Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa
File: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (raw, json)
Hash identifier: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=
Subject key identifier: EC:C7:87:B8:E1:D7:FE:DD:18:EC:CD:CE:92:26:13:21:BA:D6:06:61
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019EA7FA29E6DB77648570202E6002EA0540
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa
Signing time: Mon 08 Jun 2026 16:04:10 +0000
ROA not before: Mon 08 Jun 2026 16:04:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215468
IP address blocks: 185.206.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:fa:29:e6:db:77:64:85:70:20:2e:60:02:ea:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jun 8 16:04:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecc787b8e1d7fedd18eccdce92261321bad60661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:0c:f5:e5:32:66:bd:59:b2:31:90:fb:a1:
57:79:fe:ab:8e:e2:5f:09:33:6c:70:89:41:40:b9:
e3:4b:fb:b9:dd:7c:ea:31:37:cb:bd:86:0e:63:fd:
50:95:bf:bc:97:e7:41:bf:ad:25:b9:f6:ad:8e:60:
4f:24:1b:02:49:11:4f:a9:84:6f:c7:3d:16:c3:34:
a4:7f:7c:1e:5a:1b:4b:8d:9f:ce:42:c8:83:1f:e3:
4c:19:c8:6b:5b:3a:1d:b1:0f:eb:db:50:a2:e5:28:
f8:0c:99:e2:e3:32:b6:49:2f:c7:82:0a:67:37:56:
37:de:b4:78:2e:14:e0:87:3a:70:96:20:cb:f8:b1:
0b:0d:d6:d2:0e:34:3c:d8:4f:fa:a7:cb:a4:0b:6f:
25:a7:be:6d:06:4f:34:f6:29:52:17:eb:40:97:12:
31:be:23:48:d0:8f:63:75:c6:28:20:ff:6d:06:e2:
b6:53:bd:4c:db:91:eb:64:66:be:6b:43:5e:be:a0:
cd:20:98:29:48:c4:3c:f3:5f:3e:11:db:57:19:aa:
fd:9b:16:fe:5b:3d:4b:ad:56:ad:91:e9:32:a6:5c:
a0:4a:17:24:cb:a0:ec:ef:cd:ca:1c:9e:37:dc:b3:
6f:d9:ff:61:ca:92:98:35:e4:53:c0:9e:9d:84:4b:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:87:B8:E1:D7:FE:DD:18:EC:CD:CE:92:26:13:21:BA:D6:06:61
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f4:f8:c2:3b:92:f3:1a:b3:74:92:2d:df:60:bd:27:61:df:
8e:70:09:88:07:50:a5:f7:5e:06:86:39:39:38:77:b2:18:45:
5e:92:4d:ae:fd:0b:7f:a1:1f:1d:32:c9:a2:63:4c:45:7d:f5:
71:93:ea:19:62:61:fd:29:f4:fe:35:58:d3:90:b4:0a:0a:ae:
87:59:b7:e2:e7:57:b8:50:3e:48:85:72:d2:6f:9d:70:2a:96:
0e:88:70:75:19:52:f0:88:95:9b:bb:81:d8:f7:43:8a:16:99:
49:28:0d:85:fc:9c:df:00:c2:3e:00:f8:d6:56:e0:20:96:02:
7d:13:b7:f8:56:01:58:4a:31:c3:85:43:c1:ba:fd:f8:a1:4c:
ac:ff:7f:bf:24:dc:dc:aa:f2:cd:f0:2e:66:0e:4c:0b:62:ad:
17:4c:af:38:31:89:95:4a:3e:9b:6e:59:5e:2c:64:82:20:5e:
e9:82:48:03:79:7b:3e:0e:15:00:7f:ac:5b:cd:56:47:14:b1:
d2:65:bc:f1:54:89:44:86:d7:0b:77:d8:11:07:5d:cd:fd:87:
ea:5e:cd:b3:2e:83:ea:8c:4c:99:aa:5f:70:26:54:76:7a:c9:
d4:b6:88:b7:b5:c1:95:99:c8:2f:28:d5:22:f2:74:a8:9f:ad:
03:ed:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:33 2026 by rpki-client