Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mOfLX8tY08mYZvuBUP08C1Wh_IE.roa
File: mOfLX8tY08mYZvuBUP08C1Wh_IE.roa (raw, json)
Hash identifier: uoq/IY2IoePVbndioj6IIvYC67sQEGFrWJTt2FGvSIM=
Subject key identifier: 98:E7:CB:5F:CB:58:D3:C9:98:66:FB:81:50:FD:3C:0B:55:A1:FC:81
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A15A6A3E5D73413E13729A1064AB0DEEED
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mOfLX8tY08mYZvuBUP08C1Wh_IE.roa
Signing time: Tue 20 Oct 2026 17:44:34 +0000
ROA not before: Tue 20 Oct 2026 17:44:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218388
IP address blocks: 87.83.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:6a:3e:5d:73:41:3e:13:72:9a:10:64:ab:0d:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 20 17:44:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98e7cb5fcb58d3c99866fb8150fd3c0b55a1fc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:23:68:e1:e0:ee:f0:87:03:e7:86:b1:de:
de:6b:49:52:54:7c:a9:3a:5c:4b:d0:29:c9:e5:26:
0f:b1:08:0f:5e:32:e4:fd:86:c2:a9:71:0e:13:14:
b2:a7:0c:c8:92:b9:9b:e0:bd:7c:c4:c5:9a:d4:da:
9d:59:99:8b:e5:e6:ad:32:ba:85:1b:79:84:48:9d:
a4:f5:66:1e:e9:cf:3d:39:6c:14:e1:e7:fe:9c:35:
ae:32:ec:fe:5f:3d:30:4e:6a:35:04:ee:e2:10:6d:
2a:47:fd:e7:61:0c:7f:8d:21:fd:83:b1:6b:e3:61:
81:01:c1:da:3c:01:75:15:2d:7b:0c:ea:ce:ec:6e:
53:0e:11:4d:10:e5:a5:43:7a:d0:93:91:e7:8d:91:
0d:6e:8d:7a:67:41:fc:42:74:4d:b0:59:e0:e3:92:
0f:fa:20:55:9e:87:e5:d8:de:16:33:fd:24:cc:96:
2e:50:5e:2c:b5:6a:b8:dd:31:0f:f7:0f:fe:ea:55:
1e:b1:7a:dd:ab:51:7d:5b:cf:42:9c:09:d4:79:50:
fa:1a:10:3e:41:0e:17:85:1c:27:2c:48:49:c7:17:
5f:7e:36:6d:f5:ea:e4:e0:7e:38:29:8e:5a:a1:04:
20:24:79:b6:b2:a0:b8:14:39:22:ab:02:49:f1:28:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:CB:5F:CB:58:D3:C9:98:66:FB:81:50:FD:3C:0B:55:A1:FC:81
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mOfLX8tY08mYZvuBUP08C1Wh_IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.68.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:51:2c:38:9c:65:54:46:cd:07:05:3b:95:08:93:bd:4e:8d:
9a:8f:f9:c8:76:1f:34:33:df:ed:0d:a8:74:f6:bb:bf:9b:85:
9a:bb:02:55:b8:15:0e:bb:a9:36:1a:ce:0f:17:3a:d4:c9:2b:
c7:bc:25:ba:8f:d0:4f:84:31:bf:b9:79:9a:c9:bb:6d:4e:c7:
9c:c7:68:0b:7b:32:c9:8e:be:61:72:8a:83:bc:4d:b0:af:a8:
9c:f7:8d:75:11:10:6d:4a:5a:53:24:34:9b:93:b8:5b:10:3d:
ab:06:91:b8:09:b2:e6:4c:b3:aa:e0:96:6c:9d:04:7e:61:61:
8b:d6:d5:b6:f2:82:fa:be:12:a9:e6:a3:28:25:0c:05:65:39:
0f:b8:69:66:19:cd:79:cc:ad:0c:5a:f1:cf:1e:02:1e:5c:15:
37:77:d0:f8:fd:aa:ae:4d:fa:d4:3a:42:cd:2c:e0:63:4e:0c:
e7:42:dc:2d:0a:61:c8:7d:d3:d9:df:21:0b:de:a7:87:f0:58:
d3:19:ec:a5:f6:2c:23:86:f2:2d:a3:69:68:ef:4d:3d:10:f5:
a3:ca:61:88:22:6e:6e:b6:40:72:8c:f4:db:a3:a8:5b:dd:60:
5e:10:f9:bd:ce:e2:05:c8:27:d9:7b:e3:f3:2d:b9:af:66:98:
fc:62:94:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:30:59 2026 by rpki-client