Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qx8eE0snJx-BTMVO3x9vOYPNFP8.roa
File: qx8eE0snJx-BTMVO3x9vOYPNFP8.roa (raw, json)
Hash identifier: M1k1a53h1K7LL8V66Db1wUYmxDEYpe3kC4/cUIbVlTM=
Subject key identifier: AB:1F:1E:13:4B:27:27:1F:81:4C:C5:4E:DF:1F:6F:39:83:CD:14:FF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06732721BCF94E3B7FBCB02BC6254FE3F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qx8eE0snJx-BTMVO3x9vOYPNFP8.roa
Signing time: Thu 03 Sep 2026 12:15:54 +0000
ROA not before: Thu 03 Sep 2026 12:15:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197173
IP address blocks: 87.85.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:15:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:32:72:1b:cf:94:e3:b7:fb:cb:02:bc:62:54:fe:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 12:15:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab1f1e134b27271f814cc54edf1f6f3983cd14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b7:c0:3b:3a:30:09:1b:04:90:4b:d5:1c:ae:
10:0a:b7:c4:9b:0d:43:79:e2:42:e1:5d:8e:55:32:
74:0b:33:5c:6d:6a:30:8e:7b:8b:6b:12:1b:7d:28:
c3:2b:76:32:ff:99:6b:bd:5a:8f:c1:04:0b:1a:cf:
f3:5f:9a:ff:15:eb:44:71:f9:cb:d2:dd:b7:a4:db:
7c:1c:2a:a7:ec:9f:8a:b1:ef:64:b2:58:5b:9b:5f:
fb:b4:33:51:82:83:54:d2:74:46:e0:99:b1:b7:ce:
ca:c1:44:29:e4:6e:6b:be:a1:ab:2f:13:b8:c8:d8:
16:23:9d:a8:45:3f:6f:79:75:fb:99:02:db:42:84:
9c:2c:d3:98:3e:45:ff:27:a4:6d:19:cf:32:64:b8:
b4:43:86:e2:88:33:40:33:4e:10:75:b1:fa:67:f7:
9f:17:56:5f:7e:be:64:dd:f3:48:60:78:2a:5c:2a:
49:5f:32:56:51:41:15:d7:7b:8c:8b:ae:78:4a:2d:
85:9f:b1:10:1d:f0:0c:1d:61:f7:87:cf:60:51:26:
26:61:15:cb:ac:37:4a:d2:f0:d8:51:b1:48:96:39:
af:0a:f0:1e:d6:2e:c7:f6:e3:10:63:50:e7:48:93:
34:0d:00:e5:e3:10:6d:aa:a7:ea:5b:d8:ca:51:8f:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1F:1E:13:4B:27:27:1F:81:4C:C5:4E:DF:1F:6F:39:83:CD:14:FF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qx8eE0snJx-BTMVO3x9vOYPNFP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:30:e9:9d:7c:48:e3:35:2e:1e:b1:74:c9:a2:8d:7b:08:01:
82:62:54:0d:23:66:88:e1:fb:3a:17:a9:9a:2f:11:ff:f4:19:
76:c3:19:72:f0:75:42:a0:c3:e8:46:cd:f0:69:21:08:b6:da:
57:be:d6:ee:13:22:63:dd:b7:70:e8:d8:be:d7:8f:9a:75:ec:
2b:32:eb:c2:69:76:4d:56:0d:ea:30:f2:aa:54:ca:58:8b:2d:
e6:9d:12:0f:dc:c4:86:73:f8:b0:e1:c5:6b:95:41:1a:a1:48:
ca:26:9c:79:f9:18:a3:1a:d1:9c:ac:00:ea:28:02:41:02:8f:
53:3a:46:72:c6:cc:e5:a3:7d:cb:24:5b:c6:e1:2a:ef:31:95:
72:5f:ee:a4:66:39:67:f4:73:cd:6b:91:f6:56:0d:95:0b:82:
8e:ea:62:77:75:1e:f8:f0:88:6e:fa:2d:22:fd:e7:38:92:b6:
bd:7f:0f:6a:4f:0a:65:9c:78:28:2c:98:5b:e4:c0:94:30:9a:
4b:ee:52:67:ff:f7:73:33:1b:8f:4a:d7:e7:5d:0d:cc:94:77:
32:cf:04:cb:10:f7:c5:1f:fc:be:27:3a:fc:be:e3:49:d9:86:
01:1f:d1:e1:dc:51:ef:6a:61:62:67:db:3e:b7:10:18:dc:b2:
f9:2d:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:52 2026 by rpki-client