Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa
File: 7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa (raw, json)
Hash identifier: NschteRDlBB+SzTLpxjpeCbdQUNPGM+TwCR+GlDPxOQ=
Subject key identifier: EE:A9:BE:2D:24:6C:A0:6D:A8:D4:0D:E1:DF:FC:56:C5:C1:E2:22:B7
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 019B7F855353249FB23FE7B1846A96A8AF29
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa
Signing time: Fri 02 Jan 2026 16:23:22 +0000
ROA not before: Fri 02 Jan 2026 16:23:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209770
IP address blocks: 213.232.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:85:53:53:24:9f:b2:3f:e7:b1:84:6a:96:a8:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jan 2 16:23:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eea9be2d246ca06da8d40de1dffc56c5c1e222b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:1c:87:4a:45:57:dc:a5:4d:ca:c3:86:25:
d4:9d:85:d5:75:8f:20:d8:e4:bd:88:34:a5:e0:8b:
bc:50:fb:95:fa:55:e8:97:a4:e0:17:80:65:ad:2d:
94:f6:be:e2:9b:ab:4c:6f:03:21:57:d0:0a:e1:c9:
68:73:39:44:a2:04:11:36:e0:7b:b8:ce:ad:e1:cd:
05:67:ef:3a:a0:d6:64:e8:72:6d:2b:c8:1c:2e:c5:
94:dc:5f:4e:ba:54:da:09:ce:bb:c5:da:c3:7b:bc:
0c:be:13:81:a0:4c:3b:5b:d5:5b:8a:eb:50:a7:0c:
a8:a5:32:d8:ae:60:48:30:5d:89:5d:f8:05:0b:1d:
85:b1:bb:6b:c2:fc:fd:27:89:8d:31:14:7d:ad:bd:
2e:00:78:4a:ff:ab:82:ed:48:15:ec:ab:24:c5:0c:
37:9a:63:2f:3f:72:90:0c:8c:3a:b7:de:90:09:37:
a1:87:9e:7f:f6:e4:24:25:c9:d9:e6:66:10:20:a4:
0b:24:02:30:6c:82:a8:b5:8b:5d:c1:9c:a6:b5:a8:
23:de:b0:ab:63:62:c4:24:bc:cc:99:33:57:99:7a:
a1:59:aa:50:76:23:9d:c9:77:bf:93:d7:d1:12:55:
e7:cf:28:b8:e3:8d:cd:1b:a7:32:4c:9b:7e:6c:35:
3e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:BE:2D:24:6C:A0:6D:A8:D4:0D:E1:DF:FC:56:C5:C1:E2:22:B7
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c8:84:30:53:c0:8e:dc:fd:2c:2a:47:eb:52:52:a7:ae:d0:
1e:c1:f5:0b:77:a9:b1:8b:01:94:59:57:68:e0:f9:95:1f:76:
9b:dd:b8:ab:85:b7:00:12:36:63:fb:0c:65:67:8e:4c:21:5a:
f6:5f:f4:95:7c:36:c1:d5:47:c3:40:16:16:33:01:7e:04:3e:
20:93:20:20:36:02:cf:04:44:72:b1:7c:f8:45:68:3e:f4:f0:
f5:b4:25:48:91:6c:21:92:d0:53:90:bb:46:c9:50:f1:d5:0c:
1a:47:e1:66:d2:8b:4c:a9:19:cc:8c:8c:c8:3e:05:20:27:05:
65:67:0f:6c:b3:a2:c2:d0:af:ad:be:12:2e:ba:26:bc:e4:7a:
47:0f:0e:a4:2a:24:a1:7d:aa:5a:f0:05:f0:53:bd:35:c1:d4:
c0:16:52:f6:c1:58:44:40:36:a7:f5:1e:b0:1e:f0:d1:93:9c:
71:7c:9e:ec:b3:cd:e7:80:28:48:b1:d6:f1:54:b3:bc:8b:36:
03:5f:31:41:98:7e:40:1b:9c:86:84:b0:9a:91:9c:86:18:a4:
bc:10:57:37:21:10:7f:39:10:de:01:37:22:47:2a:0e:72:10:
3a:68:9e:96:94:a3:d8:46:99:c9:96:d9:41:46:63:7f:2c:90:
b6:47:d5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:09:07 2026 by rpki-client