Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-iI9c5j_ezpAytjN6t-oS7DdOuk.roa
File: 1-iI9c5j_ezpAytjN6t-oS7DdOuk.roa (raw, json)
Hash identifier: 7m4RMQJCeMA4uwHU8xb3+VYstr8L+FabRdu6IpqDaeU=
Subject key identifier: FA:22:3D:73:98:FF:7B:3A:40:CA:D8:CD:EA:DF:A8:4B:B0:DD:3A:E9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F4A758AE4FE4022A7709FE590666273D6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-iI9c5j_ezpAytjN6t-oS7DdOuk.roa
Signing time: Fri 10 Jul 2026 05:17:25 +0000
ROA not before: Fri 10 Jul 2026 05:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 87.83.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:75:8a:e4:fe:40:22:a7:70:9f:e5:90:66:62:73:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 10 05:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa223d7398ff7b3a40cad8cdeadfa84bb0dd3ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:9d:cc:86:da:c5:26:cc:9f:44:66:3b:fc:
45:c6:e0:05:0d:12:65:f3:cd:e9:dd:78:de:b7:f9:
62:1c:d1:72:5b:22:0f:5b:fd:1a:11:0f:f3:b2:57:
1a:10:a1:64:b2:ba:19:b9:c6:3d:3a:07:a1:b2:1c:
1e:f6:e7:b3:3b:d9:21:bc:51:1d:1e:d3:62:aa:46:
4b:78:05:7f:9a:b5:07:65:95:bd:46:62:bc:35:42:
26:23:de:2b:b3:92:10:79:65:70:ce:e4:68:5d:5b:
a0:45:3c:3e:a2:c9:ba:5e:f9:71:84:25:e6:2d:02:
c9:f7:fe:69:a8:b3:e1:90:ae:53:d7:02:d3:81:ff:
f5:67:ce:6d:65:0a:66:fc:2b:ed:3a:9c:b2:c0:18:
a9:78:13:d8:c3:f9:e6:fb:68:6d:7a:d9:cd:85:a3:
27:ef:7c:0e:53:0c:50:a4:17:38:ea:e6:2e:e1:e2:
06:75:12:26:6c:8a:23:0b:0f:34:40:d7:0a:6e:0c:
6c:9d:bd:09:5c:0b:69:5c:76:c0:fd:35:d8:bd:01:
9b:2a:f1:51:00:23:62:39:19:c3:03:31:b3:5d:14:
10:11:42:7f:f2:e8:f7:17:46:31:fe:cc:33:1a:08:
04:12:b3:78:18:2c:a2:88:14:28:62:bf:00:69:8f:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:22:3D:73:98:FF:7B:3A:40:CA:D8:CD:EA:DF:A8:4B:B0:DD:3A:E9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-iI9c5j_ezpAytjN6t-oS7DdOuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.121.0/24
Signature Algorithm: sha256WithRSAEncryption
48:03:d3:d7:aa:b1:46:67:7c:d1:2f:a2:3d:b2:58:fd:e4:b3:
d2:1f:67:2f:45:5c:b6:99:db:36:d0:47:60:1d:ed:9f:01:92:
2d:f2:c5:1f:00:b2:f2:78:3c:f2:ac:87:e0:87:37:69:08:17:
72:79:b0:a6:e5:99:78:79:51:39:5f:3e:15:87:dc:f9:07:b9:
e0:7f:eb:bc:84:48:dd:50:bf:78:f3:80:b6:0b:99:73:59:7d:
ed:5a:1f:33:33:f8:87:c2:09:1e:36:5f:ca:c2:ff:bc:7c:46:
28:ec:b8:39:84:49:ee:b5:b1:84:a0:5a:fe:40:01:8f:69:ff:
53:24:5d:5d:a2:68:8d:bb:6c:e7:8c:98:2f:df:ab:bc:8f:c5:
c5:01:ac:6f:5b:7d:12:6c:28:86:0c:dc:45:e9:d4:a7:c6:b8:
03:e9:ae:5c:80:d9:5a:81:ee:ef:0d:92:e4:9a:04:9d:5a:85:
ea:2e:f4:ee:6a:bb:70:ae:89:45:7c:64:28:0c:98:1d:a8:62:
f3:5c:62:dd:ed:e6:f6:f0:06:a8:68:c0:8f:10:a0:bf:12:9d:
e5:60:8e:ad:65:7d:69:e9:50:d7:1a:ff:b5:8a:aa:41:dd:24:
f0:9c:8b:9b:2e:13:a5:1e:7f:cc:aa:58:aa:1e:02:90:16:90:
18:2f:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:20 2026 by rpki-client