Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Oik8CTTc4HWwQv2vrI_L7vHKgsE.roa
File: Oik8CTTc4HWwQv2vrI_L7vHKgsE.roa (raw, json)
Hash identifier: CQaCigGRiH0X/KhGfIg9OlU+D0p8vWdwDckxrW5TexE=
Subject key identifier: 3A:29:3C:09:34:DC:E0:75:B0:42:FD:AF:AC:8F:CB:EE:F1:CA:82:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08D0016F26B741B7F99FC3C9673F0AA4F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Oik8CTTc4HWwQv2vrI_L7vHKgsE.roa
Signing time: Thu 10 Sep 2026 20:26:28 +0000
ROA not before: Thu 10 Sep 2026 20:26:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 852
IP address blocks: 87.84.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:00:16:f2:6b:74:1b:7f:99:fc:3c:96:73:f0:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 10 20:26:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a293c0934dce075b042fdafac8fcbeef1ca82c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:d0:89:92:d4:b8:e2:bb:a3:13:a3:ef:32:
82:f1:36:44:88:5a:0e:08:64:3f:a2:5e:0d:7e:a2:
32:af:b4:af:82:94:80:4d:f9:5e:fd:61:e5:bd:e9:
87:8d:a8:00:5b:bc:67:be:1c:4d:ad:c8:cb:03:e7:
9c:83:43:7d:da:eb:4d:cc:be:9d:30:b5:8a:91:28:
dd:3d:26:c4:90:93:25:42:94:54:bc:66:ce:1d:51:
b9:9f:e3:4a:46:1d:6a:ed:c8:4b:ae:b1:d1:4e:d3:
94:8a:13:6c:ae:f3:d3:8f:3b:76:f1:f4:9e:fb:1e:
fe:c6:b4:3a:7f:9c:a8:0a:49:92:3d:6b:6a:e1:c5:
5b:54:de:9d:8a:6d:8c:4c:69:ed:22:4f:ed:9e:7b:
5e:f7:8e:6b:4f:6f:86:9b:d9:63:b1:00:cf:c9:0d:
f6:12:31:d5:f0:13:a5:ec:7f:c1:35:b1:20:1f:5b:
56:1e:f3:32:a5:cd:81:98:7b:e6:d7:6d:db:b3:74:
7d:51:07:68:e8:88:fe:f3:36:9b:9f:cb:95:ca:88:
fb:54:6f:15:2f:3c:4a:af:55:f7:14:d2:8c:2a:31:
99:ad:7d:bc:a0:60:0d:20:51:79:69:a8:81:33:d0:
59:41:f2:7d:58:13:67:0b:c3:eb:0e:12:7f:d6:c9:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:3C:09:34:DC:E0:75:B0:42:FD:AF:AC:8F:CB:EE:F1:CA:82:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Oik8CTTc4HWwQv2vrI_L7vHKgsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.140.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:87:2c:a0:94:2e:c9:84:1d:3b:16:81:34:1f:b5:ab:44:9b:
e0:01:83:4d:1c:46:01:c7:44:bf:15:d5:3b:7c:4c:74:98:bf:
56:ae:2b:cb:89:cb:4b:3a:57:6a:d7:70:00:ec:ba:77:c5:36:
9b:99:33:86:e5:bf:91:d2:90:d7:ff:14:81:1a:a0:b7:c8:70:
22:85:68:5c:d0:5b:e1:7e:c8:00:6b:b5:8c:58:31:67:0f:e2:
fb:ce:e9:9e:10:df:cd:f9:6a:23:c7:b7:f5:6e:66:9a:09:51:
a1:08:4f:fc:f5:96:db:70:19:53:b0:b9:9a:e5:ca:d0:60:30:
2b:c9:ec:14:59:65:fd:e6:61:c7:c8:c0:41:67:51:50:68:4e:
a8:15:39:ca:ea:dc:3a:a4:dc:78:0c:a6:42:2e:b1:98:c5:d9:
5a:56:92:51:00:5b:b8:70:8f:86:89:6b:a0:02:5a:8f:af:53:
71:e0:4d:a1:5f:96:4f:a7:9f:f9:26:27:93:30:b0:ca:92:f0:
d8:ac:1b:56:42:df:e2:ad:12:63:b7:01:1b:a3:04:a6:89:c9:
4b:85:05:0f:9d:9a:77:61:e5:ca:66:0c:5b:9b:c8:ab:1e:4f:
7b:5f:cd:8e:b0:7a:a8:80:07:be:b8:33:0f:55:25:fd:46:81:
53:c5:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:04 2026 by rpki-client