Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FyoXHbgAMIbrWNnzYHe-oT2l2ls.roa
File: FyoXHbgAMIbrWNnzYHe-oT2l2ls.roa (raw, json)
Hash identifier: xMBoLXp3B2EhyUg0jgK1FoT7fkxqmXcDGJtKpDQWQWg=
Subject key identifier: 17:2A:17:1D:B8:00:30:86:EB:58:D9:F3:60:77:BE:A1:3D:A5:DA:5B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF3D294BFA61253670070E29F467F7E7E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FyoXHbgAMIbrWNnzYHe-oT2l2ls.roa
Signing time: Wed 12 Aug 2026 02:34:51 +0000
ROA not before: Wed 12 Aug 2026 02:34:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4593
IP address blocks: 87.85.225.0/24 maxlen: 24
194.242.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:d2:94:bf:a6:12:53:67:00:70:e2:9f:46:7f:7e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 12 02:34:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=172a171db8003086eb58d9f36077bea13da5da5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5e:90:37:7f:f5:7a:c6:08:36:1a:c1:0b:d7:
69:48:cc:dc:0d:a9:f8:53:3d:1d:d7:8e:82:01:65:
ad:a8:ed:e4:b8:c0:75:4a:2d:42:4c:ce:03:05:0d:
1b:10:1b:6c:ff:29:43:ae:4c:aa:b7:9c:02:d8:57:
c6:b5:28:56:b5:4f:66:e8:f8:e4:76:31:0f:5d:89:
75:04:04:e5:48:86:4b:72:bf:7d:7a:a3:5d:7c:b8:
59:b9:9e:65:58:23:ac:64:13:70:3f:33:ee:64:4a:
bb:f3:b6:d2:d7:07:da:66:c2:02:e9:eb:fb:b3:fd:
f5:1e:67:a8:39:bb:e3:88:a2:bb:d5:af:93:f0:ae:
ae:7a:68:f6:2b:6b:e8:cf:98:3b:dd:34:bc:99:b9:
3a:02:0e:17:9c:82:99:cb:f4:35:11:f2:ee:6a:13:
47:4b:46:59:eb:8f:75:dd:17:6f:e8:50:a0:21:44:
0c:e2:b0:65:c5:68:04:4f:95:8f:3d:f2:c8:8b:b8:
e8:f6:95:0a:d9:d8:0e:c6:b3:55:a3:79:6a:71:43:
0f:37:b0:53:e6:8b:b2:e5:40:2a:fb:95:c8:0b:d2:
a8:91:b1:08:5c:c7:79:62:19:d9:fc:b3:9c:52:ee:
d0:75:27:1f:9f:c6:ff:d7:80:cc:95:16:6d:2c:d2:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2A:17:1D:B8:00:30:86:EB:58:D9:F3:60:77:BE:A1:3D:A5:DA:5B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FyoXHbgAMIbrWNnzYHe-oT2l2ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.225.0/24
194.242.157.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e2:65:24:a8:47:46:74:cc:89:75:f3:fd:ee:71:ea:74:67:
bd:d7:c5:8f:f2:a6:61:ab:6e:90:a6:87:5e:6d:8a:03:96:54:
70:a7:9f:1d:d9:74:79:fa:e0:65:cd:52:ba:e4:70:d8:42:88:
2c:e7:99:c3:d0:7e:93:5a:dd:2d:0c:48:f3:44:35:4e:b5:cd:
a1:4b:f4:d9:a6:25:66:a7:8b:30:01:2a:6d:6a:83:98:2b:cc:
e6:61:ec:76:a4:be:a6:4d:50:df:d4:3f:da:fd:46:35:58:9e:
d6:4a:db:fb:a2:af:dc:2a:ca:da:ea:cc:ae:7e:bd:c7:d4:8e:
c0:28:f3:38:ea:28:22:74:71:a7:6b:34:c8:b5:c0:68:f9:1e:
05:99:bc:ca:c4:4d:a4:e5:1b:68:09:73:8f:a0:0b:df:75:3e:
6e:b8:18:38:ca:1c:02:aa:0e:25:1e:ae:d7:c0:b0:fa:4f:cc:
38:80:26:fa:41:0f:d9:ac:98:1c:43:55:6a:67:32:6a:69:72:
88:83:78:02:3d:9a:63:ee:81:4a:55:83:dd:de:ea:8d:6b:69:
5b:41:d1:45:70:16:ed:9b:a6:b2:13:9a:b1:b0:9b:e4:3b:96:
73:ff:a9:76:54:d6:fe:ef:a6:ad:2e:a7:cd:7e:49:04:24:4c:
63:e5:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:46 2026 by rpki-client