Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lD2QYqcYBi70U690EEMNN5jQWpw.roa
File: lD2QYqcYBi70U690EEMNN5jQWpw.roa (raw, json)
Hash identifier: MtdNfy/BM4vPzSK7X7Bpzp91Aa6/dUVOvqgHqozGfi0=
Subject key identifier: 94:3D:90:62:A7:18:06:2E:F4:53:AF:74:10:43:0D:37:98:D0:5A:9C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06BB4B9D85FDE72BACE7CF9CBB8F2A693
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lD2QYqcYBi70U690EEMNN5jQWpw.roa
Signing time: Fri 04 Sep 2026 09:16:41 +0000
ROA not before: Fri 04 Sep 2026 09:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 87.85.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:b4:b9:d8:5f:de:72:ba:ce:7c:f9:cb:b8:f2:a6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 09:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=943d9062a718062ef453af7410430d3798d05a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:e8:35:b6:11:d6:b2:74:db:12:8f:67:fb:
d1:5d:76:54:f0:75:1d:78:5c:90:92:94:9b:9f:c8:
3b:ab:a7:89:c2:74:89:27:56:98:06:4e:22:db:0c:
08:54:84:59:70:2c:6b:5e:f0:a0:3e:41:b3:b6:f8:
5b:aa:8c:01:12:84:d9:cc:e0:3f:45:2b:28:70:c9:
bb:17:cd:a3:f6:5b:56:ec:f4:94:03:93:86:df:5e:
e3:90:00:bc:4d:7b:75:7b:cb:5b:6a:63:cf:19:7b:
3b:02:9b:59:53:01:b4:b1:60:71:9e:ef:75:ce:fb:
67:6c:d5:9b:3a:d1:fc:2b:a5:79:21:f1:60:a2:26:
6a:a8:c2:f7:83:fa:45:cc:9d:6c:9f:5e:a1:4f:23:
0b:38:e1:cb:08:85:4c:1c:be:37:1e:1c:0e:a4:c4:
5c:79:99:a1:6e:a3:eb:3b:de:a1:70:6b:bb:15:c8:
b5:a8:43:b0:87:c0:f1:46:d2:a9:35:7b:f2:22:58:
6e:19:6d:74:25:8d:ef:4c:c6:b8:e8:75:f4:94:40:
cf:85:b6:ff:d5:ab:8e:6d:0a:02:8e:5c:fe:19:8d:
f3:1b:1d:97:68:ef:28:a6:18:50:87:16:e6:9c:84:
6e:cd:78:53:01:75:e5:7f:1e:cb:a0:8b:5a:85:9a:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3D:90:62:A7:18:06:2E:F4:53:AF:74:10:43:0D:37:98:D0:5A:9C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/lD2QYqcYBi70U690EEMNN5jQWpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.225.0/24
Signature Algorithm: sha256WithRSAEncryption
34:74:21:6d:0e:2e:69:62:82:4f:3d:0b:b9:f9:9b:94:d9:28:
92:b7:82:91:da:51:be:42:00:36:c3:88:b8:bd:10:73:99:8c:
e8:96:16:2a:43:e8:33:e6:31:03:c7:16:77:83:a0:81:6f:89:
09:88:7b:fc:1d:55:57:01:29:79:00:0e:31:63:48:c1:6a:5b:
b9:60:51:ac:cf:39:36:eb:0c:81:be:06:5e:a3:8a:92:47:6f:
8b:1b:db:29:cd:f7:ec:50:2a:23:06:34:09:af:4a:00:f1:3e:
d3:b3:dc:7c:4e:e1:af:66:c4:33:76:93:00:43:82:dc:b7:f7:
d8:5d:8f:5a:db:7f:d8:56:9e:a0:3b:6b:95:59:b5:f5:e3:d4:
80:6c:80:50:6e:46:f0:55:5b:c5:78:f7:2a:80:69:eb:99:7d:
b9:ad:0a:7e:f0:c5:e2:6a:eb:8e:ac:98:5f:c4:f3:62:64:7d:
1e:7e:48:59:41:c6:d9:74:f3:fd:e2:13:cd:0d:01:be:15:23:
cc:09:2e:cf:2d:cf:34:8d:e5:cb:67:05:e3:80:c5:ce:e7:fc:
19:c0:59:2d:de:ef:06:86:67:0a:6b:e0:3b:13:34:94:03:b7:
d8:9d:53:3c:94:34:45:e3:2f:26:4b:15:b5:35:d6:c7:63:d3:
6e:03:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:08 2026 by rpki-client