Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0kxylW3vtbbjRDeA8qYPgQHsU_I.roa
File: 0kxylW3vtbbjRDeA8qYPgQHsU_I.roa (raw, json)
Hash identifier: KYDLRC1fb2eZCRgjU0C1R1MGftirxcEVH5iVTd7qRt0=
Subject key identifier: D2:4C:72:95:6D:EF:B5:B6:E3:44:37:80:F2:A6:0F:81:01:EC:53:F2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0180706C894633DAD98063C272839CF54
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0kxylW3vtbbjRDeA8qYPgQHsU_I.roa
Signing time: Wed 19 Aug 2026 03:18:28 +0000
ROA not before: Wed 19 Aug 2026 03:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 87.84.70.0/24 maxlen: 24
212.134.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:07:06:c8:94:63:3d:ad:98:06:3c:27:28:39:cf:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 19 03:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d24c72956defb5b6e3443780f2a60f8101ec53f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:79:b3:6e:32:ef:3b:2e:e5:a9:9f:9a:d9:
01:88:78:27:21:fc:d3:20:3e:53:7c:60:6b:24:79:
85:97:30:ba:b7:17:b1:be:65:45:b9:e6:33:f6:d8:
a1:7c:67:d5:52:89:b2:2c:61:49:dc:6b:43:26:b3:
f9:d0:ba:27:62:2f:9e:bf:2f:59:97:05:58:bb:91:
f6:6c:fe:1f:50:c6:dc:fc:bd:1f:15:46:30:cc:be:
c8:7b:a8:76:85:38:9e:ab:f5:77:ea:87:58:32:85:
cc:95:a5:2f:f8:7c:44:c1:4b:f4:06:2d:70:2f:b1:
d5:0f:77:43:75:b1:d6:75:09:03:d7:a7:8d:71:52:
8b:19:b6:35:a3:02:69:40:dc:11:ec:06:b9:bc:d5:
2d:ec:b8:af:fc:d9:04:00:3c:51:95:c0:8e:c7:a1:
38:de:99:6a:50:71:36:77:11:18:a0:f1:98:96:78:
06:07:c8:74:45:af:93:06:62:8a:16:6e:76:2a:da:
77:cd:d8:53:2b:dd:03:b1:c8:c6:68:d0:e1:f5:05:
ec:0c:01:91:59:37:fb:12:6f:bd:33:fe:a2:d3:a4:
85:5b:b7:fd:28:ae:77:2a:6a:5c:e4:d2:ed:29:46:
53:b7:0c:1f:1c:59:33:77:5e:36:4d:55:10:4d:73:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4C:72:95:6D:EF:B5:B6:E3:44:37:80:F2:A6:0F:81:01:EC:53:F2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0kxylW3vtbbjRDeA8qYPgQHsU_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.70.0/24
212.134.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:86:cc:b1:e5:06:9e:00:58:33:f9:01:6f:b2:ad:20:eb:5a:
35:3a:40:88:32:87:9e:fe:02:7b:cc:37:f2:26:0a:5b:c2:f2:
7e:a6:96:2b:8a:9b:fd:f6:f4:7c:07:05:49:c4:17:2f:fa:e4:
81:da:11:25:df:57:73:f5:a6:e8:e6:2c:03:fb:80:71:5d:21:
37:e9:e4:01:1a:8a:9c:af:75:a8:79:ea:7d:42:86:b7:63:c8:
2b:ce:e5:e7:ed:73:d3:be:31:af:68:0b:90:dc:ad:45:d2:da:
7c:d2:e0:70:46:59:02:f6:06:a4:54:06:2d:08:20:88:ca:26:
de:8f:fa:2e:ba:da:1a:58:3e:55:1a:8b:fe:87:b4:e8:65:2f:
c3:7e:50:aa:f2:06:13:42:47:87:5d:51:fa:f8:68:1c:4a:86:
d7:5e:23:85:ff:74:90:7f:7c:31:f0:9e:8a:0e:41:73:c8:9f:
14:55:17:9c:9d:0b:23:5d:1d:71:43:11:96:55:14:60:9a:48:
bf:d2:ca:a1:32:9e:4b:02:8f:47:a0:f3:ba:99:99:92:b3:d6:
c8:a8:86:60:62:e6:1e:1c:09:92:28:df:77:71:29:e6:1b:3a:
56:b2:85:04:12:60:30:6e:3a:2e:be:ff:28:35:de:6c:5d:2d:
5c:a2:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:01 2026 by rpki-client