Apr 2026 07:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29690
IP address blocks: 83.101.128.0/19 maxlen: 19
83.101.128.0/24 maxlen: 24
83.101.129.0/24 maxlen: 24
83.101.137.0/24 maxlen: 24
83.101.138.0/24 maxlen: 24
83.101.139.0/24 maxlen: 24
83.101.140.0/24 maxlen: 24
83.101.141.0/24 maxlen: 24
83.101.143.0/24 maxlen: 24
83.101.149.0/24 maxlen: 24
83.101.150.0/24 maxlen: 24
83.101.151.0/24 maxlen: 24
83.101.154.0/24 maxlen: 24
83.101.155.0/24 maxlen: 24
83.101.156.0/24 maxlen: 24
212.70.32.0/19 maxlen: 19
212.70.32.0/24 maxlen: 24
212.70.34.0/24 maxlen: 24
212.70.36.0/24 maxlen: 24
212.70.38.0/24 maxlen: 24
212.70.40.0/24 maxlen: 24
212.70.45.0/24 maxlen: 24
212.70.47.0/24 maxlen: 24
212.70.48.0/24 maxlen: 24
212.70.49.0/24 maxlen: 24
212.70.50.0/24 maxlen: 24
212.70.51.0/24 maxlen: 24
212.70.52.0/24 maxlen: 24
212.70.53.0/24 maxlen: 24
212.70.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:21:62:74:20:f3:85:f8:5e:c7:86:49:68:46:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969d46361b6af720fb9836acec965b0f52f4b09c
Validity
Not Before: Apr 15 07:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eea54ee39a5517b4e2ce8c99ded1ad1d7865788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:da:a8:53:3c:6d:75:d2:76:71:bf:f4:41:
93:f6:49:ce:69:4c:4c:2c:84:29:91:28:3d:32:ae:
09:30:0a:90:1b:07:e1:35:6d:4e:92:7e:10:df:71:
a5:af:0d:34:11:a6:ea:7f:59:14:28:65:45:8b:77:
68:46:5b:58:8b:60:18:50:b1:01:8e:6d:25:b9:57:
00:23:c8:3f:89:75:5d:65:9b:f5:89:2c:6f:ed:1c:
a5:62:ec:ba:ab:ce:ed:ee:09:ea:40:7e:b5:0f:33:
e6:6b:23:0c:22:c0:bd:e3:28:80:39:ee:66:53:cc:
41:4a:e1:de:da:db:e7:0b:2d:25:ce:dd:a7:e8:3c:
89:84:5c:ee:98:df:6b:4a:ea:62:70:a4:df:64:a9:
c8:66:6c:6d:16:13:d1:e2:18:08:57:d7:e3:74:34:
b6:76:34:ab:1f:8e:6a:12:c1:f7:a5:5e:22:02:2b:
cb:de:14:e8:43:d1:f3:55:cf:78:7f:c6:4b:79:83:
60:cf:d0:4c:57:e0:4a:44:6f:bf:b2:ac:d4:e7:fd:
9d:9e:36:e1:15:d9:83:eb:77:b2:55:dd:0b:1d:36:
a2:08:1e:ec:3f:79:a3:0d:56:c7:3a:b4:55:82:a0:
73:30:f3:60:b8:bf:a5:19:74:af:9c:2a:7a:34:07:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:4E:E3:9A:55:17:B4:E2:CE:8C:99:DE:D1:AD:1D:78:65:78:8A
X509v3 Authority Key Identifier:
keyid:96:9D:46:36:1B:6A:F7:20:FB:98:36:AC:EC:96:5B:0F:52:F4:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lp1GNhtq9yD7mDas7JZbD1L0sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/7qVO45pVF7TizoyZ3tGtHXhleIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5fbcbb-00fa-4ad7-a801-43600171b8bd/1/lp1GNhtq9yD7mDas7JZbD1L0sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.101.128.0/19
212.70.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:56:cf:f8:df:79:bf:f6:bf:c2:b5:a8:27:59:de:c4:95:21:
5a:28:90:72:75:a7:30:03:33:59:80:9d:81:f0:47:16:b2:a8:
45:d0:2b:b5:8e:c3:df:53:bf:85:6e:29:b7:8d:e0:bb:a3:ab:
71:a9:22:a8:ad:19:ae:a3:24:31:64:05:a6:15:69:2e:2b:56:
69:df:41:a9:71:49:a3:99:d3:f9:5c:09:72:59:81:3e:e0:6d:
48:d9:27:01:e8:d7:c3:2e:8d:c5:c1:39:5a:87:b7:03:a8:84:
ba:ae:6c:7a:6f:c0:f9:f2:b3:50:2f:1d:3e:ce:35:9c:7a:83:
a7:4e:39:72:d3:2f:64:35:ae:29:32:c4:16:0a:51:5d:c9:ed:
82:2b:d1:52:59:c9:16:08:ce:e8:0c:ce:bd:5a:75:ed:23:4e:
8c:b9:e6:37:7c:4c:84:3e:ed:c8:77:dd:31:ed:10:45:b8:95:
f8:cd:5a:1f:e5:64:d8:49:53:d2:e6:be:c6:61:5e:a2:ba:6e:
6a:a0:51:f3:41:bb:4f:93:a3:37:67:1a:84:12:cb:38:fb:8e:
63:ec:ca:af:1d:c7:82:6d:94:a1:1a:d9:de:36:01:f1:c9:8e:
e0:08:2a:f2:a4:0e:74:59:34:c1:92:13:ad:82:0f:e8:ad:f2:
15:a6:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:29 2026 by rpki-client