Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/_G7x70z_crq_YPgENZrLk-BlWME.roa
File: _G7x70z_crq_YPgENZrLk-BlWME.roa (raw, json)
Hash identifier: 7QvtG+FvFNtlBc1zH5bSkEYY7paSz2Wp3FjS4c29EY0=
Subject key identifier: FC:6E:F1:EF:4C:FF:72:BA:BF:60:F8:04:35:9A:CB:93:E0:65:58:C1
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A0F1435F287E43AE4EF736DDAD6B7BDEC0
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/_G7x70z_crq_YPgENZrLk-BlWME.roa
Signing time: Wed 30 Sep 2026 07:41:59 +0000
ROA not before: Wed 30 Sep 2026 07:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 87.192.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:43:5f:28:7e:43:ae:4e:f7:36:dd:ad:6b:7b:de:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Sep 30 07:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc6ef1ef4cff72babf60f804359acb93e06558c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:0a:6f:44:d5:c0:d4:86:c5:fe:7b:4b:39:
09:f8:ee:f6:dc:74:c1:8d:41:bc:07:ca:d7:0a:14:
fb:ef:e4:ce:62:fb:09:9d:1a:a6:f9:f4:83:bc:31:
1d:83:60:63:ea:da:6c:d9:0e:b9:c9:b2:7d:22:5c:
4a:0e:3d:00:05:b1:7d:08:31:bd:1b:6b:bf:0c:fd:
49:50:58:d2:4f:00:fc:b1:00:f6:cb:a5:f6:b1:93:
03:e7:0a:76:bb:37:7c:4d:b7:3e:a6:8c:20:d5:c5:
a9:85:5a:3e:7b:aa:be:7d:7a:d5:d3:81:ce:56:72:
c3:28:0c:3c:81:1c:2d:ad:3a:24:36:21:73:76:55:
4c:9d:ac:01:df:ef:1a:32:00:63:5e:33:04:03:50:
70:35:2f:28:e3:4c:64:26:a8:a1:0a:b0:90:1f:cc:
14:8e:e1:41:c4:10:52:f0:95:a7:1c:8e:aa:76:8d:
2e:00:89:81:d0:3c:53:09:eb:a3:66:d8:33:12:a5:
fb:60:ef:8b:03:58:b5:8e:c2:23:85:1e:49:38:1d:
d3:4e:cc:62:7d:fc:73:24:8c:e9:5e:24:dd:80:cd:
df:91:ab:46:23:52:bd:5b:57:a6:b2:03:b4:98:4f:
ab:cc:82:72:b5:3b:f9:91:cf:8e:23:da:a3:c9:17:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:F1:EF:4C:FF:72:BA:BF:60:F8:04:35:9A:CB:93:E0:65:58:C1
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/_G7x70z_crq_YPgENZrLk-BlWME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.39.0/24
Signature Algorithm: sha256WithRSAEncryption
33:c7:23:28:9a:1b:48:10:15:fc:3e:c9:24:e3:e5:f6:43:a0:
50:5d:52:79:18:6c:d3:28:f9:db:8e:86:a3:2b:de:34:34:87:
00:63:49:da:88:94:4c:72:35:0a:09:1e:42:22:54:b2:a3:eb:
ba:d7:9e:68:5d:6e:56:58:fc:44:e2:8c:85:b9:c2:72:79:aa:
51:1d:dc:e9:c0:90:1c:ea:e2:1d:10:1e:78:fd:28:e3:20:e1:
77:4f:28:6e:70:85:2a:b6:ad:8c:bd:8b:c7:30:e0:0c:c2:a5:
8b:ec:02:3e:fb:c5:cf:82:dd:5d:98:78:42:7a:b2:d7:4f:5e:
45:68:4b:ba:15:f8:f0:ba:ad:cc:fb:57:08:a2:08:15:31:61:
11:e9:c4:12:01:0a:f4:92:76:d6:a6:b6:aa:fa:bc:9b:f1:cb:
87:69:5b:22:34:50:e0:dc:7e:20:9d:1a:ed:16:70:a9:bf:5b:
57:92:40:90:9c:95:1c:e8:49:de:40:fd:b3:44:1d:98:37:3a:
e7:db:a5:c1:b9:12:6a:a3:ba:81:5b:c9:39:69:0b:b9:a5:f2:
5f:97:f2:a5:72:2c:af:48:19:67:a1:01:01:b9:92:54:dd:27:
49:8a:a9:e5:98:78:88:d2:cb:5d:b1:05:d9:27:43:bc:3d:b6:
12:ce:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:32:26 2026 by rpki-client