Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8r7vUbmttKbiRIm1lhPjahkTaM0.roa
File: 8r7vUbmttKbiRIm1lhPjahkTaM0.roa (raw, json)
Hash identifier: AfCXF6WRbh9hvQEPYOm9GaMI/St21wX+3Wqy8IJg3SI=
Subject key identifier: F2:BE:EF:51:B9:AD:B4:A6:E2:44:89:B5:96:13:E3:6A:19:13:68:CD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A068AD467ED2424736E32C14CF4E3F031E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8r7vUbmttKbiRIm1lhPjahkTaM0.roa
Signing time: Thu 03 Sep 2026 19:09:41 +0000
ROA not before: Thu 03 Sep 2026 19:09:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 87.85.138.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:ad:46:7e:d2:42:47:36:e3:2c:14:cf:4e:3f:03:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 19:09:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2beef51b9adb4a6e24489b59613e36a191368cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:e8:55:6b:b2:5a:99:62:1a:54:bc:5b:4e:
a0:c3:0d:3a:4c:02:91:f9:e5:b8:37:7c:75:96:51:
2f:d4:60:7a:c9:30:5a:77:95:de:27:44:69:10:d5:
ad:42:e7:07:9a:71:d1:a7:6d:f6:af:1a:67:56:d3:
5d:39:8a:ae:20:8d:96:95:1f:d8:d0:57:cb:8f:65:
b0:29:68:84:fc:56:29:eb:17:b4:43:b0:a0:0d:59:
f7:0b:6c:87:29:0e:40:70:3e:38:6c:db:71:5a:9f:
92:ee:17:24:94:c5:73:b5:bd:0e:47:dd:23:42:4c:
3f:b3:98:2e:58:90:67:69:c7:6a:a3:fa:0f:61:87:
8e:09:f7:a5:60:34:77:25:b5:d1:99:04:82:c3:c4:
e7:87:f0:76:3d:94:5b:af:64:ce:b9:f4:6c:67:ca:
54:fa:cc:ca:a2:8c:ff:50:dd:03:7e:c1:bd:14:57:
21:a6:01:ba:b0:05:e6:19:29:e3:00:d3:b1:ca:d1:
26:1d:61:0c:fa:95:92:2d:a8:f8:79:b5:68:2b:af:
19:41:9a:ab:c3:4f:c1:9a:8a:29:94:e2:f8:4d:df:
c2:3b:b3:56:0f:a6:c9:64:9e:38:53:39:cd:90:6c:
50:40:6f:3b:3b:8c:7f:64:ae:55:6b:e0:84:bf:13:
91:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BE:EF:51:B9:AD:B4:A6:E2:44:89:B5:96:13:E3:6A:19:13:68:CD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8r7vUbmttKbiRIm1lhPjahkTaM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.138.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:94:fe:9e:dc:8c:a3:74:eb:9c:8e:f2:48:b5:51:3c:6a:77:
f6:4e:81:97:4c:33:db:d4:2d:05:88:5c:4d:a0:35:84:ff:28:
33:2d:5d:20:02:d9:cf:07:a6:fe:37:7c:9e:45:3a:03:92:4c:
5b:5e:b4:95:41:63:1a:a5:2c:13:99:64:8f:92:16:61:7b:32:
42:59:be:2d:e0:a4:34:5c:c3:b2:ca:20:82:3e:d3:b3:8f:f4:
b0:0c:cb:3c:b0:7a:dc:d1:0c:49:00:c7:ff:f6:d9:9c:c8:eb:
9b:3e:26:6e:d6:8a:19:18:af:f5:e4:ee:cb:43:5c:ec:b1:a9:
78:df:47:83:28:03:52:0d:02:70:19:83:48:3e:a7:83:bb:b8:
10:1c:fb:ef:75:57:d4:bc:05:9e:bd:47:e8:7d:52:8c:cf:1e:
6b:06:69:e8:d3:dc:f5:7d:69:a5:df:18:96:38:57:bc:aa:57:
6f:3d:fd:78:a1:f9:09:81:30:df:aa:78:b1:09:f9:3f:c7:00:
4b:9b:46:e7:7a:94:40:0c:bd:c0:7d:67:c1:0c:bf:50:86:9b:
a6:64:b7:a2:67:5b:a2:c1:6f:cc:4e:07:5b:1b:8b:b1:f5:0a:
a3:42:5e:38:fa:dd:d5:de:04:71:1f:21:d6:02:8f:71:76:98:
e8:9d:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:43:13 2026 by rpki-client