Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-JmTRQhcN_XvusDI9JVCZ19OW_M.roa
File: 1-JmTRQhcN_XvusDI9JVCZ19OW_M.roa (raw, json)
Hash identifier: rvComv9YyXCa7/TzGoBqAbkuVfnEXSRD8DXIvXRrmtE=
Subject key identifier: F8:99:93:45:08:5C:37:F5:EF:BA:C0:C8:F4:95:42:67:5F:4E:5B:F3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F12515246812CE934B9D80E6788CB95D7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-JmTRQhcN_XvusDI9JVCZ19OW_M.roa
Signing time: Mon 29 Jun 2026 07:39:07 +0000
ROA not before: Mon 29 Jun 2026 07:39:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205987
IP address blocks: 87.83.174.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:51:52:46:81:2c:e9:34:b9:d8:0e:67:88:cb:95:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 29 07:39:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8999345085c37f5efbac0c8f49542675f4e5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:24:1c:17:70:2f:f4:38:a1:29:60:3c:db:
fe:9c:41:c3:22:4a:e3:b9:98:52:ca:35:e5:27:ad:
95:97:16:f3:85:e0:1d:26:3a:7b:77:a0:15:72:dc:
3d:75:95:4d:79:c0:d8:01:c7:b9:f4:4a:f5:69:b3:
9d:79:54:81:cc:9d:5a:ca:ea:95:97:18:91:58:67:
8c:97:25:90:07:60:71:ef:d8:73:69:d8:a1:17:1c:
f9:bf:27:51:8a:c3:0a:29:29:20:cd:29:83:f5:7c:
e7:67:76:3b:9a:1e:e7:5c:99:7d:39:dc:4c:a6:b0:
6f:40:30:83:29:dd:95:34:b0:8a:ea:46:e5:bd:84:
cb:55:1f:58:b4:be:9c:2b:a5:51:a2:35:f1:34:26:
9f:14:a8:28:55:b4:cf:9a:ff:63:24:cb:f9:d2:87:
da:44:65:54:ef:f6:87:4f:bc:aa:d1:8b:5f:37:15:
c4:5d:aa:a6:df:1f:bf:6f:4c:e2:d4:b6:55:81:41:
da:c6:5c:99:7e:06:df:32:29:fb:23:29:86:36:91:
48:52:f2:f0:b5:03:a4:3e:a9:0e:67:a6:ee:47:9b:
68:9b:2e:11:23:53:b9:de:3d:59:f3:7d:68:0b:65:
bf:da:31:54:e7:2c:77:46:b3:70:af:50:fe:f7:ec:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:99:93:45:08:5C:37:F5:EF:BA:C0:C8:F4:95:42:67:5F:4E:5B:F3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-JmTRQhcN_XvusDI9JVCZ19OW_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.174.0/24
87.84.76.0/24
87.84.220.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:39:28:bf:99:99:26:3e:2a:4c:c8:76:19:d8:97:4c:c3:25:
a8:e7:e6:3d:88:21:5b:66:80:7a:a1:5d:e7:cb:00:67:c7:0b:
68:2a:01:09:4f:12:78:56:0d:8f:f2:78:59:ac:cc:b2:74:c5:
e8:ee:e1:a5:3d:63:cf:92:dc:82:8a:7b:b1:2a:7b:a5:f6:1e:
da:54:e8:b7:fb:1e:47:c5:70:e9:14:17:f1:64:bb:cc:d7:9e:
c4:50:3d:1e:dc:0b:54:00:87:da:2d:36:5e:68:85:7d:8f:57:
68:12:aa:55:de:fc:a3:bc:4c:9d:8f:f9:f1:dc:1f:ac:33:68:
2c:dc:fc:18:70:cd:bc:b7:09:a2:f8:a3:fa:6d:3f:02:32:92:
bb:bb:3c:dd:bc:90:86:5e:ba:5a:30:19:7b:24:53:9b:56:8c:
9b:98:9f:1a:1b:da:5c:e1:5e:d9:cd:24:80:88:d5:2d:c8:c2:
09:27:67:02:ca:28:5b:ee:22:c5:47:39:15:0c:ce:11:89:19:
6e:55:d1:6b:e3:5c:3c:f1:d9:99:41:81:84:f2:bc:ec:91:d1:
22:86:2f:00:d2:90:0f:42:61:f9:e9:2c:57:84:23:46:7e:5a:
b3:1d:30:1c:0c:63:e0:32:f9:97:d7:e2:bf:e5:09:77:cd:19:
2c:b0:ec:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client