Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IpEMSYZlksIf5fJSjWUc_nSdkqA.roa
File: IpEMSYZlksIf5fJSjWUc_nSdkqA.roa (raw, json)
Hash identifier: paYqxqnhYQPw16BFYW2F+J4wFW1WI/7SMXgbRF/96Lc=
Subject key identifier: 22:91:0C:49:86:65:92:C2:1F:E5:F2:52:8D:65:1C:FE:74:9D:92:A0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1438418DA2ECB750BBC493112DB8620C9
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IpEMSYZlksIf5fJSjWUc_nSdkqA.roa
Signing time: Fri 16 Oct 2026 07:01:32 +0000
ROA not before: Fri 16 Oct 2026 07:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 87.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:84:18:da:2e:cb:75:0b:bc:49:31:12:db:86:20:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 16 07:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22910c49866592c21fe5f2528d651cfe749d92a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:a7:04:c7:08:a1:10:43:15:6c:30:38:67:
15:47:f2:64:bb:89:c7:26:77:8c:fc:e0:33:b9:83:
48:b5:a8:67:70:71:4b:e9:d5:a6:ec:4f:1c:27:17:
48:ab:df:60:b3:68:05:df:bc:29:3c:c0:e3:84:1c:
a3:26:3e:d5:af:9e:4d:1e:b4:24:d5:f1:b2:d4:1a:
69:4f:a8:36:8d:2b:82:6e:23:76:f5:5e:55:11:f5:
8a:d3:97:7b:3c:d5:9e:83:2e:dd:24:a9:67:0f:0b:
8e:27:02:f6:1e:c3:8d:ae:2a:66:82:03:30:45:02:
2f:fa:e9:d6:b2:fa:89:04:6e:39:ac:5c:3d:1b:be:
81:7c:d7:32:18:ac:f7:fc:62:41:d8:83:ca:c2:05:
92:af:9b:ab:81:78:23:21:42:69:b7:8e:98:89:58:
f2:46:e7:66:3d:50:af:25:bf:37:a5:90:f7:1e:8f:
d4:3c:95:16:a2:c4:75:31:3c:48:47:0a:09:37:6b:
0d:02:d0:a9:2d:f3:57:12:2d:85:d6:87:d4:57:4b:
72:89:41:43:73:ff:5b:50:ec:2e:1e:c1:fc:8b:c6:
71:1b:ff:de:b1:99:14:b4:0f:af:c0:a2:a8:f7:37:
4b:91:e3:56:25:bb:02:ad:c5:fe:76:22:76:8b:76:
34:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:91:0C:49:86:65:92:C2:1F:E5:F2:52:8D:65:1C:FE:74:9D:92:A0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IpEMSYZlksIf5fJSjWUc_nSdkqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
08:36:5e:fd:0c:1c:90:cc:e8:c0:04:d0:ef:53:52:a9:ba:6b:
68:46:87:b2:f6:b7:72:b2:15:b9:47:c8:b4:83:72:f3:e3:41:
2c:d7:10:c2:fd:6c:91:7b:10:e6:b3:25:b1:8c:9a:a6:0c:67:
e3:9a:a4:66:04:e1:35:0b:aa:e2:43:00:f6:84:b3:b0:20:f7:
26:6d:71:a6:8a:81:1c:b0:b3:c2:4c:19:5e:08:e2:37:50:c6:
62:4a:78:ca:1f:ca:51:55:8f:ee:b4:5f:50:7a:e6:df:3a:89:
15:7c:f5:f5:4a:67:ae:38:00:ec:03:16:1f:2b:14:42:33:5d:
95:05:72:8b:d6:cd:93:30:fa:ae:5e:8e:53:69:da:32:57:e8:
64:88:a2:dc:7f:f1:d1:94:dd:5c:ef:a2:96:3a:5a:89:92:4e:
83:07:23:f9:7c:22:0d:b0:04:36:fc:28:05:3b:5b:3c:82:29:
8c:d6:6c:56:79:0a:55:74:7e:cc:ee:ae:f7:41:a7:d5:80:69:
f3:64:e1:42:b4:99:3a:1c:ad:61:d2:a5:4a:d2:8a:77:91:67:
3b:af:8e:67:ac:a5:05:75:7b:66:31:7b:92:45:f9:d3:28:14:
1a:5c:31:e5:79:23:22:a3:2f:52:9e:6d:8c:c0:dc:ae:41:a2:
75:d5:81:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFDhBjaLst1C7xJMRLbhiDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDE2MDcwMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjkxMGM0OTg2NjU5MmMyMWZlNWYyNTI4ZDY1MWNmZTc0OWQ5MmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhunBMcIoRBDFWwwOGcVR/Jku4nH
JneM/OAzuYNItahncHFL6dWm7E8cJxdIq99gs2gF37wpPMDjhByjJj7Vr55NHrQk
1fGy1BppT6g2jSuCbiN29V5VEfWK05d7PNWegy7dJKlnDwuOJwL2HsONripmggMw
RQIv+unWsvqJBG45rFw9G76BfNcyGKz3/GJB2IPKwgWSr5urgXgjIUJpt46YiVjy
RudmPVCvJb83pZD3Ho/UPJUWosR1MTxIRwoJN2sNAtCpLfNXEi2F1ofUV0tyiUFD
c/9bUOwuHsH8i8ZxG//esZkUtA+vwKKo9zdLkeNWJbsCrcX+diJ2i3Y0PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKRDEmGZZLCH+XyUo1lHP50nZKgMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvSXBFTVNZWmxrc0lmNWZKU2pXVWNfblNka3FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1MCMA0G
CSqGSIb3DQEBCwUAA4IBAQAINl79DByQzOjABNDvU1KpumtoRoey9rdyshW5R8i0
g3Lz40Es1xDC/WyRexDmsyWxjJqmDGfjmqRmBOE1C6riQwD2hLOwIPcmbXGmioEc
sLPCTBleCOI3UMZiSnjKH8pRVY/utF9QeubfOokVfPX1SmeuOADsAxYfKxRCM12V
BXKL1s2TMPquXo5TadoyV+hkiKLcf/HRlN1c76KWOlqJkk6DByP5fCINsAQ2/CgF
O1s8gimM1mxWeQpVdH7M7q73QafVgGnzZOFCtJk6HK1h0qVK0op3kWc7r45nrKUF
dXtmMXuSRfnTKBQaXDHleSMioy9Snm2MwNyuQaJ11YHP
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:54:57 2026 by rpki-client