Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7zL6w5p-uqp0I8sUsdfsC79_OdI.roa
File: 7zL6w5p-uqp0I8sUsdfsC79_OdI.roa (raw, json)
Hash identifier: mFUAfbly5OCR5+htg+yZuBw7iEJOExt/XAgb9wjebh8=
Subject key identifier: EF:32:FA:C3:9A:7E:BA:AA:74:23:CB:14:B1:D7:EC:0B:BF:7F:39:D2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A17DB4EBB533D3330D3AC28A89B095738B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7zL6w5p-uqp0I8sUsdfsC79_OdI.roa
Signing time: Tue 27 Oct 2026 14:12:51 +0000
ROA not before: Tue 27 Oct 2026 14:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 87.82.192.0/24 maxlen: 24
87.83.60.0/24 maxlen: 24
87.83.195.0/24 maxlen: 24
87.84.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:b4:eb:b5:33:d3:33:0d:3a:c2:8a:89:b0:95:73:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 27 14:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef32fac39a7ebaaa7423cb14b1d7ec0bbf7f39d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:40:10:14:d9:7c:41:98:cf:4f:29:92:45:
ea:d5:e0:92:a1:d1:71:3a:42:40:f3:3b:1e:71:0f:
dd:cb:af:bc:1b:f7:da:38:b7:e9:31:9e:65:dd:db:
08:fa:56:02:a4:ef:95:32:b9:df:bb:6e:58:1e:38:
7c:4a:37:d3:ee:1a:85:34:cc:bc:0c:b2:17:ae:1c:
c1:d6:59:4d:d8:96:ef:d3:30:f3:70:31:b7:15:5b:
72:f6:e1:58:d2:cb:46:08:c2:f3:04:da:e3:22:5c:
00:ee:17:25:5e:4f:eb:5c:c3:67:3e:f3:95:d8:a0:
26:17:77:ac:a7:3d:62:9b:3c:f4:13:71:4a:2b:2b:
75:a2:7e:71:49:87:5f:77:6e:d9:a2:fe:28:86:a2:
82:62:28:25:30:ba:7d:31:19:1f:77:73:89:d2:c7:
2d:f5:12:c8:03:41:6d:90:b5:bd:b1:c7:7d:85:e9:
50:76:f1:f3:2e:1a:fa:1e:fb:a7:5a:cf:27:28:d5:
64:5c:45:1b:1e:3c:8d:d2:47:0d:8d:0c:7f:db:b9:
59:47:18:d2:7e:0d:cf:3a:51:b3:ec:15:8d:8e:d8:
71:72:42:f1:58:12:1b:05:2f:a6:dd:a0:e0:ff:6c:
88:ba:b5:bf:0c:44:9c:fa:84:56:87:9e:1e:bc:53:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:32:FA:C3:9A:7E:BA:AA:74:23:CB:14:B1:D7:EC:0B:BF:7F:39:D2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7zL6w5p-uqp0I8sUsdfsC79_OdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.192.0/24
87.83.60.0/24
87.83.195.0/24
87.84.18.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6e:07:9e:20:f9:44:79:70:02:c1:8a:cd:b9:89:39:3f:11:
5a:af:91:e4:9d:21:0b:6b:82:f6:90:34:25:bb:91:90:33:e7:
00:39:5d:1c:1a:02:62:22:8c:3c:7f:2a:52:84:1f:5a:f6:d3:
71:e1:09:d4:ef:49:1b:8e:75:a2:ca:60:8a:9b:6e:5f:bb:91:
86:8e:10:4e:f4:f6:58:b4:e7:48:98:37:78:5e:85:49:6a:b5:
b1:96:bb:b1:b1:21:74:68:93:ac:89:5c:8a:96:ec:0e:ca:36:
a2:2a:0b:a5:98:d3:71:40:1c:21:c0:e0:c0:2c:11:38:38:9c:
c9:8e:df:99:f9:9f:0d:af:3e:af:51:59:f5:53:d6:0a:28:28:
0a:e5:6f:44:ad:c2:b1:5a:1c:3c:91:6e:58:f5:23:af:41:f2:
ea:a0:b5:bf:0e:b2:bf:33:c2:4b:8b:6b:57:6a:f0:b7:52:79:
aa:e7:60:92:32:31:e3:10:28:8a:43:59:9d:35:22:59:e0:7e:
88:4a:8c:f0:49:d8:e8:16:18:24:35:f3:30:c0:32:77:cd:cb:
ef:74:c4:a2:af:75:b0:27:0a:c3:e7:24:68:44:c8:9a:4e:05:
53:29:67:6f:42:0d:9b:95:4f:a8:9d:fd:69:eb:37:a3:78:d9:
19:59:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:38 2026 by rpki-client