Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/00WRm7AorIOeuLllZO_C_N6LXf4.roa
File: 00WRm7AorIOeuLllZO_C_N6LXf4.roa (raw, json)
Hash identifier: /Nwc9ldEanc/X6EoEuGRdn1BYivVPLxWMFK9d9GaX00=
Subject key identifier: D3:45:91:9B:B0:28:AC:83:9E:B8:B9:65:64:EF:C2:FC:DE:8B:5D:FE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A111F6C118FCC7E649063668A1DC10544B
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/00WRm7AorIOeuLllZO_C_N6LXf4.roa
Signing time: Tue 06 Oct 2026 16:05:46 +0000
ROA not before: Tue 06 Oct 2026 16:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59692
IP address blocks: 87.82.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f6:c1:18:fc:c7:e6:49:06:36:68:a1:dc:10:54:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 6 16:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d345919bb028ac839eb8b96564efc2fcde8b5dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:24:4f:32:70:dd:bd:c3:11:b8:f2:89:2c:
0e:0e:f8:1c:a2:9b:de:76:e1:9c:2c:16:29:74:90:
7c:09:47:8d:27:a8:69:40:00:69:d8:07:7b:82:91:
db:05:f2:69:93:62:5e:e4:15:83:6f:a2:ca:a5:3b:
a2:1e:3b:11:c4:11:ff:cd:18:d5:26:a2:b8:f9:3f:
c7:3f:39:be:2c:47:3d:8c:0d:70:a1:f4:11:aa:fa:
0b:c6:bc:9a:97:48:ba:b7:55:85:a2:e5:d1:94:a5:
79:b9:65:7a:c5:70:d7:76:f2:fa:2c:38:cb:f4:62:
62:ea:73:37:b2:91:3f:6b:db:b3:c2:14:d2:a8:d6:
05:66:77:cc:52:04:5f:61:74:f4:46:1a:2e:13:0e:
af:d3:68:d3:86:12:8f:45:09:1d:ff:33:9e:a1:92:
4c:3c:b9:a9:5b:79:eb:00:05:45:66:01:60:a2:f9:
b7:1c:31:28:a4:52:53:24:55:4a:45:c8:c4:49:bd:
25:97:71:7c:8c:19:be:26:11:a8:cd:f9:50:66:69:
d0:73:fc:90:76:69:4d:85:e3:3b:bf:14:41:42:8c:
4d:a3:67:d2:7d:d6:1a:2d:f2:f5:57:92:33:e7:75:
13:28:4d:00:ed:ab:f4:c4:7a:30:98:83:13:ad:b8:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:91:9B:B0:28:AC:83:9E:B8:B9:65:64:EF:C2:FC:DE:8B:5D:FE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/00WRm7AorIOeuLllZO_C_N6LXf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cf:58:74:f4:9c:2f:33:af:b8:9f:7c:46:bd:43:71:cb:3f:
39:b8:fe:5c:8e:07:67:7b:f3:48:60:1d:ff:05:7f:ac:5b:b9:
04:fc:9c:f5:ed:1f:71:c0:0c:b4:b2:a3:cc:d3:64:05:0e:df:
10:b5:47:6b:b9:44:26:18:a3:da:0e:fa:79:c5:2c:ac:c7:35:
b3:24:db:03:fa:98:b8:af:db:15:57:19:e0:0e:33:76:e3:45:
d5:41:e3:fa:2f:1b:9c:b6:8c:14:98:9f:fe:bb:35:a1:35:b0:
29:b3:73:75:4a:0d:0d:e7:0f:63:74:0f:0d:63:97:06:56:2b:
cc:d4:e6:4f:93:99:5b:b2:6b:ff:fb:ae:16:79:fc:6f:64:94:
c3:05:2d:47:67:b7:a4:0f:16:97:21:a1:92:96:9d:d4:10:ab:
06:d1:d5:d4:bc:2e:2f:9e:17:65:21:d0:d9:d1:7a:b5:29:76:
8e:df:e9:53:a1:c6:ac:6a:31:69:8a:75:7b:bb:ea:36:ce:ef:
e0:27:54:5d:c5:b9:bc:b5:9d:df:93:bc:ee:8e:d3:56:f8:b0:
ff:d7:c9:c7:49:da:0b:45:b9:bf:b2:d9:e3:b1:79:01:69:a4:
ea:86:b3:da:6f:cf:53:bd:c6:c5:7b:45:f8:00:af:56:84:ac:
22:a1:fa:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaER9sEY/MfmSQY2aKHcEFRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA2MTYwNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzQ1OTE5YmIwMjhhYzgzOWViOGI5NjU2NGVmYzJmY2RlOGI1ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrkkTzJw3b3DEbjyiSwODvgcopve
duGcLBYpdJB8CUeNJ6hpQABp2Ad7gpHbBfJpk2Je5BWDb6LKpTuiHjsRxBH/zRjV
JqK4+T/HPzm+LEc9jA1wofQRqvoLxryal0i6t1WFouXRlKV5uWV6xXDXdvL6LDjL
9GJi6nM3spE/a9uzwhTSqNYFZnfMUgRfYXT0RhouEw6v02jThhKPRQkd/zOeoZJM
PLmpW3nrAAVFZgFgovm3HDEopFJTJFVKRcjESb0ll3F8jBm+JhGozflQZmnQc/yQ
dmlNheM7vxRBQoxNo2fSfdYaLfL1V5Iz53UTKE0A7av0xHowmIMTrbgWKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNNFkZuwKKyDnri5ZWTvwvzei13+MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMDBXUm03QW9ySU9ldUxsbFpPX0NfTjZMWGY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1L8MA0G
CSqGSIb3DQEBCwUAA4IBAQArz1h09JwvM6+4n3xGvUNxyz85uP5cjgdne/NIYB3/
BX+sW7kE/Jz17R9xwAy0sqPM02QFDt8QtUdruUQmGKPaDvp5xSysxzWzJNsD+pi4
r9sVVxngDjN240XVQeP6LxuctowUmJ/+uzWhNbAps3N1Sg0N5w9jdA8NY5cGVivM
1OZPk5lbsmv/+64WefxvZJTDBS1HZ7ekDxaXIaGSlp3UEKsG0dXUvC4vnhdlIdDZ
0Xq1KXaO3+lTocasajFpinV7u+o2zu/gJ1Rdxbm8tZ3fk7zujtNW+LD/18nHSdoL
Rbm/stnjsXkBaaTqhrPab89TvcbFe0X4AK9WhKwiofrD
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:12 2026 by rpki-client