Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7P7AgB9gX_25sg9Da8av33_WgQ0.roa
File: 7P7AgB9gX_25sg9Da8av33_WgQ0.roa (raw, json)
Hash identifier: sQoS28nT9c/CK3I6mYSVbSzjm0zTO/9F71mgqrRHg/U=
Subject key identifier: EC:FE:C0:80:1F:60:5F:FD:B9:B2:0F:43:6B:C6:AF:DF:7F:D6:81:0D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA951C0E9D90F0DFFAED24AE36FF5AF1F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7P7AgB9gX_25sg9Da8av33_WgQ0.roa
Signing time: Tue 28 Jul 2026 15:22:15 +0000
ROA not before: Tue 28 Jul 2026 15:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.24.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.165.182.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.105.0/24 maxlen: 24
193.183.251.0/24 maxlen: 24
193.234.54.0/24 maxlen: 24
194.14.165.0/24 maxlen: 24
194.68.223.0/24 maxlen: 24
194.68.224.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.27.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
2a01:280:3e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:51:c0:e9:d9:0f:0d:ff:ae:d2:4a:e3:6f:f5:af:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 28 15:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecfec0801f605ffdb9b20f436bc6afdf7fd6810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:69:00:25:e9:1b:f2:f6:56:2c:f2:35:b0:
07:19:b3:f5:f0:c8:51:16:c4:bc:50:1e:64:8a:17:
5e:b7:2b:e7:ce:0b:f0:5d:bf:01:be:f1:f8:0f:cf:
d6:7a:36:1a:9b:c5:c7:e0:db:70:34:19:2f:35:52:
00:18:42:8a:44:0b:dc:28:a8:24:5a:82:aa:83:9c:
d1:97:1c:87:4d:c8:7a:f3:33:a6:fc:c3:c3:d7:39:
12:77:41:08:89:a2:ba:69:47:54:92:c0:3e:75:c4:
c8:d8:e5:3b:27:10:c9:c3:76:32:18:5e:19:d5:88:
17:05:42:be:20:37:5b:1f:ce:5d:48:ff:f9:6b:cf:
dc:f4:1e:80:97:df:73:e5:4b:d5:71:7f:01:c6:ea:
13:c0:49:22:ba:40:d2:88:37:08:0e:b7:16:ab:bf:
aa:e9:bf:84:8f:49:ff:a2:b9:91:a7:e9:27:23:6d:
5c:e2:2a:8c:f6:a6:ef:23:9d:cd:c9:ec:f5:8c:d5:
0d:42:d9:39:0e:01:9a:55:d2:c0:7e:0a:1d:47:51:
eb:d8:db:4a:a2:b3:4d:df:95:6e:43:45:c6:c5:93:
cc:a5:69:d9:58:4a:5b:23:cc:a4:1a:69:e3:b0:4d:
a4:fd:1f:32:83:91:10:04:0e:1d:73:23:03:52:78:
6b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:C0:80:1F:60:5F:FD:B9:B2:0F:43:6B:C6:AF:DF:7F:D6:81:0D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7P7AgB9gX_25sg9Da8av33_WgQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.24.0/24
192.121.101.0/24
192.165.182.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
193.183.92.0/24
193.183.104.0/23
193.183.251.0/24
193.234.54.0/24
194.14.165.0/24
194.68.223.0-194.68.224.255
194.71.215.0/24
194.103.93.0/24
194.132.27.0/24
194.132.162.0/24
IPv6:
2a01:280:3e0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:65:3a:ac:d4:be:a4:2c:fb:58:ec:0b:04:5c:79:95:3d:e2:
2f:fc:06:71:de:95:11:7f:0b:88:5b:7b:dd:df:c9:74:36:d0:
af:23:c4:11:14:27:a8:80:cb:97:d7:1e:e6:3e:56:f6:94:cc:
9a:e4:e9:b5:78:b6:18:b8:76:ce:5f:7a:13:08:67:ea:38:f6:
8e:15:3f:6b:9c:5e:7c:eb:db:de:ed:b4:5c:91:2b:3b:70:aa:
10:ed:65:4c:62:39:41:52:41:b9:a3:a5:7a:f3:f9:68:c5:d9:
51:7e:2d:15:63:a1:1f:50:b5:4b:15:96:8d:5a:0e:9c:b5:20:
23:d0:4e:82:cc:e2:d7:a7:ef:ac:f6:d3:a6:db:7c:fe:8b:72:
1b:c1:43:62:de:47:5d:92:4a:63:5a:f3:18:ec:cc:be:5f:51:
07:9c:e3:9e:68:9a:45:93:94:67:a7:02:2f:63:7c:87:3f:6c:
c9:8a:a3:47:b7:69:dd:b6:62:88:7e:ad:84:71:33:08:eb:27:
3d:77:f5:ef:47:25:76:e0:53:4b:40:f6:69:4d:87:62:ed:65:
4a:a0:73:02:04:42:9e:c6:7a:c6:7a:c1:c5:07:93:1c:f0:86:
ce:68:60:6a:be:01:73:69:8b:95:ab:e1:23:47:43:f8:03:10:
68:8d:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:19:16 2026 by rpki-client