Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6pdBNXwRNkH7R8O3UWRL_kD-KPg.roa
File: 6pdBNXwRNkH7R8O3UWRL_kD-KPg.roa (raw, json)
Hash identifier: ZSXzTIEpNFyyDL2wVR38G6RQPYs6RJtojRHHX7aM7GM=
Subject key identifier: EA:97:41:35:7C:11:36:41:FB:47:C3:B7:51:64:4B:FE:40:FE:28:F8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0ECB5E756CC68A79E325DB3EAB5EE8E34
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6pdBNXwRNkH7R8O3UWRL_kD-KPg.roa
Signing time: Tue 29 Sep 2026 10:28:59 +0000
ROA not before: Tue 29 Sep 2026 10:28:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11421
IP address blocks: 87.86.22.0/24 maxlen: 24
87.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:b5:e7:56:cc:68:a7:9e:32:5d:b3:ea:b5:ee:8e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 29 10:28:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea9741357c113641fb47c3b751644bfe40fe28f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:92:70:0e:50:45:08:02:fe:df:69:df:58:
33:8d:e6:9e:41:cb:ec:84:25:26:b8:6f:92:a0:c2:
95:a5:c9:06:71:bc:12:37:57:61:bd:1c:b6:dc:74:
8e:20:88:4d:81:47:16:14:cc:d8:78:52:fc:41:32:
98:83:89:c6:61:b8:7e:b0:6f:57:98:de:50:f6:24:
ef:75:11:fb:b4:27:db:21:da:fe:90:42:24:63:42:
73:42:64:58:ac:ac:0f:f7:70:ea:8b:d8:3e:3a:79:
ba:e3:c1:67:01:28:13:7c:2d:02:6d:79:2a:82:b5:
b5:d9:81:9a:5e:49:16:02:3d:84:2f:4d:73:8a:97:
ab:42:e5:e6:f8:7a:50:b3:4b:81:01:23:04:a5:17:
ed:83:bd:c1:d6:06:50:28:42:00:a6:c8:05:35:e1:
1f:4a:c2:3e:db:f1:1d:7a:4c:12:c0:13:ba:73:c7:
4e:ae:2f:1d:33:87:b6:25:34:7c:8d:1b:df:d5:67:
c8:d4:2f:52:0a:8b:b0:c8:0e:76:13:2e:e4:4a:f4:
7c:7f:21:43:54:c3:98:8e:f5:d4:53:e7:89:c7:79:
c0:4a:77:c5:c4:96:5d:48:c6:4e:40:81:5f:90:ea:
0e:88:17:7f:21:a9:05:dd:60:02:ca:89:07:7d:50:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:97:41:35:7C:11:36:41:FB:47:C3:B7:51:64:4B:FE:40:FE:28:F8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/6pdBNXwRNkH7R8O3UWRL_kD-KPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.22.0/24
87.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a9:8d:f4:03:6c:af:dd:23:a5:27:43:0d:80:a8:4b:7d:50:
7c:1b:a8:c6:34:f6:04:07:22:18:6c:04:71:21:f2:73:9a:39:
e8:67:51:4e:66:ce:a5:10:db:52:a5:ba:08:b5:a3:b2:d0:5c:
f1:61:1a:57:40:2c:e7:76:71:07:82:ee:06:8c:6a:61:35:d2:
46:93:13:e6:b8:3d:04:73:06:9a:7d:65:ea:17:d4:03:92:12:
78:75:a5:f8:15:f0:1f:9f:60:7b:98:6e:8e:ce:f5:5f:bd:6f:
3e:f1:c6:bd:69:3f:d5:df:c5:df:51:ef:5b:c7:70:41:01:d5:
b2:40:d1:99:fb:24:60:be:c2:ef:ff:ec:39:3f:f2:fe:36:5d:
34:aa:8f:72:07:8b:2f:97:b3:e1:8b:68:ba:28:b4:a9:d2:c0:
6f:59:2a:d7:f0:5e:a8:66:5b:ed:92:69:e3:56:c0:40:72:56:
6c:e1:1c:94:39:20:93:18:6c:0f:f8:51:12:f6:94:72:92:f0:
a7:95:d1:b1:56:12:0b:5d:74:01:6d:55:20:78:82:c6:1d:d2:
0c:15:43:f9:c3:22:c2:f9:79:7c:53:f3:f7:ee:8b:0c:9f:ea:
c1:8b:dc:79:c2:61:eb:86:2e:e8:c1:0a:47:94:55:67:31:3b:
2c:20:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:28 2026 by rpki-client