Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0j5YyXGIHUSTewXXCtpDFUxJ2Sw.roa
File: 0j5YyXGIHUSTewXXCtpDFUxJ2Sw.roa (raw, json)
Hash identifier: exAzooqCO6BGjTVPpvr3z6VXEwcYhPydudkAPuopa2o=
Subject key identifier: D2:3E:58:C9:71:88:1D:44:93:7B:05:D7:0A:DA:43:15:4C:49:D9:2C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF44495B126014CC0804B09A28596118D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0j5YyXGIHUSTewXXCtpDFUxJ2Sw.roa
Signing time: Tue 23 Jun 2026 11:36:35 +0000
ROA not before: Tue 23 Jun 2026 11:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33915
IP address blocks: 87.85.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:44:95:b1:26:01:4c:c0:80:4b:09:a2:85:96:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 23 11:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d23e58c971881d44937b05d70ada43154c49d92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:2b:64:94:03:af:53:93:55:99:28:83:a9:
6e:a3:67:99:4b:81:ec:4e:50:a9:66:8c:7b:8b:6d:
d2:c0:d3:b4:da:90:4a:20:79:09:25:e8:27:46:08:
9a:18:21:ca:20:df:5c:39:d8:fd:e3:70:b2:3b:06:
6a:4e:6a:d5:5a:80:a5:b8:b1:8b:0e:1c:af:19:58:
c8:06:0a:c0:b9:bf:ce:c0:19:f7:3f:65:b5:1c:e5:
b5:30:12:b8:87:03:11:3b:0f:d9:f5:f6:39:1a:56:
df:13:8e:8c:6f:57:22:d8:89:1e:07:bd:34:f3:17:
e8:5d:1d:52:cd:da:b5:00:95:18:63:fb:ea:56:6a:
12:c7:0f:3c:69:93:fd:bf:b3:3e:61:fd:1e:50:43:
94:71:2e:38:ad:25:ad:58:98:6f:d3:4e:d5:f5:e1:
ec:c8:c8:ee:6b:0f:bc:40:74:f4:1c:1d:fc:cb:44:
9e:2b:87:33:17:a5:74:b1:ea:dd:8f:26:c6:44:92:
6f:13:5f:ff:e2:29:84:cb:13:db:1a:32:6d:27:1d:
f6:8a:92:84:5f:a9:20:89:c6:72:86:24:70:93:65:
9e:e7:f3:7d:19:f1:24:9e:0c:76:1c:ec:fc:0c:0d:
dc:c7:db:9b:36:4e:d6:57:54:8d:d5:7d:4e:8f:cc:
7c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3E:58:C9:71:88:1D:44:93:7B:05:D7:0A:DA:43:15:4C:49:D9:2C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0j5YyXGIHUSTewXXCtpDFUxJ2Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:ae:45:b1:75:82:ed:c6:96:f9:63:4d:67:03:bb:03:02:b4:
0b:4e:3d:75:92:c3:ec:93:fd:4a:b3:b1:2c:ed:71:4e:60:cc:
9a:5f:fb:8e:fe:25:df:f0:0a:15:d4:ee:73:6b:b1:2f:3e:ec:
e1:3b:d6:aa:b1:70:c0:81:4f:9a:76:78:29:a8:98:60:af:0e:
2b:fb:d7:c1:95:49:af:2d:e1:f3:ee:00:e1:57:08:90:44:af:
6e:5f:46:99:ad:79:9d:bb:92:71:5c:f8:bc:48:a2:ba:6d:5d:
d6:da:13:0f:89:68:88:47:27:a7:f4:83:1f:e8:c3:1e:c6:b9:
6a:cf:08:9a:96:2c:aa:6b:65:2a:66:0e:5f:ff:88:3c:37:83:
a0:84:9f:9a:d8:ae:06:9b:50:87:fd:58:9b:30:97:b6:53:6b:
be:e5:27:9b:0d:33:31:30:56:b8:da:94:4b:7a:c4:09:4e:53:
8c:66:9a:4f:d4:2f:dc:6b:e8:79:59:1b:cd:e4:6b:03:ac:e2:
f6:c2:5b:17:ef:d7:ea:f5:fb:9d:1f:91:a2:b2:b0:fa:78:7d:
8c:b9:43:d9:1d:3a:94:59:59:5b:26:6b:f6:45:8e:70:fb:20:
c0:74:f6:50:99:95:d9:71:6e:d4:e4:72:bd:ad:12:d2:71:a1:
a5:23:b2:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ70RJWxJgFMwIBLCaKFlhGNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjIzMTEzNjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjNlNThjOTcxODgxZDQ0OTM3YjA1ZDcwYWRhNDMxNTRjNDlkOTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvErZJQDr1OTVZkog6luo2eZS4Hs
TlCpZox7i23SwNO02pBKIHkJJegnRgiaGCHKIN9cOdj943CyOwZqTmrVWoCluLGL
DhyvGVjIBgrAub/OwBn3P2W1HOW1MBK4hwMROw/Z9fY5GlbfE46Mb1ci2IkeB700
8xfoXR1Szdq1AJUYY/vqVmoSxw88aZP9v7M+Yf0eUEOUcS44rSWtWJhv007V9eHs
yMjuaw+8QHT0HB38y0SeK4czF6V0serdjybGRJJvE1//4imEyxPbGjJtJx32ipKE
X6kgicZyhiRwk2We5/N9GfEkngx2HOz8DA3cx9ubNk7WV1SN1X1Oj8x8qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNI+WMlxiB1Ek3sF1wraQxVMSdksMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvMGo1WXlYR0lIVVNUZXdYWEN0cERGVXhKMlN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1VFMA0G
CSqGSIb3DQEBCwUAA4IBAQDCrkWxdYLtxpb5Y01nA7sDArQLTj11ksPsk/1Ks7Es
7XFOYMyaX/uO/iXf8AoV1O5za7EvPuzhO9aqsXDAgU+adngpqJhgrw4r+9fBlUmv
LeHz7gDhVwiQRK9uX0aZrXmdu5JxXPi8SKK6bV3W2hMPiWiIRyen9IMf6MMexrlq
zwialiyqa2UqZg5f/4g8N4OghJ+a2K4Gm1CH/VibMJe2U2u+5SebDTMxMFa42pRL
esQJTlOMZppP1C/ca+h5WRvN5GsDrOL2wlsX79fq9fudH5GisrD6eH2MuUPZHTqU
WVlbJmv2RY5w+yDAdPZQmZXZcW7U5HK9rRLScaGlI7I2
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client