Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ewIN9WuG5pG-WcG_2Pani0xP29s.roa
File: ewIN9WuG5pG-WcG_2Pani0xP29s.roa (raw, json)
Hash identifier: 2nnHFWtNez/e/HcMZNb4VcxXkSoV8kHtEgX4tvhKAiQ=
Subject key identifier: 7B:02:0D:F5:6B:86:E6:91:BE:59:C1:BF:D8:F6:A7:8B:4C:4F:DB:DB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BC302982B762DB9DE0CACC468AD0DE6B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ewIN9WuG5pG-WcG_2Pani0xP29s.roa
Signing time: Sun 20 Sep 2026 00:21:07 +0000
ROA not before: Sun 20 Sep 2026 00:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32167
IP address blocks: 87.83.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:30:29:82:b7:62:db:9d:e0:ca:cc:46:8a:d0:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 00:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b020df56b86e691be59c1bfd8f6a78b4c4fdbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:e2:8a:d0:7d:22:8a:03:f5:83:77:1b:9a:
02:5b:d6:d5:2f:ac:e7:90:89:c1:ed:28:df:7b:f5:
fe:c3:f3:d2:f1:16:a3:aa:23:17:c1:77:21:33:d5:
90:e4:72:d2:ec:a6:09:bf:31:24:94:a6:05:8c:e1:
ab:86:80:89:5a:67:1b:e0:3f:35:65:54:be:71:24:
91:55:2e:30:01:1e:56:82:b5:bf:d3:75:38:97:44:
ff:d9:42:68:c8:a5:a9:52:6b:7e:99:10:e0:05:a5:
06:ac:5a:94:71:1c:cb:82:e7:eb:7e:eb:da:9d:29:
13:44:57:e1:9e:df:84:2b:3a:c5:18:8b:3d:33:99:
40:ad:70:36:01:92:00:07:86:75:a3:7f:0d:94:7e:
b3:4c:e9:ae:e5:9a:ab:45:84:f1:a9:93:a1:63:04:
98:fe:d6:04:91:dc:20:1e:4c:a4:7b:11:c0:32:d7:
bd:97:49:e6:cb:34:74:b4:5a:d8:5f:f0:0a:69:85:
3a:82:a8:5a:50:5c:f6:a1:da:e9:00:b8:f1:e0:4d:
c9:fb:f1:6c:ca:63:94:42:aa:71:7a:14:78:90:3b:
16:77:1e:16:e8:45:4b:e3:f4:bd:b6:a6:5a:69:41:
c5:18:64:30:1b:80:4b:2e:fb:a7:ae:5c:c1:5e:c7:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:0D:F5:6B:86:E6:91:BE:59:C1:BF:D8:F6:A7:8B:4C:4F:DB:DB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ewIN9WuG5pG-WcG_2Pani0xP29s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ec:4f:4e:09:a9:97:9c:a0:2f:9d:b3:f6:e9:8a:19:f1:68:
f5:f6:fa:c8:fd:dc:e8:a2:1b:33:ce:b9:5b:c4:6b:f3:05:49:
1d:2e:7a:77:c6:bb:1b:72:d6:ef:38:7a:41:89:62:56:c7:35:
e5:f0:b3:e6:9e:32:7a:ea:fd:24:5a:91:e3:01:cd:41:23:d3:
70:68:0e:4a:3d:93:00:a5:20:60:71:c3:b8:a5:a4:13:e2:89:
7d:47:e8:39:d8:68:62:ed:da:8e:c7:13:58:3e:66:bf:0d:6f:
64:10:90:f8:0e:1d:18:9f:25:e7:ae:2f:51:0f:db:43:8f:3e:
e3:6d:be:2d:f8:b8:80:2e:73:7a:a8:cb:85:41:d1:77:c3:ba:
ad:fd:ae:22:4a:ff:95:5f:1f:5f:0a:2d:ca:90:e6:65:33:c8:
e3:10:0f:d7:72:6c:e9:87:20:d9:24:a2:91:90:4e:3f:15:63:
c4:b9:3d:fd:d3:54:15:60:f7:a9:53:56:85:2f:db:7f:ee:5e:
4c:27:ae:1d:29:c4:fc:cc:41:e6:57:bf:c5:2f:07:ce:ca:15:
53:99:19:98:75:af:4b:8f:b1:b2:80:f2:c6:ab:b5:14:bc:36:
b9:6f:9a:8b:69:16:e2:ad:c8:5e:8f:91:76:81:3a:e9:ca:64:
03:2d:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:10 2026 by rpki-client