Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1-Who4Q2rbn_kVj6d4jBuo7EyZXU.roa
File: 1-Who4Q2rbn_kVj6d4jBuo7EyZXU.roa (raw, json)
Hash identifier: 3bpn972VO9RQE0TN3kp3eT7lQ5xZddl/U+JX8A0NWEo=
Subject key identifier: F9:68:68:E1:0D:AB:6E:7F:E4:56:3E:9D:E2:30:6E:A3:B1:32:65:75
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A07C76E0904C5089796507467358B6B18D
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1-Who4Q2rbn_kVj6d4jBuo7EyZXU.roa
Signing time: Mon 07 Sep 2026 15:22:40 +0000
ROA not before: Mon 07 Sep 2026 15:22:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 87.192.52.0/22 maxlen: 24
87.192.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:76:e0:90:4c:50:89:79:65:07:46:73:58:b6:b1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 7 15:22:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f96868e10dab6e7fe4563e9de2306ea3b1326575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:c7:20:b6:60:bc:41:25:72:1a:c1:eb:c2:
a6:93:3c:75:93:58:4b:99:d4:79:6f:83:74:f1:75:
7a:0d:b1:08:86:6e:81:f9:52:bd:8c:d9:47:49:f2:
f9:fd:c4:07:f2:cd:1b:04:c7:fe:9d:e1:a6:47:e0:
43:e3:d5:1c:f2:28:d3:65:45:ce:16:91:53:d9:b0:
a8:6d:89:bc:85:f7:83:b3:90:48:fc:20:8e:69:4c:
f2:84:5b:d9:1d:98:57:c7:d7:e7:6c:fb:e9:58:2f:
b9:5e:81:94:25:4d:db:ca:28:0b:2d:30:05:07:a4:
01:f8:c7:f9:92:49:43:41:92:3a:40:82:67:68:9f:
17:b0:fa:55:db:d5:ec:f4:dd:d1:59:b1:95:53:ba:
ce:6f:9e:c2:98:ab:85:b3:92:66:c3:83:ce:58:20:
5c:6d:45:d0:a8:1b:36:bc:e5:2d:69:24:44:fb:7b:
8c:81:fc:0f:37:2e:47:82:52:0e:69:5a:64:36:59:
bd:b2:3e:98:98:57:6c:38:52:36:48:40:71:a0:c4:
4d:76:0d:d8:83:e1:f4:ce:1e:2b:38:85:d6:9a:04:
34:a6:49:7d:f7:60:4b:f6:6d:28:fd:cf:21:54:23:
6a:7c:d0:c9:09:5e:05:73:13:a6:04:a2:6e:3e:90:
8e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:68:E1:0D:AB:6E:7F:E4:56:3E:9D:E2:30:6E:A3:B1:32:65:75
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/1-Who4Q2rbn_kVj6d4jBuo7EyZXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.52.0/22
87.192.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:67:64:d0:e5:8d:89:b3:19:89:19:c1:d8:cf:8b:cc:93:51:
94:a7:72:04:f7:d9:a6:77:0b:42:0a:73:cb:76:19:18:13:a3:
5a:95:ff:a4:18:c5:4a:f1:76:56:33:04:85:54:d5:6d:bf:55:
39:97:70:79:12:3d:27:c5:86:a5:17:f1:eb:36:14:9b:9b:c7:
eb:e8:f4:07:6a:b4:58:1e:19:b0:e0:97:c6:69:05:65:fb:18:
ff:e2:9f:4a:94:c5:59:8d:0e:b8:13:83:7d:19:2d:65:cd:65:
a1:e2:90:86:c8:a7:a8:07:f7:b1:60:50:cd:f4:a8:a3:1b:92:
c0:52:40:7b:a9:3d:59:1b:35:26:d3:80:e2:41:1c:a0:d4:b7:
2a:c6:62:c0:3e:4d:0c:2e:9e:ca:8f:07:3e:09:a3:fb:b2:49:
b9:49:07:37:7d:11:45:06:4b:73:54:48:d0:b3:6d:67:3e:6a:
f6:c3:09:16:2d:46:01:22:23:56:40:79:7f:16:e3:9b:bc:64:
1d:82:3e:9c:3b:e2:0d:d7:01:81:fc:35:25:ff:12:54:0d:ee:
85:fd:cf:68:1c:d3:c3:ca:6e:c6:f7:9c:fe:95:34:e5:3d:f1:
9e:95:cc:92:17:04:f3:33:44:cc:02:a3:91:64:77:0e:d3:3a:
58:e8:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:45 2026 by rpki-client