Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW-czhMVzXjhk1lNvio3cvhPmMA.roa
File: OW-czhMVzXjhk1lNvio3cvhPmMA.roa (raw, json)
Hash identifier: TjE4foYOV5Zuj31KV6lLKPDv7LtNGCjyXQ9q5FuB8VM=
Subject key identifier: 39:6F:9C:CE:13:15:CD:78:E1:93:59:4D:BE:2A:37:72:F8:4F:98:C0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B7ABDA9CAC276745AF59EA08B547BF59
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW-czhMVzXjhk1lNvio3cvhPmMA.roa
Signing time: Sat 19 Sep 2026 03:18:08 +0000
ROA not before: Sat 19 Sep 2026 03:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 87.82.199.0/24 maxlen: 24
212.134.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:ab:da:9c:ac:27:67:45:af:59:ea:08:b5:47:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 19 03:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=396f9cce1315cd78e193594dbe2a3772f84f98c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:99:88:a2:49:08:ee:2c:14:e1:bd:e7:bd:
a7:d9:0d:9e:4d:65:72:32:fe:9d:71:2e:91:b7:f7:
c0:64:55:7c:bd:63:5c:5e:e1:34:a6:7b:7e:46:1c:
98:3f:ac:a5:bc:fd:8a:bc:7c:e2:bf:83:16:ae:f1:
4a:65:24:0a:55:35:ef:a0:e8:86:d8:ad:0a:0d:c2:
b6:c1:76:08:17:9e:6f:b6:11:f4:51:e0:2d:c9:90:
d1:9b:11:ce:69:1a:63:d5:be:20:20:a6:28:3d:80:
9e:15:79:54:26:88:d7:40:f8:6b:a8:31:0a:d1:2f:
6e:5b:e1:3f:4f:f9:66:f4:8b:98:7a:e4:4f:86:8b:
90:03:23:29:64:1a:66:45:20:b6:10:6f:a6:ad:9c:
bf:c0:bf:cf:40:16:fa:3a:c9:f0:bf:79:b4:b4:88:
73:4f:40:a1:0e:fa:c8:48:e8:78:33:ba:63:2c:b2:
77:c0:93:75:79:16:28:e0:3a:aa:f7:44:b1:5a:d7:
a7:96:4f:02:c2:12:04:35:f4:ca:80:00:ce:22:c8:
65:cc:f1:90:4c:c0:4c:24:59:ad:97:b0:23:e0:17:
34:70:2f:4e:d6:a2:c9:a9:bd:98:b7:5c:1b:c3:91:
98:8f:33:22:dc:01:5a:82:6b:10:40:42:a6:d8:bd:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:9C:CE:13:15:CD:78:E1:93:59:4D:BE:2A:37:72:F8:4F:98:C0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OW-czhMVzXjhk1lNvio3cvhPmMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.199.0/24
212.134.201.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:48:7d:8d:63:d5:ed:c3:eb:d9:4f:02:d7:12:82:f8:5c:e7:
57:8c:9e:5f:a6:4c:df:58:c5:33:f7:76:af:85:90:11:03:7c:
e1:cf:92:39:be:45:94:8b:f3:dc:76:28:5d:ad:3d:5b:30:b8:
68:51:8f:5f:b8:f7:38:07:39:8d:ca:2b:bb:3c:c1:b6:a4:0f:
69:8c:89:38:04:ac:1a:86:3d:d2:78:e5:de:f4:dc:2b:08:8d:
d4:58:28:dc:14:b7:32:50:22:bc:08:d9:af:12:c1:20:6d:32:
51:6f:fe:3b:8b:2e:a8:76:00:f3:70:17:02:67:51:51:d8:23:
f5:e5:ce:43:d5:25:74:47:1a:7e:17:12:5b:71:f0:fc:9a:9e:
9d:c6:53:cf:8b:56:b6:a9:cd:4e:b3:18:36:33:bd:f6:62:71:
33:cc:54:c5:cc:56:18:69:ac:8f:ba:6d:d8:98:3c:61:9c:c3:
27:3c:4d:32:0e:e0:51:8b:49:f4:dc:a6:81:b5:23:84:87:c9:
5e:d7:08:51:9e:3a:b4:2f:3b:da:13:03:0d:e8:d9:59:7d:f3:
5d:db:71:a5:04:26:ba:de:6f:71:11:77:cb:7f:10:7e:1e:e2:
42:5f:c3:28:39:8b:c8:40:fe:e3:a0:eb:fe:5b:05:8c:bc:8a:
14:f6:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:35 2026 by rpki-client