Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7sEgSdebp8X5045Rll4GMSIL8jo.roa
File: 7sEgSdebp8X5045Rll4GMSIL8jo.roa (raw, json)
Hash identifier: 20omi1rCg9Jt/gg643Nd8VSo5UmnXBpjvQgZJUmggWU=
Subject key identifier: EE:C1:20:49:D7:9B:A7:C5:F9:D3:8E:51:96:5E:06:31:22:0B:F2:3A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF4B2E2FAE0602A9164C4F4FD2075B3C0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7sEgSdebp8X5045Rll4GMSIL8jo.roa
Signing time: Wed 12 Aug 2026 06:39:51 +0000
ROA not before: Wed 12 Aug 2026 06:39:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142497
IP address blocks: 87.82.232.0/24 maxlen: 24
87.86.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:b2:e2:fa:e0:60:2a:91:64:c4:f4:fd:20:75:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 12 06:39:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eec12049d79ba7c5f9d38e51965e0631220bf23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dc:ed:60:62:be:33:59:10:2c:83:94:8a:3b:
b2:14:7c:6a:f9:f5:85:c8:1b:39:a3:32:9c:9e:c3:
98:50:6a:4b:dc:a8:d4:63:47:d2:5b:57:44:b1:2d:
5a:d9:da:42:22:6a:1f:d6:4a:bb:0c:46:da:ca:ae:
5a:e8:da:e5:e3:b4:67:0b:c5:35:ba:16:22:c4:c3:
a8:9b:2d:14:e6:c2:bd:a5:b3:ad:e8:21:17:8d:ad:
f1:16:a8:71:67:d7:70:68:b8:b6:c0:52:63:7d:01:
d2:2c:b2:ce:40:56:14:c6:d9:d7:a9:8d:5a:49:54:
2d:0a:96:e5:f0:4d:bf:a5:13:93:77:bb:09:00:4c:
03:85:b9:5c:05:33:61:de:35:bc:aa:6f:92:3e:25:
88:29:21:22:ed:fc:3e:4b:b2:8c:5f:43:ca:98:b2:
e2:07:6c:97:eb:da:4b:0a:e7:eb:c3:37:33:e3:e0:
e8:34:dd:96:7b:f1:0e:58:e7:1e:91:f0:c3:8d:5f:
d4:64:bb:2d:a4:33:29:7c:c8:ae:46:64:0c:94:e8:
1c:43:ec:7f:2f:09:31:1d:24:b2:c4:82:81:88:c2:
37:38:14:fc:95:53:de:22:30:87:a8:c7:42:52:5a:
05:48:a0:75:60:64:74:3a:f6:69:63:8a:89:42:66:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:20:49:D7:9B:A7:C5:F9:D3:8E:51:96:5E:06:31:22:0B:F2:3A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7sEgSdebp8X5045Rll4GMSIL8jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.232.0/24
87.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a6:33:b3:90:d4:e1:0d:e0:1a:60:ef:ef:96:1a:1a:22:4a:
12:19:c9:3f:84:4e:06:8d:bb:f1:78:32:bc:6d:7d:43:cc:39:
45:49:97:fc:b9:70:57:0a:db:bb:c3:6e:ba:68:e0:30:8f:3c:
0c:c0:21:d5:9a:85:27:b2:cc:5e:b7:e4:7d:f0:bb:6e:68:2b:
75:c0:26:87:ee:b6:76:c1:c5:37:7f:6d:b1:6d:e9:94:e8:ee:
18:98:bf:be:21:b7:d9:9b:95:bf:d2:57:50:d5:21:c6:0c:94:
6c:17:05:84:bc:f7:d7:a5:4d:8b:8a:40:7a:18:6a:c0:4c:25:
41:46:9d:f3:f3:97:4c:54:b3:c7:24:ce:56:c9:c3:a4:92:13:
fc:6f:ee:1a:f3:ab:09:1e:c8:79:4b:95:c5:3b:65:9d:52:18:
e7:92:55:05:06:05:98:36:ce:2d:11:8a:b9:0e:3f:f6:f7:83:
61:d0:f7:02:65:cb:09:00:e6:c8:52:74:b7:ad:59:5f:b3:fd:
f1:5a:2c:65:9d:7e:df:be:24:21:dd:d3:94:27:10:88:57:fc:
a9:64:48:02:c3:e3:6f:51:c3:4b:c7:12:f3:7d:52:0d:09:74:
4b:0c:c0:77:f4:23:4f:63:ec:ff:a7:26:73:50:81:e1:94:ac:
f8:e0:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:54 2026 by rpki-client