Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pHClATfYDOUrEpiSthPX7hdIoto.roa
File: pHClATfYDOUrEpiSthPX7hdIoto.roa (raw, json)
Hash identifier: CUVRNSwkTMn4tJyECIvrhLDvd0rPAjGwu3BNg+cSXZI=
Subject key identifier: A4:70:A5:01:37:D8:0C:E5:2B:12:98:92:B6:13:D7:EE:17:48:A2:DA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA6772B087D0F035BDF91288C8964BBBE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pHClATfYDOUrEpiSthPX7hdIoto.roa
Signing time: Tue 28 Jul 2026 02:04:15 +0000
ROA not before: Tue 28 Jul 2026 02:04:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147208
IP address blocks: 82.109.102.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:77:2b:08:7d:0f:03:5b:df:91:28:8c:89:64:bb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 02:04:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a470a50137d80ce52b129892b613d7ee1748a2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:f7:e4:fa:8a:4f:b9:06:b9:70:02:da:bd:
16:e4:48:fb:04:4e:7b:62:fa:97:44:42:cd:05:56:
9a:10:be:2c:e3:2d:ce:b7:82:3c:34:dd:86:59:0b:
80:d5:df:ea:ac:08:dc:05:5f:b6:b0:a7:9f:b0:27:
a0:fe:9c:23:60:60:38:33:0d:17:bf:3a:be:fb:82:
e4:6e:b2:e1:c6:ec:c5:d0:bb:1a:64:08:59:69:56:
3c:40:6e:0d:de:ca:a1:c4:15:bb:48:dc:54:c5:28:
5c:f1:69:61:e8:53:94:7c:86:bb:6c:78:5d:8b:2e:
0d:7f:5d:66:36:b8:90:f2:af:5a:23:fa:ad:01:7d:
38:19:8f:1a:57:80:9a:19:1b:d2:df:2d:e5:dd:92:
44:f7:7f:b5:53:61:8f:2b:3d:2f:ee:52:6b:8f:07:
ef:9c:d8:4e:f0:53:1b:4b:f0:93:86:11:fc:eb:04:
dc:83:3e:78:1f:53:6e:03:ae:ad:bb:28:48:ee:ef:
7f:7b:88:18:69:e3:03:39:54:95:cc:e0:96:18:82:
d3:39:8f:b4:4e:55:84:12:07:6a:6b:0f:45:4f:4f:
f6:9c:4c:83:c4:a9:2d:59:42:39:12:8f:c4:04:66:
6e:1d:85:64:bf:76:dc:78:14:06:dd:5e:4c:7b:1c:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:A5:01:37:D8:0C:E5:2B:12:98:92:B6:13:D7:EE:17:48:A2:DA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pHClATfYDOUrEpiSthPX7hdIoto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.102.0/24
87.86.91.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5d:13:d6:a2:3b:fa:d7:ca:f2:11:b8:a1:53:e7:ef:3a:f2:
2e:e2:81:45:13:cd:12:c4:9d:4f:7e:ea:5e:18:37:27:b4:ae:
6d:6d:15:be:95:ca:14:42:43:91:a7:9c:6a:95:cc:08:49:fa:
7e:ee:aa:5d:c6:f7:b9:6c:19:94:d3:cd:9f:e8:a7:5c:25:2e:
c1:f8:89:7d:35:93:ba:42:6b:b4:7c:e4:00:79:5b:21:a6:f4:
dd:da:91:b6:6e:a2:a2:76:5b:c4:fe:de:c9:38:05:3d:09:74:
56:6e:b9:b2:1c:11:b9:c0:25:e7:d5:e7:3e:80:05:45:a5:bf:
81:a0:99:cb:61:d8:5e:ce:b5:bf:a7:62:58:11:a4:61:ae:01:
38:04:d5:f0:ce:ae:af:78:7a:f4:26:c0:df:a5:65:6a:a6:38:
60:ac:b5:fa:d8:a6:1c:58:26:14:df:cf:f3:99:36:aa:82:bc:
e9:11:da:5f:28:d9:38:0c:6d:f5:0b:62:f1:6f:3d:41:e2:18:
ae:d4:c6:32:e9:6e:4f:a9:4a:1a:34:e4:4d:ce:6a:d7:02:73:
d6:e7:bb:bf:34:c7:b3:54:c4:0e:2a:68:a1:55:0e:24:98:87:
a0:ae:19:ce:6c:31:b2:3e:06:ee:2a:76:d9:76:da:5f:07:c8:
0f:d6:85:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:15 2026 by rpki-client