Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E4WlqdFxbdKXHTMXnnW1TM_0wMM.roa
File: E4WlqdFxbdKXHTMXnnW1TM_0wMM.roa (raw, json)
Hash identifier: NIRLZ1ryZxM/Cku42/OCn7DwI0dS9q4Wsc3utBOCjic=
Subject key identifier: 13:85:A5:A9:D1:71:6D:D2:97:1D:33:17:9E:75:B5:4C:CF:F4:C0:C3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F1B79A49091F8B736C0C7DF059F6798B5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E4WlqdFxbdKXHTMXnnW1TM_0wMM.roa
Signing time: Wed 01 Jul 2026 02:19:44 +0000
ROA not before: Wed 01 Jul 2026 02:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134038
IP address blocks: 87.83.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:79:a4:90:91:f8:b7:36:c0:c7:df:05:9f:67:98:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 1 02:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1385a5a9d1716dd2971d33179e75b54ccff4c0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:ba:d0:5d:26:8b:9d:27:60:cd:e0:b8:d5:
c6:46:5e:b8:6b:13:7f:81:17:ae:0f:78:d0:6a:cf:
1b:d1:bd:cc:3a:27:69:f4:b7:e9:3f:d2:94:04:89:
13:18:b8:89:6b:73:c2:c0:ff:b7:4c:18:76:21:58:
9d:18:38:d2:0d:c0:76:c0:ea:f6:2d:3b:15:83:ad:
fa:1f:4f:da:36:47:6b:19:a4:10:15:cf:22:85:22:
dd:5a:31:1b:b5:4f:7b:be:c3:a4:1e:5c:2e:94:10:
ce:ce:56:6a:fc:d0:63:b0:92:7e:29:75:82:f0:f1:
dd:f5:33:98:50:43:1a:06:c1:47:04:15:b3:7a:32:
83:40:eb:81:31:e3:6d:d6:b5:33:18:5f:d9:68:5f:
0a:02:0f:4c:47:39:b0:00:6c:4f:93:ba:03:f1:e6:
78:bb:82:e0:8e:30:68:db:93:1d:3a:aa:f8:d4:a1:
1c:16:aa:0a:03:3f:17:cf:18:a0:f1:04:58:0f:d1:
c1:e0:a4:af:df:de:67:d6:26:3a:19:fb:90:f6:69:
9e:b2:f2:a2:56:b5:2e:b3:ba:36:c8:4b:e7:c8:d7:
ce:f7:a0:4c:0a:d7:c4:d1:bc:48:38:86:3f:c7:cb:
44:e6:56:3f:a6:43:60:9e:e9:4b:59:c7:13:e7:14:
3b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:85:A5:A9:D1:71:6D:D2:97:1D:33:17:9E:75:B5:4C:CF:F4:C0:C3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/E4WlqdFxbdKXHTMXnnW1TM_0wMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.85.0/24
Signature Algorithm: sha256WithRSAEncryption
45:fd:9b:70:3a:c5:ee:92:92:b0:ae:52:95:8f:26:ae:6d:4b:
9e:92:91:63:30:eb:26:0d:cf:e2:8c:c1:35:c7:ea:40:c0:b8:
68:13:43:94:af:41:61:5c:cb:96:c6:1f:a1:89:4d:b7:1f:09:
74:d2:ab:e3:07:b9:ec:d9:3e:57:ca:cd:2b:c0:9e:d2:0a:5f:
c4:9c:96:a9:87:9e:24:57:c8:67:c2:67:5d:13:e4:f8:c0:32:
aa:c3:8f:b1:24:86:27:44:92:1a:e4:4a:4f:95:b1:72:4f:89:
d7:ad:66:e5:30:10:18:db:64:ee:fb:b5:78:3e:b4:ec:0d:d9:
79:32:53:44:06:59:0a:dc:d5:b2:ac:09:e9:d4:70:3b:f3:a5:
c9:0e:de:5a:53:3b:d5:fb:c0:f6:bb:41:2a:fe:a6:f3:74:41:
07:c9:29:ca:eb:05:28:f2:ea:d5:93:96:47:8f:6e:d8:bc:de:
0f:db:06:3a:1f:03:46:59:a0:69:61:92:d3:18:af:6c:de:a6:
e5:56:cc:3b:a3:85:c3:44:9d:fc:b4:cc:64:ee:d8:e8:53:cf:
60:a9:e2:c6:1f:0c:dc:e4:c5:bd:a0:88:f5:05:75:4b:16:d2:
eb:f4:f6:81:a5:10:e9:4f:4c:63:81:f4:b0:61:33:50:e0:69:
1f:13:a7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client