Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7-fcecCADE3U-sFzG8ILpOZcTNA.roa
File: 7-fcecCADE3U-sFzG8ILpOZcTNA.roa (raw, json)
Hash identifier: He4j1Bc4iblTKh3pfPYeLA7Sa/2BR/CrS+vFG8xsRmQ=
Subject key identifier: EF:E7:DC:79:C0:80:0C:4D:D4:FA:C1:73:1B:C2:0B:A4:E6:5C:4C:D0
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D6270B174C6F93ABE40083DFD199DE705
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7-fcecCADE3U-sFzG8ILpOZcTNA.roa
Signing time: Mon 06 Apr 2026 10:57:25 +0000
ROA not before: Mon 06 Apr 2026 10:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209264
IP address blocks: 89.126.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:62:70:b1:74:c6:f9:3a:be:40:08:3d:fd:19:9d:e7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Apr 6 10:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efe7dc79c0800c4dd4fac1731bc20ba4e65c4cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:31:e9:1b:11:cf:d1:1b:06:5f:ae:39:ef:
6f:6f:6f:fd:b3:78:84:2c:10:3a:75:c8:fc:36:58:
2f:fb:50:e6:40:b7:b3:04:69:f3:ce:6d:ac:14:0b:
69:7f:c9:cc:00:08:c3:38:78:a6:28:11:73:33:00:
b2:3b:83:51:58:cf:69:a4:6f:e8:7c:db:bf:3d:63:
df:13:28:40:34:82:4e:27:91:72:9f:a0:4b:32:65:
16:3e:ba:1b:cd:a8:35:29:41:39:e2:1b:a8:50:80:
37:26:61:fc:b8:82:ce:1e:1f:68:21:e0:cb:7d:31:
99:bb:5b:d7:36:17:28:91:d9:29:1a:db:84:af:54:
3c:7c:16:fe:19:6e:52:87:dc:53:5f:e9:c1:35:4f:
45:7c:09:5b:82:b1:04:84:6a:f4:62:09:ba:8f:ec:
13:c9:4c:b1:90:64:84:4c:91:16:a5:c8:09:d5:71:
87:2d:d0:b1:17:2e:0b:12:5a:ae:e7:15:0e:23:20:
e9:f5:5b:38:0d:10:86:a6:eb:d0:27:8e:d3:2f:19:
aa:c3:38:64:8f:74:9b:92:76:dd:8c:83:32:2e:fe:
f6:e8:df:8c:09:12:cd:9a:eb:4a:ab:5c:d8:e1:b8:
ff:3e:42:9c:8b:16:e3:4f:e4:03:b2:ae:d2:a5:1e:
c1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:DC:79:C0:80:0C:4D:D4:FA:C1:73:1B:C2:0B:A4:E6:5C:4C:D0
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/7-fcecCADE3U-sFzG8ILpOZcTNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.224.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5a:6d:90:40:6f:59:19:af:7d:75:44:4e:b8:18:61:70:aa:
9e:3b:1d:8a:f5:40:c9:b0:f6:3c:e2:c3:67:50:7f:99:f2:8e:
6d:7b:0b:9b:9d:44:ac:61:5a:fa:ea:7d:f3:9b:24:94:79:27:
a0:a5:68:bc:df:cd:95:c0:20:90:61:c5:92:07:43:13:47:d3:
f7:2f:2b:4e:14:89:eb:1a:3f:94:21:5a:5c:e6:31:05:9d:15:
e8:3e:6e:ad:fa:1c:67:21:48:e5:37:02:be:2b:58:5a:8e:6c:
ef:c9:b2:8c:6f:d6:29:01:64:48:54:cf:69:09:1f:98:ae:1a:
03:58:92:c8:6c:2b:e6:79:e1:70:51:a1:cf:f3:4d:af:f0:b3:
5f:5d:13:07:b5:91:99:ef:db:65:2a:1e:55:55:46:99:21:4b:
14:a8:cd:2e:50:ac:8d:51:49:cf:6b:fd:f9:29:71:f0:04:77:
cf:bf:99:c7:96:07:9a:ad:c6:02:6d:02:e9:f9:a4:3c:23:82:
9d:b9:1c:f7:31:4d:ae:1e:8d:5a:94:db:d7:45:de:63:0f:d4:
7a:8f:79:f5:ad:18:e8:3b:6f:66:c6:81:69:9b:4d:a4:13:73:
e7:1d:45:4d:fc:6d:43:63:c8:3c:7a:a9:f7:16:f0:87:25:1f:
eb:64:3e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:39 2026 by rpki-client