Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ITjt09CusYOek6LV4Gl2X3XrpG8.roa
File: ITjt09CusYOek6LV4Gl2X3XrpG8.roa (raw, json)
Hash identifier: I/6D5kgFYhkrZyLo8Z2qoBrIAmKXvxeWwPhuMOegZ1g=
Subject key identifier: 21:38:ED:D3:D0:AE:B1:83:9E:93:A2:D5:E0:69:76:5F:75:EB:A4:6F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F3D7FF6B19ED1C54E5F95EB6EE8E6D4A6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ITjt09CusYOek6LV4Gl2X3XrpG8.roa
Signing time: Tue 07 Jul 2026 16:53:44 +0000
ROA not before: Tue 07 Jul 2026 16:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7536
IP address blocks: 87.82.242.0/24 maxlen: 24
87.84.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:7f:f6:b1:9e:d1:c5:4e:5f:95:eb:6e:e8:e6:d4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 7 16:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2138edd3d0aeb1839e93a2d5e069765f75eba46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:d3:01:8c:6f:1c:36:cd:70:cc:68:88:66:
29:99:ab:0c:c4:b9:22:14:1c:c3:35:11:13:fb:dc:
d1:55:34:18:bb:0d:78:36:9d:7e:3a:87:08:6d:dc:
a2:9b:fe:0a:7a:2f:e6:c6:90:1c:1d:fe:a0:f7:4d:
bf:1a:f2:c2:2d:3f:23:2d:ad:75:19:18:c7:66:88:
42:e1:b9:2f:a7:83:aa:3f:68:9e:53:44:50:e4:24:
22:19:73:d3:e3:df:38:f5:d2:36:c8:0b:0a:c1:6f:
46:e3:dc:8f:42:a8:f3:13:46:cb:b4:20:62:d4:60:
e9:47:b9:07:62:3b:3f:23:ce:bc:29:00:d6:ee:14:
fe:72:d4:1b:68:5a:61:60:ba:8d:07:b6:2b:cf:ba:
7b:2f:c8:5c:e1:c1:c4:c2:69:2d:85:bf:9a:88:58:
fc:26:7a:97:f1:7c:ea:fc:76:51:15:3c:31:75:6e:
15:a6:e8:3a:06:91:ff:c9:c6:b8:1f:da:98:44:6d:
35:fb:25:9a:b0:f6:a3:a0:a8:f7:43:37:0e:72:bb:
26:a7:6f:49:b7:0f:d9:7b:ea:80:3a:0d:55:f1:52:
18:26:2f:85:19:fa:48:d9:73:59:63:92:83:6f:f1:
12:d3:4f:26:37:dd:18:cb:52:67:15:14:ec:d3:2a:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:38:ED:D3:D0:AE:B1:83:9E:93:A2:D5:E0:69:76:5F:75:EB:A4:6F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ITjt09CusYOek6LV4Gl2X3XrpG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.242.0/24
87.84.131.0/24
Signature Algorithm: sha256WithRSAEncryption
75:61:16:78:64:b2:50:80:27:d4:33:b5:80:d9:1b:06:9c:08:
1f:f7:8b:b3:8c:70:61:a1:59:38:3a:7e:8b:a5:7b:0d:f8:17:
7a:e6:a9:a4:63:92:1f:32:e4:b8:9b:fe:aa:03:02:80:88:ea:
53:ae:8c:da:12:7a:e9:ff:08:31:fa:8c:92:19:ee:07:b5:23:
cd:5c:1c:2d:c6:0f:bd:ed:ba:02:42:ed:76:b0:03:cf:4f:aa:
fd:2f:08:1c:af:46:28:10:c1:22:03:b8:f9:69:c2:0e:63:d3:
06:34:45:c5:f3:c0:84:e3:4c:db:e5:53:e7:ea:33:28:b8:10:
31:fd:58:6f:c8:36:e4:21:c8:00:4e:7d:7e:94:58:f2:94:05:
9c:8b:b3:cd:9e:0e:c7:41:66:6c:58:0b:9a:f7:53:94:e7:19:
bd:e8:c3:2f:65:4b:81:41:97:92:2d:cc:79:58:ff:b1:8c:12:
8e:05:f3:ec:4f:e1:e9:77:5e:11:03:32:1b:c7:77:5e:1c:ea:
c8:5b:ef:64:0f:5a:ea:ac:83:69:10:e3:dd:c6:69:cd:27:26:
78:34:29:f3:37:26:75:56:e0:56:9b:d5:47:bb:2a:8e:22:72:
15:88:46:91:4c:e5:5e:7b:ae:e8:d1:cf:c7:aa:b6:ca:8c:2f:
a4:33:7d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client