Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aCEVJOHG82MMMZAYAv_NGqPj2wU.roa
File: aCEVJOHG82MMMZAYAv_NGqPj2wU.roa (raw, json)
Hash identifier: EqVUFJ1yn7Rpj/tx77bYCDh1IPzUg3XLmGqZD8utQiM=
Subject key identifier: 68:21:15:24:E1:C6:F3:63:0C:31:90:18:02:FF:CD:1A:A3:E3:DB:05
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A090D847D29EC63B0D85949DAB566A032B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aCEVJOHG82MMMZAYAv_NGqPj2wU.roa
Signing time: Fri 11 Sep 2026 14:21:28 +0000
ROA not before: Fri 11 Sep 2026 14:21:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 87.86.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:d8:47:d2:9e:c6:3b:0d:85:94:9d:ab:56:6a:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 11 14:21:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68211524e1c6f3630c31901802ffcd1aa3e3db05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:54:1f:14:b2:2b:20:9b:ec:73:a1:f2:5e:
00:d4:dd:da:6c:8c:5e:9a:82:8e:cc:50:82:04:0d:
b1:38:3f:54:0a:e8:2a:eb:fb:14:70:7a:c0:09:90:
88:a5:ad:00:7e:76:bb:6f:8d:84:f9:55:5e:e4:ea:
44:0e:c4:a2:ba:9c:de:c9:77:04:53:7d:61:d0:e3:
2d:86:1f:85:c5:b2:92:68:b6:a7:94:12:19:b9:bf:
5d:cf:d3:17:ac:31:0f:35:12:48:57:6e:e6:f3:9e:
e5:33:04:37:16:2d:fa:60:e4:3a:38:cc:b7:42:65:
15:bf:cf:66:18:48:6b:a0:a5:e3:fd:ea:36:63:1d:
24:bc:1a:40:b5:45:eb:51:0c:9a:ac:fe:56:05:39:
fc:1a:d2:c9:25:79:85:2c:e3:46:89:a3:e7:fa:b4:
62:f7:4b:14:37:a9:7e:d3:71:5a:f7:5b:27:49:25:
cf:1b:12:ca:84:ae:15:46:ad:76:8f:42:56:68:7d:
64:d2:86:a3:00:d7:ea:fa:fd:0b:2c:9c:46:4f:34:
48:b1:c4:ca:33:67:aa:c4:0d:d9:27:62:9a:08:dd:
dd:93:c2:52:e3:93:98:7f:21:99:19:db:48:8f:ea:
69:4c:d8:7f:38:68:ec:3c:ac:91:15:8e:1b:4b:66:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:15:24:E1:C6:F3:63:0C:31:90:18:02:FF:CD:1A:A3:E3:DB:05
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aCEVJOHG82MMMZAYAv_NGqPj2wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d5:4a:27:55:a4:07:b6:7b:16:8e:c9:1d:d5:6f:15:93:81:
b6:82:f9:b7:a2:b2:a9:55:42:be:25:51:a9:73:e8:b7:73:8a:
ac:bb:1e:14:e1:6d:f1:02:70:79:e8:82:6c:07:c9:8e:9a:22:
e6:83:00:91:09:15:01:7e:13:20:8c:ca:05:d4:17:14:9c:a5:
7c:1c:0b:c4:49:6e:8d:24:f8:6d:ab:b0:0c:cd:b0:13:6f:d4:
c2:cb:c1:6c:f4:e8:3c:13:0a:66:31:33:43:fa:ec:89:95:31:
b9:05:9c:8d:77:b7:2e:ad:37:d4:8a:81:07:8b:f5:67:4f:49:
b4:03:f9:d5:bf:6c:ca:43:28:a7:1b:1c:70:43:54:0b:9c:0f:
d2:dd:45:30:5a:b0:e3:69:14:ae:ea:1f:45:91:c9:ef:ba:c1:
4b:02:bd:25:d4:30:04:10:14:40:e8:00:72:2d:04:c8:97:a9:
16:3f:eb:85:2c:ff:0d:44:2c:1b:22:f3:3b:b6:cc:57:38:72:
f0:6a:82:87:eb:8d:f3:ae:1b:25:98:78:3c:f6:67:f8:2c:24:
cd:9f:b0:9a:a2:b7:6e:fb:16:9d:0d:9a:16:7b:40:12:b1:e6:
4a:8b:2a:50:80:b2:69:8f:2d:2d:d5:1f:45:6b:0d:ba:6c:da:
e1:40:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:17 2026 by rpki-client