Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V8lDCmkEKVdYK_mJZdTwv4shyNE.roa
File: V8lDCmkEKVdYK_mJZdTwv4shyNE.roa (raw, json)
Hash identifier: HYZ2jwRC9lVL0BPfDKn4s3c9sWuRS01hefXHSTNNYR0=
Subject key identifier: 57:C9:43:0A:69:04:29:57:58:2B:F9:89:65:D4:F0:BF:8B:21:C8:D1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A13F32C9E8286158FB0B4A9BC789F74878
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V8lDCmkEKVdYK_mJZdTwv4shyNE.roa
Signing time: Thu 15 Oct 2026 10:54:15 +0000
ROA not before: Thu 15 Oct 2026 10:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 87.82.60.0/24 maxlen: 24
217.79.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:32:c9:e8:28:61:58:fb:0b:4a:9b:c7:89:f7:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 10:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57c9430a69042957582bf98965d4f0bf8b21c8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:55:dc:10:96:fc:de:64:45:93:45:38:7e:
5d:58:1a:9b:e6:76:bf:a5:45:93:43:85:54:9d:0d:
6a:47:f3:c2:3c:b4:3f:e4:5b:33:0d:e8:0c:be:1c:
2a:0e:39:ca:89:56:12:b0:4e:dd:b2:41:e0:83:64:
f3:c6:33:60:f5:f2:19:9c:38:3c:10:bf:3f:99:16:
c4:50:f2:b5:6c:02:dc:bd:48:e5:fc:16:44:8d:68:
22:25:09:81:3b:57:94:8d:45:f2:cb:c6:e0:bd:5e:
0e:18:d3:2a:d3:35:24:6a:da:28:67:96:e3:f2:40:
9f:53:ec:d5:ea:d4:5d:ad:1f:ff:9a:36:26:87:15:
8b:ea:28:72:40:8c:2f:9c:61:d0:30:72:17:74:89:
2e:7d:88:46:b7:ca:99:10:2f:16:b6:d7:3a:ad:52:
87:78:31:88:2a:cf:35:00:f5:df:e2:77:a3:2a:f7:
77:f4:01:08:f3:ad:bc:07:d2:da:9d:48:c6:3c:42:
cc:65:ac:30:9a:a8:8f:57:be:6e:63:bb:5b:e1:2e:
2d:d6:4e:56:53:81:be:bb:9e:a8:81:18:05:37:d5:
4b:98:f1:7a:8a:1f:04:2c:d6:88:b0:6d:d1:9a:2c:
08:15:26:ef:4c:69:21:5e:2b:6b:31:65:1a:84:40:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:43:0A:69:04:29:57:58:2B:F9:89:65:D4:F0:BF:8B:21:C8:D1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V8lDCmkEKVdYK_mJZdTwv4shyNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.60.0/24
217.79.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a5:ec:11:a3:be:5e:6f:ce:ba:e8:01:09:6c:82:b1:a9:4f:
6b:51:56:b6:8d:5e:32:a2:a2:78:ba:67:0a:b8:52:52:e7:0d:
87:03:ec:c4:74:d7:a7:b9:8d:f3:75:28:50:fe:21:42:b4:0d:
80:4f:cd:92:96:14:6a:da:c0:f0:6e:43:bc:d2:21:7e:e7:1d:
6f:b6:38:0b:af:bf:0d:4d:63:f3:f9:28:24:0d:f6:d0:a5:e2:
a5:47:5d:9e:e4:2f:ef:8c:ad:25:c4:ae:37:8f:b4:d5:f7:e1:
67:d0:6d:57:34:cf:21:01:8f:5b:60:d7:6a:5c:28:18:1b:00:
bd:f8:89:38:e2:53:ab:ca:e4:49:2b:7d:c8:52:fc:e6:13:09:
6b:26:01:7d:b2:67:fc:7d:90:ca:95:b4:a8:60:82:54:68:90:
db:c4:01:3c:fb:fd:8d:51:7a:9e:13:79:76:9c:5d:73:17:03:
56:4c:50:b9:2d:3b:6f:89:86:c7:86:db:2f:0f:62:eb:f7:cd:
ba:08:8a:5a:6c:17:b1:85:41:9a:e2:df:18:bb:e3:fa:bd:0c:
3c:48:47:f6:db:ae:f2:6e:5a:87:f4:ba:0b:8a:c2:4b:37:ec:
b4:f7:da:e4:0b:ff:0e:19:23:d1:22:7b:de:d0:e6:a7:bb:72:
15:fc:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:26 2026 by rpki-client