Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CgbSjlx9kswpY53AZLmD2wm9hRU.roa
File: CgbSjlx9kswpY53AZLmD2wm9hRU.roa (raw, json)
Hash identifier: IEld5Ww0eJxMfBJ82+Bqu0/ztdmb9olBJRIdEOztRS8=
Subject key identifier: 0A:06:D2:8E:5C:7D:92:CC:29:63:9D:C0:64:B9:83:DB:09:BD:85:15
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A032577BD06990A2F58FA55A13EC2C1699
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CgbSjlx9kswpY53AZLmD2wm9hRU.roa
Signing time: Mon 24 Aug 2026 05:56:29 +0000
ROA not before: Mon 24 Aug 2026 05:56:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 87.82.245.0/24 maxlen: 24
87.84.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:57:7b:d0:69:90:a2:f5:8f:a5:5a:13:ec:2c:16:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 24 05:56:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a06d28e5c7d92cc29639dc064b983db09bd8515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:7e:7f:15:5c:ce:54:8e:6e:eb:85:cb:5c:
f0:23:80:f8:d3:39:15:8a:66:7f:2f:a6:97:8f:99:
99:e9:fc:80:65:93:3f:ea:2f:63:75:81:31:ea:f2:
e0:ba:f5:d1:7f:c4:0f:04:ed:f4:e5:22:98:5c:90:
93:9e:2b:4c:1f:a7:77:4d:f5:23:1f:58:df:3f:2a:
a1:d5:11:86:dc:59:92:6f:e3:d7:4b:78:f6:9f:0c:
0a:7e:66:5f:25:31:e9:6d:91:92:8a:7a:08:6f:d4:
3f:c0:5c:48:fb:b3:92:79:89:ea:fc:d8:5f:ac:29:
d3:8a:5a:bb:d8:0f:e6:6e:02:e6:8d:68:51:1d:af:
6c:6f:c0:ad:51:f0:66:eb:e6:3c:a9:51:c2:76:5d:
eb:9b:d4:fe:2c:3e:a2:17:db:6c:51:01:cd:b9:08:
c2:d4:39:9d:af:c3:c7:9b:14:72:a3:fd:8e:f8:ee:
07:48:8c:bf:64:c4:fb:96:2f:b1:ce:6c:84:55:df:
8b:c7:85:55:50:ff:79:5b:a4:02:97:9d:63:e5:73:
d1:e0:eb:ac:87:0e:d7:45:80:f9:6b:9f:a6:7b:d7:
cc:53:9f:f9:48:ae:60:56:ac:8c:7f:de:43:86:92:
9c:b5:66:5f:ee:b6:23:32:c3:1a:f2:69:57:44:99:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:D2:8E:5C:7D:92:CC:29:63:9D:C0:64:B9:83:DB:09:BD:85:15
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CgbSjlx9kswpY53AZLmD2wm9hRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.245.0/24
87.84.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c3:0e:c5:09:88:44:02:0f:47:07:f0:3c:15:a6:da:19:94:
9d:68:3d:fc:f2:7e:bb:4c:fc:ac:68:de:45:f8:28:51:9a:81:
8f:35:2a:3f:12:a5:fe:ee:a2:20:1d:f8:04:61:d3:5e:e3:74:
0e:c4:02:a1:cd:fa:a6:eb:16:7a:88:9b:52:9b:0a:6c:19:05:
c4:c1:68:09:d3:6f:bc:47:9c:3c:4e:67:48:71:bd:46:d9:fb:
97:7d:72:7c:1c:7b:ae:6d:e0:f8:d2:19:75:56:d6:2f:b4:41:
53:34:b0:6f:2b:9f:ec:e9:c8:f6:ff:22:46:43:3f:4f:e1:0a:
0a:17:f8:18:6a:15:8d:9b:76:8c:8e:22:91:38:6b:14:84:b5:
9a:2b:f3:67:f0:03:a4:79:e5:12:6a:f8:18:a5:9d:ac:b6:bc:
4c:37:9d:dc:d9:00:7d:82:c0:1e:4a:de:26:e5:1a:24:35:1b:
ca:fc:67:64:43:01:3f:09:24:48:0c:30:de:d0:e2:cf:fe:f7:
4d:b9:6a:a2:41:88:de:5a:2d:02:d4:65:12:5c:b1:00:1c:8a:
c5:f5:1f:e9:95:c4:d3:07:03:ac:d4:39:bf:f0:8a:5b:57:b4:
7c:8a:31:09:8b:6a:e7:89:00:f9:97:50:5d:1b:55:2d:9b:70:
ab:53:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:15 2026 by rpki-client