Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/7VMES9_b1AHZuqJNrFIdZtH3Pb8.roa
File: 7VMES9_b1AHZuqJNrFIdZtH3Pb8.roa (raw, json)
Hash identifier: jLiZYD9wjsHe/2vduDkajSthYVgl5SYioZHBsg+k8YI=
Subject key identifier: ED:53:04:4B:DF:DB:D4:01:D9:BA:A2:4D:AC:52:1D:66:D1:F7:3D:BF
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A0C3C83A404C757AB1B395BB684BE20FC3
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/7VMES9_b1AHZuqJNrFIdZtH3Pb8.roa
Signing time: Mon 21 Sep 2026 11:44:34 +0000
ROA not before: Mon 21 Sep 2026 11:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209596
IP address blocks: 109.162.240.0/21 maxlen: 21
109.162.240.0/24 maxlen: 24
213.207.224.0/21 maxlen: 21
213.207.224.0/24 maxlen: 24
213.207.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:c8:3a:40:4c:75:7a:b1:b3:95:bb:68:4b:e2:0f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Sep 21 11:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed53044bdfdbd401d9baa24dac521d66d1f73dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:fb:a0:3e:49:86:da:72:43:77:59:07:7b:
3b:d9:60:94:a1:35:f4:92:28:8d:06:31:99:a7:7c:
4f:f5:4e:f6:8a:12:76:6a:9d:46:fd:2c:59:60:d0:
64:50:a4:5e:00:b4:28:be:26:cc:b6:bc:6c:32:e8:
70:26:c1:8e:ad:a8:df:e7:13:86:46:40:3d:47:ec:
bb:7a:d4:9c:53:3d:e7:79:c9:ef:62:b1:1c:8a:c3:
32:93:d6:db:ef:bf:e3:ff:61:de:31:03:d6:a6:47:
fb:b5:6b:a1:f5:ee:2f:e8:5e:e9:e7:ae:49:57:81:
8f:0a:fb:78:df:f8:09:c6:e2:1d:30:55:2a:c2:64:
b4:41:c4:cb:57:c9:86:a3:35:ff:17:9d:2c:37:0d:
aa:61:39:12:79:67:10:f1:53:fa:06:b0:bc:7a:26:
07:bc:07:83:3b:45:f6:24:04:93:bc:76:9b:fc:3c:
0b:37:04:69:25:0c:62:68:f6:c9:8c:02:bd:92:f3:
e7:04:49:b6:cf:97:f6:ac:36:7c:6b:35:5c:51:85:
e5:97:6d:1a:38:94:ca:5e:83:b8:a4:67:d5:09:de:
41:9e:18:7d:03:8a:20:86:33:c9:89:13:bd:ad:93:
aa:37:fe:c2:9f:cb:3b:ec:eb:5d:23:ba:05:e3:91:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:53:04:4B:DF:DB:D4:01:D9:BA:A2:4D:AC:52:1D:66:D1:F7:3D:BF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/7VMES9_b1AHZuqJNrFIdZtH3Pb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.240.0/21
213.207.224.0/20
Signature Algorithm: sha256WithRSAEncryption
18:71:c3:6e:20:cf:18:9e:04:61:8a:2f:fe:69:66:2f:42:63:
c3:cc:d1:b1:e3:7f:5c:20:db:4c:7e:12:53:63:7a:a8:5f:ab:
42:73:45:0a:d1:59:30:36:e9:77:23:8a:30:b9:b5:b0:f1:ed:
98:71:5e:7c:b9:54:1d:b2:e7:64:30:ee:03:c7:40:c6:56:7b:
e5:ef:17:f5:6b:b5:e9:65:19:ae:e4:11:75:ed:90:82:89:25:
0f:b2:29:95:31:ae:48:98:e2:c9:b4:bb:ab:f1:a3:68:d1:d0:
91:63:0c:66:74:a5:62:94:2f:80:02:8e:e1:cd:54:4a:3b:33:
af:7f:3c:6f:1e:b8:2e:fa:2f:24:18:14:25:78:d5:7a:cd:4d:
a1:06:e7:ad:67:73:3e:bc:e8:d9:62:6b:e4:2a:1f:04:20:af:
86:d1:23:36:8b:d7:df:bd:c1:f3:9f:45:d9:a1:48:ce:43:73:
ee:12:30:b9:b6:10:6d:89:f6:b2:97:5c:dc:03:64:96:6a:79:
40:1a:46:5a:b7:c8:38:aa:08:25:dc:81:c0:a6:9f:d4:bd:55:
5e:f7:7f:86:fb:b8:8f:14:9e:e4:03:ed:eb:cf:6e:c9:7f:9f:
f1:ae:5f:7f:85:a2:a5:11:45:a4:24:c6:6e:0b:41:c3:41:62:
d1:af:b7:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDDyDpATHV6sbOVu2hL4g/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjYwOTIxMTE0NDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDUzMDQ0YmRmZGJkNDAxZDliYWEyNGRhYzUyMWQ2NmQxZjczZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXr7oD5JhtpyQ3dZB3s72WCUoTX0
kiiNBjGZp3xP9U72ihJ2ap1G/SxZYNBkUKReALQovibMtrxsMuhwJsGOrajf5xOG
RkA9R+y7etScUz3necnvYrEcisMyk9bb77/j/2HeMQPWpkf7tWuh9e4v6F7p565J
V4GPCvt43/gJxuIdMFUqwmS0QcTLV8mGozX/F50sNw2qYTkSeWcQ8VP6BrC8eiYH
vAeDO0X2JASTvHab/DwLNwRpJQxiaPbJjAK9kvPnBEm2z5f2rDZ8azVcUYXll20a
OJTKXoO4pGfVCd5Bnhh9A4oghjPJiRO9rZOqN/7Cn8s77OtdI7oF45EsTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO1TBEvf29QB2bqiTaxSHWbR9z2/MB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvN1ZNRVM5X2IxQUhadXFKTnJGSWRadEgzUGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbaLwAwQE
1c/gMA0GCSqGSIb3DQEBCwUAA4IBAQAYccNuIM8YngRhii/+aWYvQmPDzNGx439c
INtMfhJTY3qoX6tCc0UK0VkwNul3I4owubWw8e2YcV58uVQdsudkMO4Dx0DGVnvl
7xf1a7XpZRmu5BF17ZCCiSUPsimVMa5ImOLJtLur8aNo0dCRYwxmdKVilC+AAo7h
zVRKOzOvfzxvHrgu+i8kGBQleNV6zU2hBuetZ3M+vOjZYmvkKh8EIK+G0SM2i9ff
vcHzn0XZoUjOQ3PuEjC5thBtifayl1zcA2SWanlAGkZat8g4qggl3IHApp/UvVVe
93+G+7iPFJ7kA+3rz27Jf5/xrl9/haKlEUWkJMZuC0HDQWLRr7cs
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:30:50 2026 by rpki-client