Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0O7a5jlSVbzC2NqLLI9ZFmT7hNQ.roa
File: 0O7a5jlSVbzC2NqLLI9ZFmT7hNQ.roa (raw, json)
Hash identifier: Bqbde+L2GE6rR4zVI9Sih5/rOxWmQ/lw90MDm1BC93A=
Subject key identifier: D0:EE:DA:E6:39:52:55:BC:C2:D8:DA:8B:2C:8F:59:16:64:FB:84:D4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EDD72CC518F236788436D74DBDD7A0712
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0O7a5jlSVbzC2NqLLI9ZFmT7hNQ.roa
Signing time: Fri 19 Jun 2026 01:15:48 +0000
ROA not before: Fri 19 Jun 2026 01:15:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16125
IP address blocks: 87.86.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:72:cc:51:8f:23:67:88:43:6d:74:db:dd:7a:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 19 01:15:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0eedae6395255bcc2d8da8b2c8f591664fb84d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:78:a3:cb:3f:fc:77:52:8f:95:08:9a:d9:
5b:79:a8:23:a0:d2:ca:69:a0:3f:af:e0:f4:99:80:
d3:63:1e:48:17:52:f0:fa:42:a1:5c:03:72:98:60:
96:52:8f:94:b2:c4:bb:04:03:23:13:da:24:29:36:
a6:c3:13:9b:54:34:a8:30:5c:e0:84:5b:cb:b1:9d:
5a:1b:dc:c5:39:38:fe:53:8b:3b:bb:69:82:f5:9b:
a2:aa:64:6c:c7:61:c8:13:0c:c5:7b:1c:ed:92:05:
a3:4a:94:f9:ec:67:bf:1d:fb:62:fe:67:2c:c1:17:
e7:fc:71:4d:ab:2e:e3:80:5d:01:3d:2b:13:c4:e8:
02:2a:58:3d:b8:57:49:a4:79:15:2e:21:d8:02:b4:
89:08:a4:2c:16:fe:bf:aa:c5:e4:93:47:d3:fe:41:
84:38:8b:59:d3:66:6e:92:f7:1d:f5:be:23:48:c8:
9e:03:6d:e0:72:8c:12:24:e2:37:e6:b4:63:b6:36:
81:d9:ee:c5:2e:18:f5:fa:72:ac:ba:2f:0a:ee:57:
31:15:49:77:fc:1b:2b:16:4f:9e:a8:11:39:12:2e:
a2:37:72:10:36:7b:9e:15:aa:75:7f:04:fd:4e:d3:
7b:40:d0:0d:82:73:2c:27:c6:93:31:c3:11:58:45:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EE:DA:E6:39:52:55:BC:C2:D8:DA:8B:2C:8F:59:16:64:FB:84:D4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0O7a5jlSVbzC2NqLLI9ZFmT7hNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.182.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:7b:da:bb:7f:66:7d:06:b5:da:3e:55:5c:bb:c5:ed:d3:
2b:aa:74:2e:28:b7:2b:0c:86:d3:7d:a3:fe:8f:8a:e5:34:76:
ac:fd:84:b7:8d:85:85:3e:20:66:9d:ba:e3:da:b0:9f:b2:1a:
18:94:c4:0c:ef:b8:26:57:54:91:10:27:ba:f8:f5:4c:6f:04:
49:89:a9:72:a5:c5:bb:f3:5d:24:3f:79:9e:5a:d0:52:40:35:
f7:64:6d:d3:59:04:b0:71:77:27:b4:51:75:88:6c:bf:c9:11:
47:2f:42:2d:b4:e3:b5:f5:67:2f:d6:0f:5e:43:38:5b:60:62:
70:6d:27:4e:59:a9:ee:aa:ed:93:c4:78:c1:39:56:3b:e2:5f:
23:db:0a:1d:93:76:15:f8:00:1b:79:01:6e:cf:4d:cd:9b:b7:
aa:e1:af:86:79:22:ae:59:17:8c:3f:a3:60:9d:5c:14:65:23:
ed:42:57:6f:08:c0:b8:c7:86:40:af:43:5b:79:5e:f3:9d:6d:
07:77:fa:b4:fd:e5:7b:8f:65:30:6d:b4:cb:25:35:67:d2:9e:
6c:33:2f:28:2c:62:9e:fd:ce:81:aa:b5:f5:6c:aa:74:41:3b:
8d:cb:65:f0:6f:bd:96:de:98:8f:f7:7e:f0:4d:ce:70:62:5c:
40:d8:09:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7dcsxRjyNniENtdNvdegcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjE5MDExNTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGVlZGFlNjM5NTI1NWJjYzJkOGRhOGIyYzhmNTkxNjY0ZmI4NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt14o8s//HdSj5UImtlbeagjoNLK
aaA/r+D0mYDTYx5IF1Lw+kKhXANymGCWUo+UssS7BAMjE9okKTamwxObVDSoMFzg
hFvLsZ1aG9zFOTj+U4s7u2mC9ZuiqmRsx2HIEwzFexztkgWjSpT57Ge/Hfti/mcs
wRfn/HFNqy7jgF0BPSsTxOgCKlg9uFdJpHkVLiHYArSJCKQsFv6/qsXkk0fT/kGE
OItZ02Zukvcd9b4jSMieA23gcowSJOI35rRjtjaB2e7FLhj1+nKsui8K7lcxFUl3
/BsrFk+eqBE5Ei6iN3IQNnueFap1fwT9TtN7QNANgnMsJ8aTMcMRWEW7PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDu2uY5UlW8wtjaiyyPWRZk+4TUMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvME83YTVqbFNWYnpDMk5xTExJOVpGbVQ3aE5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1a2MA0G
CSqGSIb3DQEBCwUAA4IBAQBJHnvau39mfQa12j5VXLvF7dMrqnQuKLcrDIbTfaP+
j4rlNHas/YS3jYWFPiBmnbrj2rCfshoYlMQM77gmV1SRECe6+PVMbwRJialypcW7
810kP3meWtBSQDX3ZG3TWQSwcXcntFF1iGy/yRFHL0IttOO19Wcv1g9eQzhbYGJw
bSdOWanuqu2TxHjBOVY74l8j2wodk3YV+AAbeQFuz03Nm7eq4a+GeSKuWReMP6Ng
nVwUZSPtQldvCMC4x4ZAr0NbeV7znW0Hd/q0/eV7j2UwbbTLJTVn0p5sMy8oLGKe
/c6BqrX1bKp0QTuNy2Xwb72W3piP937wTc5wYlxA2Al+
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:12 2026 by rpki-client