Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/ev61j1ETJKk5VTID5YU7MOsFe84.roa
File: ev61j1ETJKk5VTID5YU7MOsFe84.roa (raw, json)
Hash identifier: P+WHtpS/MvLBEjeUqUtw7IInlpfrcmeIpjpxR4JzIUQ=
Subject key identifier: 7A:FE:B5:8F:51:13:24:A9:39:55:32:03:E5:85:3B:30:EB:05:7B:CE
Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial: 019B7B3625221EB3449B419D9F54E64E1F8B
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/ev61j1ETJKk5VTID5YU7MOsFe84.roa
Signing time: Thu 01 Jan 2026 20:18:24 +0000
ROA not before: Thu 01 Jan 2026 20:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50719
IP address blocks: 5.206.200.0/21 maxlen: 21
91.227.231.0/24 maxlen: 24
195.191.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:25:22:1e:b3:44:9b:41:9d:9f:54:e6:4e:1f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Validity
Not Before: Jan 1 20:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7afeb58f511324a939553203e5853b30eb057bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:b3:38:8c:2a:29:3d:4c:2d:27:43:2f:24:
fa:50:b5:13:b0:91:ef:a6:ef:f4:f5:64:66:66:b7:
dd:0a:ad:e6:ab:55:bd:f6:50:71:a3:82:b0:95:2b:
60:be:d0:ee:48:31:28:ec:3f:e4:cd:c6:41:2a:e8:
95:9a:58:b8:47:c0:df:cd:d4:ed:91:60:4c:a2:10:
c9:18:93:e5:69:c6:d9:a7:03:6d:34:b9:05:4d:65:
54:1b:5a:8a:be:6c:f8:f3:8e:4d:75:66:c2:92:10:
4f:05:7a:68:89:b5:70:4d:b4:fa:98:65:c5:a0:87:
5e:94:13:f4:b9:a1:10:61:65:45:fc:81:1b:bc:0a:
c1:73:26:77:35:28:57:7f:96:4c:94:63:bf:af:a5:
0a:7a:cf:eb:75:b8:18:97:e1:00:73:44:2a:09:97:
22:7c:6c:64:a7:b6:e3:15:c7:05:33:c1:ae:46:0e:
46:64:af:a3:40:ba:19:9f:05:43:85:67:f4:27:04:
1e:e6:a6:01:11:d5:a5:a1:f7:10:d0:40:45:b0:30:
37:a3:0c:9c:f0:9e:30:5b:02:1c:07:ed:90:0c:bc:
6f:a9:b7:3f:f6:3d:28:69:e9:95:fe:4d:9c:8f:d6:
7f:ec:ca:e0:ba:60:56:b1:f3:0f:c1:b1:8b:dc:df:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FE:B5:8F:51:13:24:A9:39:55:32:03:E5:85:3B:30:EB:05:7B:CE
X509v3 Authority Key Identifier:
keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/ev61j1ETJKk5VTID5YU7MOsFe84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.206.200.0/21
91.227.231.0/24
195.191.252.0/23
Signature Algorithm: sha256WithRSAEncryption
55:dc:9f:64:f8:dd:cf:de:02:b4:9d:72:37:3c:de:4f:ad:4c:
dc:4d:4e:39:cd:83:66:cf:1f:8d:7e:fe:91:b7:31:90:f3:ba:
d6:39:1a:8b:62:90:96:52:d2:f7:58:b8:9c:f2:b8:c3:1b:cf:
6e:92:b7:7f:55:15:62:10:41:96:cc:51:8d:f3:54:5d:20:cd:
8d:25:83:49:99:26:bd:ce:10:2b:86:2a:8c:53:0d:34:c0:4f:
79:32:a7:03:db:c2:b7:07:ab:84:84:65:f4:2d:74:05:d4:3b:
b9:af:d8:dc:32:19:a1:ef:3f:43:02:03:cd:98:cb:78:f6:44:
ed:e9:11:7c:96:87:65:ad:a3:8c:d9:ac:2e:3d:95:f6:08:31:
6d:7f:58:fd:83:d8:9a:a4:c3:75:a9:e7:af:31:de:a4:d6:63:
56:fb:18:e6:52:1c:02:a6:86:f6:ad:26:4d:65:3d:3e:38:59:
85:0e:45:7f:db:f9:d9:2a:26:77:79:14:20:a5:74:57:9f:49:
d8:3c:f5:2e:98:67:a5:4e:c6:06:e7:2d:d8:3a:96:92:90:f0:
6a:ac:4c:b3:17:3b:84:5e:b2:62:70:8f:da:45:95:9c:2c:d5:
7d:6b:3e:f8:85:c3:52:00:2d:6b:c6:44:5a:b0:df:59:e7:bb:
c7:eb:a3:39
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt7NiUiHrNEm0Gdn1TmTh+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy
YzBlMzYwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWZlYjU4ZjUxMTMyNGE5Mzk1NTMyMDNlNTg1M2IzMGViMDU3YmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iazOIwqKT1MLSdDLyT6ULUTsJHv
pu/09WRmZrfdCq3mq1W99lBxo4KwlStgvtDuSDEo7D/kzcZBKuiVmli4R8DfzdTt
kWBMohDJGJPlacbZpwNtNLkFTWVUG1qKvmz4845NdWbCkhBPBXpoibVwTbT6mGXF
oIdelBP0uaEQYWVF/IEbvArBcyZ3NShXf5ZMlGO/r6UKes/rdbgYl+EAc0QqCZci
fGxkp7bjFccFM8GuRg5GZK+jQLoZnwVDhWf0JwQe5qYBEdWlofcQ0EBFsDA3owyc
8J4wWwIcB+2QDLxvqbc/9j0oaemV/k2cj9Z/7MrgumBWsfMPwbGL3N/C7QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHr+tY9REySpOVUyA+WFOzDrBXvOMB8GA1UdIwQY
MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct
MDM1MzIxNDBlZjUyLzEvZXY2MWoxRVRKS2s1VlRJRDVZVTdNT3NGZTg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy
LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBc7IAwQA
W+PnAwQBw7/8MA0GCSqGSIb3DQEBCwUAA4IBAQBV3J9k+N3P3gK0nXI3PN5PrUzc
TU45zYNmzx+Nfv6RtzGQ87rWORqLYpCWUtL3WLic8rjDG89ukrd/VRViEEGWzFGN
81RdIM2NJYNJmSa9zhArhiqMUw00wE95MqcD28K3B6uEhGX0LXQF1Du5r9jcMhmh
7z9DAgPNmMt49kTt6RF8lodlraOM2awuPZX2CDFtf1j9g9iapMN1qeevMd6k1mNW
+xjmUhwCpob2rSZNZT0+OFmFDkV/2/nZKiZ3eRQgpXRXn0nYPPUumGelTsYG5y3Y
OpaSkPBqrEyzFzuEXrJicI/aRZWcLNV9az74hcNSAC1rxkRasN9Z57vH66M5
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:03 2026 by rpki-client