Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EyVn3-L1dh3EJRhsMSgDMmBO_UM.roa
File: EyVn3-L1dh3EJRhsMSgDMmBO_UM.roa (raw, json)
Hash identifier: n5xm0NEpFci8Qc9onsfOr8tng5iIHfbzWCoiFXERGjI=
Subject key identifier: 13:25:67:DF:E2:F5:76:1D:C4:25:18:6C:31:28:03:32:60:4E:FD:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03EE98D23BEE979FFCDDAF2D4D122DA11
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EyVn3-L1dh3EJRhsMSgDMmBO_UM.roa
Signing time: Wed 26 Aug 2026 16:31:28 +0000
ROA not before: Wed 26 Aug 2026 16:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 87.84.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:e9:8d:23:be:e9:79:ff:cd:da:f2:d4:d1:22:da:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 26 16:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=132567dfe2f5761dc425186c31280332604efd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:e7:f8:06:ad:28:d4:13:21:d7:d3:8b:21:
69:81:e3:0d:44:e8:45:7b:f4:b3:63:bf:7a:27:a3:
ab:07:73:d6:d4:e7:6c:f8:37:41:0c:72:ef:ad:8b:
cf:4c:a1:92:ca:c9:66:41:7e:1d:17:31:bc:63:35:
6f:85:4e:d1:57:33:44:9a:19:36:f2:84:62:0a:6c:
77:ab:f3:17:b8:e4:f4:fa:7c:a0:98:4d:64:c0:26:
72:42:4e:a2:c9:62:09:dc:4f:40:6d:c9:6d:d1:6e:
bd:52:1e:d5:2d:64:19:61:6e:3c:50:0d:0e:56:58:
b9:f6:c1:32:0e:15:b8:25:eb:29:c9:46:92:b8:87:
6b:d2:7d:e9:2a:27:13:97:97:87:c6:4b:b9:1d:12:
ec:90:d9:ae:98:e7:79:03:37:45:c1:31:d5:dd:ea:
59:f2:d7:75:d1:9b:8e:35:a6:99:77:9f:41:3e:a0:
55:0c:e4:df:49:f4:1d:d5:46:83:da:b5:58:d4:15:
b3:b1:51:c2:c9:d2:dc:46:0c:77:14:20:c6:7f:42:
48:ac:bf:48:6b:34:3e:29:b5:df:a4:e2:7b:0a:3b:
ea:fd:d1:e2:75:83:09:1d:78:ec:16:08:de:81:ca:
6e:51:6d:aa:d8:94:21:d8:fe:a4:53:20:5d:e2:24:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:67:DF:E2:F5:76:1D:C4:25:18:6C:31:28:03:32:60:4E:FD:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EyVn3-L1dh3EJRhsMSgDMmBO_UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
53:f6:87:05:8f:9b:0f:f5:6f:52:a4:71:b8:89:17:fa:0a:02:
a5:b5:b6:23:cd:ec:59:30:b0:38:66:ec:66:d5:89:56:b1:aa:
35:59:6d:16:fc:d7:0f:a7:c6:1d:1f:c4:4a:d2:ec:53:66:d7:
6e:39:3b:71:68:7b:0b:d2:02:2e:af:04:2b:f2:0d:3d:e6:d0:
41:42:22:c6:72:4d:0f:18:ae:20:11:88:85:b2:32:82:45:48:
67:61:97:d5:57:d3:ce:b6:95:3e:2f:f0:b8:67:a6:37:8d:2e:
26:1f:4e:59:65:a5:50:b8:e3:9a:ce:3a:5a:d0:01:62:08:f1:
d4:df:cf:62:da:70:72:db:43:eb:f2:cf:69:46:b1:e6:07:2c:
83:21:6f:18:99:f1:c6:67:dc:c0:7e:45:c1:7d:c4:e3:29:fb:
9e:1f:29:bb:06:4c:57:e5:d9:95:d2:e9:c8:29:de:26:fd:ae:
58:2f:ec:c8:56:9a:f8:91:66:92:4a:8d:83:c4:33:5e:28:81:
d3:ac:1c:39:4c:d4:bb:fe:63:63:52:a4:26:62:0f:2c:6e:a1:
0b:10:18:26:f6:a0:0c:26:5d:f4:60:70:75:38:97:cc:91:d9:
bf:27:5b:73:d0:91:7b:63:de:0b:97:79:e6:b5:b6:d2:e4:77:
93:64:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:18 2026 by rpki-client