Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/7LP6-tZNO4kMwCuy2a7JWKqiVis.roa
File: 7LP6-tZNO4kMwCuy2a7JWKqiVis.roa (raw, json)
Hash identifier: ZvkpzsSCehm9n4InEtK3zFBlt2EwWn0SgZ3MtWI4ctg=
Subject key identifier: EC:B3:FA:FA:D6:4D:3B:89:0C:C0:2B:B2:D9:AE:C9:58:AA:A2:56:2B
Certificate issuer: /CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Certificate serial: 01A0AF2622EA7ACD493F9CFFFD3D02A99048
Authority key identifier: 60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/7LP6-tZNO4kMwCuy2a7JWKqiVis.roa
Signing time: Thu 17 Sep 2026 11:35:07 +0000
ROA not before: Thu 17 Sep 2026 11:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 213.177.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:26:22:ea:7a:cd:49:3f:9c:ff:fd:3d:02:a9:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f21c213fc069c82155fea17e9b7fb82fe6b7f2
Validity
Not Before: Sep 17 11:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecb3fafad64d3b890cc02bb2d9aec958aaa2562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:de:48:d0:12:d4:85:19:07:5f:e5:7b:96:
23:88:42:26:f9:f6:c4:8b:17:71:b2:18:cd:f4:75:
d4:a5:8e:be:14:43:50:ca:7e:40:e8:17:5e:0a:f1:
34:30:ae:f4:4e:ec:c6:56:44:28:9c:4a:d0:96:11:
55:8a:60:53:5a:91:d2:c0:af:99:5a:d9:c4:22:6f:
42:be:a6:9a:6c:85:e6:e7:86:1f:ef:20:22:f7:94:
5f:ca:8f:df:12:6e:02:ae:13:ab:27:54:46:a3:25:
2c:1f:1d:9f:ec:fe:9e:64:98:29:93:7b:b0:20:c6:
d0:11:4e:e7:8a:4b:a7:ae:79:21:66:73:62:f5:36:
bd:19:ab:04:49:a9:ab:7c:61:c1:ea:46:7a:b4:3c:
97:79:d3:61:c9:d4:af:f5:a5:75:b9:b4:7b:c4:78:
c7:cb:97:02:80:0d:bd:9d:88:3a:17:ed:03:0b:2a:
55:5e:8c:42:aa:79:ad:c7:59:2a:61:5c:b0:e2:15:
f3:3e:b0:da:2d:fc:f3:fd:8c:f8:b6:92:9f:97:d1:
05:6b:6e:9a:83:2c:91:f9:31:2f:0d:77:f0:d6:83:
d1:3f:be:ef:8f:e4:61:fa:ed:02:ed:ab:3e:be:60:
74:e4:b7:f7:a4:47:3a:09:d0:54:0d:bb:1a:28:f2:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:FA:FA:D6:4D:3B:89:0C:C0:2B:B2:D9:AE:C9:58:AA:A2:56:2B
X509v3 Authority Key Identifier:
keyid:60:F2:1C:21:3F:C0:69:C8:21:55:FE:A1:7E:9B:7F:B8:2F:E6:B7:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPIcIT_AacghVf6hfpt_uC_mt_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/7LP6-tZNO4kMwCuy2a7JWKqiVis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/518e65-27b4-4759-aa3a-5ad85592ffe9/1/YPIcIT_AacghVf6hfpt_uC_mt_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:f2:3a:be:5b:dd:50:28:8b:28:e0:7e:44:ec:7b:35:cc:
82:bf:51:17:98:77:ae:92:1f:6d:e4:64:cf:c5:ad:4a:56:48:
2d:ba:9d:10:a3:fb:63:4a:f4:a0:e8:7c:b6:8f:44:df:50:fd:
e1:7c:c2:39:95:8a:80:82:4b:71:e5:66:bf:b6:5d:4a:f3:b3:
f5:c8:f5:2b:4c:f0:14:95:4c:bc:d7:68:fa:0b:2b:5d:24:0f:
37:fd:3b:9a:e9:13:20:b9:5c:14:d4:b1:04:33:10:20:c4:b6:
f8:f2:57:d6:d4:c9:eb:c5:80:2e:b2:cb:0d:f2:25:5c:ef:d9:
ca:b3:66:b5:95:7c:f2:d6:7b:07:7d:c6:08:5b:bb:e7:5d:14:
cb:65:d2:34:02:17:0b:42:e9:cd:f6:2b:96:a0:79:bb:89:5d:
31:5e:e9:f2:da:31:d8:16:6b:a4:0e:15:6c:05:5f:2b:2e:23:
66:d6:3e:90:67:c9:e2:19:a1:7f:a2:fe:7b:02:dc:7a:dc:f6:
6b:36:f1:89:eb:3d:72:c2:56:9e:ab:51:13:56:4a:32:7b:64:
84:7d:76:b9:57:12:c4:bf:be:61:a5:1e:0d:64:51:15:e0:ae:
7f:4e:3d:8f:5e:ed:5d:f9:e7:1d:2f:cb:e4:77:1a:e9:d4:a8:
e7:e4:e6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:38:02 2026 by rpki-client