Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IuyQJimi7TGluYKnuzphkQq9L0E.roa
File: IuyQJimi7TGluYKnuzphkQq9L0E.roa (raw, json)
Hash identifier: HRGG+OrUjwokbi+MxnhUjdl9rM1BM5dXVq5rsna2d8o=
Subject key identifier: 22:EC:90:26:29:A2:ED:31:A5:B9:82:A7:BB:3A:61:91:0A:BD:2F:41
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FDE1516F2BFF323C7ADFE8603AC97661F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IuyQJimi7TGluYKnuzphkQq9L0E.roa
Signing time: Fri 07 Aug 2026 21:15:51 +0000
ROA not before: Fri 07 Aug 2026 21:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205941
IP address blocks: 87.86.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:15:16:f2:bf:f3:23:c7:ad:fe:86:03:ac:97:66:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 7 21:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22ec902629a2ed31a5b982a7bb3a61910abd2f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:4a:51:b2:2c:68:75:92:58:02:85:01:3c:
0b:b1:f1:e8:05:69:f8:4f:1d:0c:13:fa:14:52:22:
6c:40:da:97:65:4e:2c:e8:7c:ba:c0:58:b0:23:08:
6b:46:8b:e9:1d:e9:f8:19:c5:2e:ab:e8:dd:08:ac:
f2:ee:b0:7c:37:cc:ab:08:28:df:b5:12:74:6b:03:
03:c5:0a:01:bd:81:1f:f2:93:3f:be:f2:ea:13:f2:
b9:51:fd:97:ac:5e:66:c5:3b:d6:fd:c5:9b:bc:23:
83:b7:8d:5e:6b:a1:bb:9d:e0:1e:cc:cb:4d:13:76:
4b:95:78:1b:49:45:8d:ba:d6:e9:c5:c2:f6:09:8b:
bd:16:1e:77:87:5a:a5:31:74:af:ec:f2:b5:d8:8e:
6a:8a:e4:f1:ae:e7:2f:f0:9d:c3:e2:ce:df:dd:5e:
3e:fe:b3:5d:9a:2c:81:19:be:6a:35:64:1a:b1:19:
b3:f3:12:6f:ea:0c:c6:97:5d:84:15:24:24:52:6a:
0f:d5:7c:7f:55:92:6f:43:32:c2:bb:5e:3f:c7:ad:
fc:16:56:f2:ac:b0:e5:c1:e7:6c:c1:cb:8b:8a:ac:
11:f5:3a:cb:83:15:dc:1f:04:de:20:6f:bd:25:91:
93:63:f2:e4:b8:2b:16:ea:68:d3:8e:6d:ba:03:3a:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EC:90:26:29:A2:ED:31:A5:B9:82:A7:BB:3A:61:91:0A:BD:2F:41
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/IuyQJimi7TGluYKnuzphkQq9L0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.93.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8f:b9:28:24:88:32:0f:88:54:7f:73:6b:b5:eb:b6:e8:e1:
31:22:50:d7:ca:e3:22:1a:7b:4d:cc:dd:d6:f1:93:94:af:ee:
ad:3f:ef:a7:0e:3b:1c:85:13:12:4f:6b:90:a0:08:d7:28:64:
b4:85:ed:03:21:27:d2:cc:81:53:18:15:e7:cb:94:09:ef:16:
63:75:17:d3:9f:eb:bc:7c:52:97:3f:9a:b2:bc:81:02:c0:2e:
ef:52:1c:9e:ac:52:52:64:05:84:eb:c8:b1:39:23:17:ef:3a:
9c:a2:77:62:9b:3a:61:8f:40:9e:ac:3a:77:0f:31:b9:70:e1:
93:81:f2:71:2d:49:c0:38:72:84:62:8e:98:8f:1d:3d:23:9e:
71:f4:65:5b:d0:d8:e5:d0:ef:92:14:4a:ca:cd:fc:64:5b:6f:
21:dc:3b:a7:3f:f9:6b:ed:59:51:2e:6d:c1:46:5b:b0:c8:ad:
fa:f2:27:04:f6:c6:18:d4:55:86:6a:dd:d4:d5:af:d0:68:5c:
57:07:dc:72:3c:50:ae:10:11:50:e1:39:3e:a9:7a:1a:08:4b:
00:bd:f7:cc:86:b5:21:d5:9d:65:52:6d:f0:c4:c2:72:56:f3:
fe:23:f9:17:97:ce:eb:55:d3:43:e8:fe:25:01:e5:06:8e:cd:
97:1b:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:38 2026 by rpki-client