Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XOJ5fPGUPEe8jr2RydqMRPFVQm0.roa
File: XOJ5fPGUPEe8jr2RydqMRPFVQm0.roa (raw, json)
Hash identifier: 90DJmTPw9JijsW71Rw3HFOhZY7vaCcoXls6d6REJf+w=
Subject key identifier: 5C:E2:79:7C:F1:94:3C:47:BC:8E:BD:91:C9:DA:8C:44:F1:55:42:6D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A15304687A5E613D75359BC3EECCB5B023
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XOJ5fPGUPEe8jr2RydqMRPFVQm0.roa
Signing time: Mon 19 Oct 2026 07:16:00 +0000
ROA not before: Mon 19 Oct 2026 07:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 87.82.193.0/24 maxlen: 24
87.83.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:04:68:7a:5e:61:3d:75:35:9b:c3:ee:cc:b5:b0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 19 07:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ce2797cf1943c47bc8ebd91c9da8c44f155426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:15:35:a8:8d:8a:d8:99:e0:9d:a2:e1:92:
8b:03:dd:9a:3e:06:9b:88:ed:35:c0:5f:49:1c:73:
12:1f:72:8e:85:51:b0:82:c8:dd:9f:e1:22:0e:a5:
7e:f2:19:e6:40:40:6d:f4:aa:6a:7b:f7:98:06:94:
33:b2:36:17:a8:a4:93:d6:e6:35:e8:45:e4:fa:d5:
89:e8:80:fb:db:95:24:7f:15:e8:6f:b0:fa:3a:c8:
c1:42:80:22:5c:a8:33:10:33:5c:82:bd:0e:98:18:
1a:89:12:db:d6:ea:af:84:24:1f:e8:cf:33:be:fd:
94:d8:61:d9:23:ba:d8:d2:db:21:0e:2a:e9:14:84:
3b:24:2c:1b:a0:fb:6a:13:99:b9:93:35:3e:86:40:
09:37:20:e0:16:3f:31:fb:3c:bd:77:a2:46:0a:4f:
02:44:f9:ac:b1:49:f7:59:4f:12:e7:9f:22:1e:75:
d9:d9:84:f3:a8:5d:99:37:94:f5:44:64:a3:d7:e9:
b4:30:99:76:b3:bb:a5:09:de:46:b8:6f:f8:1a:f4:
06:4b:ba:34:b5:d1:3e:89:16:15:0d:8e:3e:aa:d1:
c7:12:f1:11:e8:9c:fe:77:80:22:e8:9a:ca:57:04:
ba:34:c9:0c:d1:d7:a2:d3:f2:e6:52:52:02:61:bc:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:79:7C:F1:94:3C:47:BC:8E:BD:91:C9:DA:8C:44:F1:55:42:6D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XOJ5fPGUPEe8jr2RydqMRPFVQm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.193.0/24
87.83.220.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:7e:8e:40:f0:01:da:75:85:d0:32:46:d4:09:3d:ad:a7:ae:
5d:bf:0c:ed:da:4a:a6:e6:ee:b0:d7:54:1f:04:a0:99:5d:43:
6e:a1:aa:31:2c:15:84:03:4f:80:75:08:7c:34:ee:21:79:f7:
b9:73:f8:59:a4:f3:06:42:f8:ed:7a:b9:a8:04:46:b2:95:ae:
2e:c4:c2:0d:f9:bd:71:4b:03:c3:0d:e6:a3:45:44:03:fc:27:
7e:24:fd:4f:c2:49:f4:53:ca:14:6a:e0:0e:77:12:f4:22:46:
67:80:1e:0d:17:34:02:9e:8f:0f:bd:ed:1c:2a:1d:c2:27:03:
7d:6e:1d:6f:91:51:4c:b1:5c:9f:bd:5e:06:9b:39:93:b0:12:
47:ca:4f:63:25:7b:71:be:1e:59:49:44:e1:59:0c:37:7d:d5:
a5:1d:0a:3d:fe:01:36:fb:8f:eb:b2:55:70:3e:63:67:8c:4b:
51:f4:4b:b2:33:26:2a:1f:d8:92:fa:d1:ff:c6:a9:a7:b1:93:
65:7a:d4:53:57:3a:6d:73:f7:a2:5c:82:c3:94:f7:9f:58:e2:
c2:8f:74:ae:10:f7:f3:1a:9a:27:61:8a:4e:5e:10:0a:b6:ef:
4f:2e:7f:53:5f:b1:11:90:51:0a:67:94:d6:96:bb:4e:19:5b:
2d:34:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:32:16 2026 by rpki-client