Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdm53Yba0FmyJAnp-G6TyWEFGnk.roa
File: kdm53Yba0FmyJAnp-G6TyWEFGnk.roa (raw, json)
Hash identifier: IRo4e/lhmbDsDgKP8glpcnZt5KpHHx2eioEbHzLbr4Q=
Subject key identifier: 91:D9:B9:DD:86:DA:D0:59:B2:24:09:E9:F8:6E:93:C9:61:05:1A:79
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09A41F4D301F351867E3E35C70E9E389F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdm53Yba0FmyJAnp-G6TyWEFGnk.roa
Signing time: Sun 13 Sep 2026 10:13:28 +0000
ROA not before: Sun 13 Sep 2026 10:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 37963
IP address blocks: 87.83.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:41:f4:d3:01:f3:51:86:7e:3e:35:c7:0e:9e:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 10:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91d9b9dd86dad059b22409e9f86e93c961051a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:1b:36:b4:12:a4:f5:46:cf:17:e4:35:f2:
7a:47:75:ad:a3:91:8a:da:98:ce:67:67:5e:5b:e5:
a5:6f:07:7c:07:55:a3:70:ca:66:1b:a1:32:24:e8:
39:3f:a9:d2:7e:34:fb:0e:7f:61:74:db:06:92:5c:
fc:4c:c5:a8:b1:16:cd:83:f6:17:31:b6:4f:5f:79:
72:71:e7:e3:6f:15:a9:c1:0a:3b:dd:f6:3a:51:3b:
4c:f9:20:b6:54:cf:34:2a:02:ec:f1:05:f5:41:b6:
93:e3:07:f7:59:17:12:73:a6:13:9e:6b:46:5c:bf:
4f:d9:b6:f9:14:dd:b5:a8:29:12:1b:b5:69:be:5c:
73:97:12:f0:31:c1:2d:cc:06:0b:5d:c9:2d:6e:e3:
18:9e:2b:d4:dd:09:9c:2f:97:98:0b:bf:24:5f:c0:
5b:81:3c:f6:97:5a:d7:79:57:03:53:08:1f:a5:fb:
99:6f:14:4b:37:5b:c0:e2:fd:99:7f:c9:a0:fc:81:
f9:80:11:2c:a9:c0:21:9b:1a:8b:d6:ac:bd:e4:31:
64:9a:95:75:11:bf:e4:19:ce:e6:09:ba:c9:84:c6:
5e:1b:40:4f:46:6a:29:bb:dd:c3:2f:fa:3c:7d:5c:
17:87:74:2c:42:bb:90:c6:5c:d6:fb:5c:d7:59:bc:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D9:B9:DD:86:DA:D0:59:B2:24:09:E9:F8:6E:93:C9:61:05:1A:79
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kdm53Yba0FmyJAnp-G6TyWEFGnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:49:c4:3e:3c:65:00:6e:fb:60:9c:bd:ee:3e:d7:99:87:26:
92:12:4e:dd:b8:e9:6c:ed:64:62:20:d9:99:a8:80:74:1c:d6:
0f:1e:bf:c3:31:a8:ba:82:6b:c9:81:8e:05:28:65:84:68:0f:
60:b4:a8:da:56:ac:91:82:27:f9:56:66:63:f9:71:17:72:a4:
5c:ae:64:c3:27:44:21:20:bd:1c:3f:c4:e8:f8:be:66:b3:fd:
81:30:db:ea:8d:5e:7c:ab:75:60:d8:c3:3b:ec:2b:d8:d1:69:
4f:92:10:e8:1e:bc:be:7c:eb:3c:f5:cb:91:88:99:ee:97:36:
6a:25:b7:3d:77:8b:bf:0d:fa:d5:7b:b5:cd:7b:52:ac:49:ce:
40:ef:92:5b:64:2c:ba:86:63:89:76:1b:51:4f:03:c7:98:09:
02:43:9f:e8:4d:a5:99:8c:40:83:ff:ac:ea:ce:18:e6:4f:d4:
c5:57:60:dc:30:db:c6:f7:85:d3:12:e0:6c:70:09:e5:66:99:
43:51:7f:11:c6:2a:f1:2e:fb:b3:1c:b7:7d:41:fc:59:3a:81:
4f:c5:58:fd:8b:59:4f:84:3b:59:fe:53:2f:fa:ee:2b:0f:5c:
61:da:ea:b2:d9:cf:e0:61:48:7a:d8:a9:0a:1b:1d:9b:fc:67:
1b:16:88:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:02:47 2026 by rpki-client