Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa
File: c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa (raw, json)
Hash identifier: t4bLovDufBExbhkrhfSHs58+VNj/VxtITodpGthPLYM=
Subject key identifier: 73:B6:31:F0:E5:E0:64:3B:7C:9B:4C:60:05:14:51:04:76:A4:EE:D7
Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Certificate serial: 019B775917D49D9D6BAC59AE0EE09F697314
Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa
Signing time: Thu 01 Jan 2026 02:18:06 +0000
ROA not before: Thu 01 Jan 2026 02:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206138
IP address blocks: 91.206.60.0/23 maxlen: 24
195.34.64.0/23 maxlen: 24
2001:67c:518::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:17:d4:9d:9d:6b:ac:59:ae:0e:e0:9f:69:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46
Validity
Not Before: Jan 1 02:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73b631f0e5e0643b7c9b4c600514510476a4eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:61:70:e1:ba:d6:5b:bc:22:2e:a0:f3:99:
39:5f:83:22:68:0e:3d:05:d2:16:9e:ba:a5:b2:c3:
0a:2a:de:52:6f:aa:c3:61:74:f1:43:d1:26:d7:29:
d2:18:71:47:0e:8f:52:a9:f9:a1:4a:ad:da:dc:f4:
5f:12:bd:9e:ea:36:97:7a:92:be:e1:11:5a:09:e0:
29:4e:51:c7:75:01:d4:8c:f9:2a:65:40:32:ab:c2:
e3:96:f6:14:f3:62:dd:09:13:8b:96:c7:e3:85:81:
a7:e9:aa:a3:c0:9c:24:75:40:00:d8:1a:88:fb:3f:
3c:9d:e5:fa:68:a1:20:27:5f:bf:81:77:47:08:1e:
6d:5a:46:b0:d5:2a:e2:c0:31:43:a1:20:41:f6:b5:
5a:f4:1c:b8:93:82:33:78:af:87:d4:c6:84:f9:fe:
1c:c6:e6:0f:3d:9f:0c:a1:6d:33:2a:9e:06:8c:fd:
71:35:bc:7a:6e:2f:62:6a:a7:f9:a3:2d:ea:d7:74:
d4:60:b3:52:4b:6f:1d:8d:00:60:6f:e7:73:8d:44:
22:33:95:c5:40:7b:b2:6e:7a:10:d4:d6:ed:f6:c0:
a2:8c:40:5e:27:3c:29:47:94:d1:a0:49:62:69:be:
fc:a1:a7:83:74:6a:08:f2:0a:18:4e:0b:bd:49:90:
cf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B6:31:F0:E5:E0:64:3B:7C:9B:4C:60:05:14:51:04:76:A4:EE:D7
X509v3 Authority Key Identifier:
keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/c7Yx8OXgZDt8m0xgBRRRBHak7tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.60.0/23
195.34.64.0/23
IPv6:
2001:67c:518::/48
Signature Algorithm: sha256WithRSAEncryption
75:7a:90:58:fd:0b:6c:21:12:0c:a9:f5:d4:18:93:0f:7b:34:
e9:e5:c2:70:1c:8f:ac:0d:13:ab:5b:46:b8:21:26:6f:9c:59:
aa:8c:4e:0f:15:9a:b1:e1:d1:16:31:e7:7f:59:22:61:76:78:
ff:66:5d:8a:2f:c3:8e:6a:ef:62:d9:09:1a:bc:be:91:5b:57:
98:2b:5d:9d:0e:c8:82:d8:60:4c:16:74:10:5b:a8:6d:86:f4:
bb:a7:ec:dd:88:1a:29:a4:d9:fe:33:c8:3d:94:b1:80:51:4c:
40:5d:e0:c0:a7:b7:6e:5b:c3:eb:75:76:ed:e2:db:96:76:f2:
80:f0:78:e8:0e:fd:38:d7:a1:81:b6:93:f9:ba:72:8c:2f:73:
4b:10:73:fd:1b:a7:39:28:ff:4d:73:67:e4:80:f3:60:e5:6d:
0b:8f:a7:7f:07:ac:cf:f3:c3:c7:ad:68:26:07:13:69:e0:a2:
9a:f4:1b:76:6f:48:95:8e:5f:0d:78:b6:e7:c9:2d:35:eb:d1:
e9:f2:5a:32:de:6f:84:a3:61:39:2b:ca:3a:24:7b:0f:e3:33:
82:df:a2:71:a6:4c:1b:0c:95:4b:6a:60:52:47:40:6b:e5:7f:
20:21:e0:49:8e:55:98:4a:95:cd:c2:93:76:5b:91:cd:0f:bd:
0e:9b:cc:58
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZt3WRfUnZ1rrFmuDuCfaXMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0
NzNlNDYwHhcNMjYwMTAxMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2I2MzFmMGU1ZTA2NDNiN2M5YjRjNjAwNTE0NTEwNDc2YTRlZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PVhcOG61lu8Ii6g85k5X4MiaA49
BdIWnrqlssMKKt5Sb6rDYXTxQ9Em1ynSGHFHDo9SqfmhSq3a3PRfEr2e6jaXepK+
4RFaCeApTlHHdQHUjPkqZUAyq8LjlvYU82LdCROLlsfjhYGn6aqjwJwkdUAA2BqI
+z88neX6aKEgJ1+/gXdHCB5tWkaw1SriwDFDoSBB9rVa9By4k4IzeK+H1MaE+f4c
xuYPPZ8MoW0zKp4GjP1xNbx6bi9iaqf5oy3q13TUYLNSS28djQBgb+dzjUQiM5XF
QHuybnoQ1Nbt9sCijEBeJzwpR5TRoEliab78oaeDdGoI8goYTgu9SZDPrwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFHO2MfDl4GQ7fJtMYAUUUQR2pO7XMB8GA1UdIwQY
MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et
OWE3ZTE0NjQ4NjJhLzEvYzdZeDhPWGdaRHQ4bTB4Z0JSUlJCSGFrN3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh
LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBW848AwQB
wyJAMA8EAgACMAkDBwAgAQZ8BRgwDQYJKoZIhvcNAQELBQADggEBAHV6kFj9C2wh
Egyp9dQYkw97NOnlwnAcj6wNE6tbRrghJm+cWaqMTg8VmrHh0RYx539ZImF2eP9m
XYovw45q72LZCRq8vpFbV5grXZ0OyILYYEwWdBBbqG2G9Lun7N2IGimk2f4zyD2U
sYBRTEBd4MCnt25bw+t1du3i25Z28oDweOgO/TjXoYG2k/m6cowvc0sQc/0bpzko
/01zZ+SA82DlbQuPp38HrM/zw8etaCYHE2ngopr0G3ZvSJWOXw14tufJLTXr0eny
WjLeb4SjYTkryjokew/jM4LfonGmTBsMlUtqYFJHQGvlfyAh4EmOVZhKlc3Ck3Zb
kc0PvQ6bzFg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:56 2026 by rpki-client