Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7t_n0f86WzRL5J8UYmkQHgvEWA4.roa
File: 7t_n0f86WzRL5J8UYmkQHgvEWA4.roa (raw, json)
Hash identifier: 8wv1xlG1//wsGEXKNRcgER+xH49XS+reUluIurSpZnc=
Subject key identifier: EE:DF:E7:D1:FF:3A:5B:34:4B:E4:9F:14:62:69:10:1E:0B:C4:58:0E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EEFB9DDE4A9FC2EC432D55FDF8E606B5A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7t_n0f86WzRL5J8UYmkQHgvEWA4.roa
Signing time: Mon 22 Jun 2026 14:26:36 +0000
ROA not before: Mon 22 Jun 2026 14:26:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214647
IP address blocks: 87.85.130.0/24 maxlen: 24
87.86.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:b9:dd:e4:a9:fc:2e:c4:32:d5:5f:df:8e:60:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 22 14:26:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eedfe7d1ff3a5b344be49f146269101e0bc4580e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:33:d7:8d:ca:10:e8:d4:dc:a0:ff:5a:39:
fd:9b:ff:15:93:17:7e:4b:2d:8e:de:c5:93:4d:6b:
dc:46:73:41:f0:20:08:54:99:88:68:2a:06:f0:1c:
b4:27:0d:92:63:8b:aa:2e:6b:aa:3f:d5:10:8c:bc:
e1:27:6b:1d:f0:fc:38:01:01:c2:7f:cb:4b:0e:47:
4e:42:ee:24:c3:7b:9c:71:f5:49:7b:f3:d3:f1:dc:
0d:97:32:f1:41:3b:0d:ad:61:e5:3e:7e:61:d0:fa:
8d:09:20:79:25:f5:a6:74:3f:cf:4e:19:16:c6:fa:
e4:a7:85:59:01:ac:db:25:bc:d5:4c:84:86:a9:b8:
cd:ce:ef:53:66:3d:08:df:9e:d2:a1:35:21:c5:cc:
d4:62:bc:8b:92:c0:02:8b:79:d8:fa:62:ea:b0:d0:
84:b5:46:3d:b3:05:5f:b6:72:c0:8f:62:7c:ff:b5:
94:e9:55:41:86:ad:e9:ff:c7:d6:6c:9b:27:8a:91:
77:37:ff:ba:20:1a:e2:d3:1f:dd:aa:0f:ce:5b:11:
8d:c4:aa:f9:65:1a:3b:14:85:9a:82:95:db:b1:ee:
09:88:28:f9:fc:54:8e:ad:f3:bf:8f:4f:b7:64:6a:
41:f6:45:43:11:44:b2:11:14:15:8a:f9:6e:c5:a5:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:E7:D1:FF:3A:5B:34:4B:E4:9F:14:62:69:10:1E:0B:C4:58:0E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/7t_n0f86WzRL5J8UYmkQHgvEWA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.130.0/24
87.86.183.0/24
Signature Algorithm: sha256WithRSAEncryption
44:91:5a:56:99:f3:68:32:4b:61:fd:5e:a3:1d:a7:f0:c3:7c:
68:d6:3c:3e:72:93:df:b7:f0:bf:8a:9d:75:9b:6a:dc:e9:96:
c3:38:92:8b:99:4d:bd:4d:f5:84:48:29:8c:86:4e:9e:39:46:
5f:61:16:38:98:c8:b1:e2:5a:be:27:e3:47:8c:b4:41:d9:f0:
39:1a:1e:25:38:62:c4:aa:49:34:62:2c:d5:55:50:31:77:75:
cf:49:fb:36:74:09:77:75:56:a9:7b:24:18:4a:e0:8a:aa:2a:
5a:99:3c:15:eb:1d:22:d5:ff:a4:18:36:df:90:77:6c:e6:57:
78:97:f8:08:cb:8a:c7:7c:5c:57:eb:97:e2:2c:18:3b:ba:6c:
3f:3a:43:75:0d:a1:f7:dd:40:f2:f0:e1:25:74:b1:bd:9f:59:
3e:5a:aa:3e:4f:9b:74:64:1c:80:35:60:1a:02:6b:12:e6:51:
0a:61:2c:d1:3e:f8:26:97:55:26:c4:d8:e0:b8:12:48:b8:07:
e0:d8:d6:3a:75:4b:4d:b7:40:c7:4d:ad:f7:65:e6:cb:9e:c6:
d6:4e:e7:d6:5a:6c:7e:88:b2:68:07:97:6d:80:11:fd:76:28:
6e:5e:37:e2:de:c6:7f:b1:1c:20:77:3d:a0:f2:db:a6:bd:4a:
51:90:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:19 2026 by rpki-client