Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KrxkiU-R9NSQBvPwbT4i1qidbfE.roa
File: KrxkiU-R9NSQBvPwbT4i1qidbfE.roa (raw, json)
Hash identifier: WiQ0igZRHcwiyIx4P3iQgfCiViqJFBteOe0t5FWsq4E=
Subject key identifier: 2A:BC:64:89:4F:91:F4:D4:90:06:F3:F0:6D:3E:22:D6:A8:9D:6D:F1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF0EDEBB26806D28B6AD1C6FC31137790
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KrxkiU-R9NSQBvPwbT4i1qidbfE.roa
Signing time: Tue 11 Aug 2026 13:05:51 +0000
ROA not before: Tue 11 Aug 2026 13:05:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151177
IP address blocks: 87.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:ed:eb:b2:68:06:d2:8b:6a:d1:c6:fc:31:13:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 11 13:05:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2abc64894f91f4d49006f3f06d3e22d6a89d6df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:fb:23:f5:65:93:f9:d1:fc:29:68:e5:12:
76:cd:85:45:35:d6:2d:d8:00:cc:36:58:0b:69:4f:
94:cb:82:1a:1f:4b:08:35:ba:67:29:04:f4:36:01:
f1:bf:d3:a2:32:95:71:6f:ce:e5:9d:4d:6c:fd:be:
e7:f1:0c:e1:ef:02:93:60:a1:2c:0f:17:c9:e2:d4:
1a:27:02:57:15:17:48:83:80:39:15:70:87:d8:55:
14:26:9b:f2:49:9f:ac:ff:04:48:60:24:58:0b:17:
39:c8:8e:71:3a:8e:fd:38:77:4b:fd:34:21:d8:83:
29:76:17:55:08:74:97:45:31:39:39:37:35:d9:78:
ed:f3:f0:56:2c:71:5f:b3:60:03:0b:7a:fb:3b:d6:
36:b3:ce:2c:e6:8a:f8:37:d7:33:0a:29:eb:aa:75:
c6:a4:16:c4:0a:92:1f:2c:7a:ba:e4:3c:fc:98:32:
03:53:e8:58:5d:f7:cc:b4:62:96:4a:22:43:1d:5a:
be:16:03:3e:8f:74:c3:ac:95:a6:84:fc:5e:38:0b:
0c:d8:67:5a:4d:46:11:9a:cf:ad:e4:4e:e3:75:27:
73:e0:bd:64:3a:0c:fb:3b:34:8a:65:6f:a5:06:63:
b7:7f:10:3c:4f:d8:c7:27:3b:9e:89:30:e9:4d:15:
ae:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:64:89:4F:91:F4:D4:90:06:F3:F0:6D:3E:22:D6:A8:9D:6D:F1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/KrxkiU-R9NSQBvPwbT4i1qidbfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8b:a0:e2:80:fd:0d:d2:27:ad:45:9b:b0:ea:8a:ca:10:33:
0b:7e:be:e4:2a:98:cc:e9:4f:ea:8f:58:5b:d1:d3:58:e0:24:
c5:e7:80:ad:29:eb:bf:ff:7c:8c:6b:77:1f:42:c2:6d:b1:1a:
e8:13:d8:e6:bd:9e:5e:3e:35:54:8c:e4:2c:3d:0f:72:43:82:
d3:b3:c6:03:27:bc:80:58:7f:4a:72:5a:d5:de:da:51:16:8d:
05:ab:d4:82:b6:53:57:d8:7b:e2:00:21:98:23:3d:62:80:b9:
e8:7a:f4:34:ff:99:39:b2:39:51:2b:16:c4:8d:73:ec:a7:a5:
d4:d3:f2:82:54:1c:1c:45:d3:88:43:63:2b:08:1d:05:a0:ee:
aa:ec:b8:ab:91:b8:cd:3a:b4:67:51:32:63:4d:af:21:b1:6f:
10:1a:75:37:5c:d7:56:04:44:04:27:6c:40:6f:46:fa:ec:7f:
aa:07:5b:7c:01:03:10:11:dd:c6:6c:84:0c:4e:c9:f6:52:4f:
c8:93:bf:70:0e:b1:c1:79:1f:6f:0d:1b:f1:9e:08:83:ad:79:
0e:1d:8b:f7:9b:37:39:0b:9e:cb:b2:46:05:58:bc:ee:22:ef:
0e:eb:25:a4:5f:7a:69:5a:cf:de:f5:a8:a5:d8:82:2e:7b:b8:
b9:b7:5c:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/w7euyaAbSi2rRxvwxE3eQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODExMTMwNTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWJjNjQ4OTRmOTFmNGQ0OTAwNmYzZjA2ZDNlMjJkNmE4OWQ2ZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5H7I/Vlk/nR/Clo5RJ2zYVFNdYt
2ADMNlgLaU+Uy4IaH0sINbpnKQT0NgHxv9OiMpVxb87lnU1s/b7n8Qzh7wKTYKEs
DxfJ4tQaJwJXFRdIg4A5FXCH2FUUJpvySZ+s/wRIYCRYCxc5yI5xOo79OHdL/TQh
2IMpdhdVCHSXRTE5OTc12Xjt8/BWLHFfs2ADC3r7O9Y2s84s5or4N9czCinrqnXG
pBbECpIfLHq65Dz8mDIDU+hYXffMtGKWSiJDHVq+FgM+j3TDrJWmhPxeOAsM2Gda
TUYRms+t5E7jdSdz4L1kOgz7OzSKZW+lBmO3fxA8T9jHJzueiTDpTRWudQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCq8ZIlPkfTUkAbz8G0+ItaonW3xMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvS3J4a2lVLVI5TlNRQnZQd2JUNGkxcWlkYmZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1Q7MA0G
CSqGSIb3DQEBCwUAA4IBAQBsi6DigP0N0ietRZuw6orKEDMLfr7kKpjM6U/qj1hb
0dNY4CTF54CtKeu//3yMa3cfQsJtsRroE9jmvZ5ePjVUjOQsPQ9yQ4LTs8YDJ7yA
WH9KclrV3tpRFo0Fq9SCtlNX2HviACGYIz1igLnoevQ0/5k5sjlRKxbEjXPsp6XU
0/KCVBwcRdOIQ2MrCB0FoO6q7LirkbjNOrRnUTJjTa8hsW8QGnU3XNdWBEQEJ2xA
b0b67H+qB1t8AQMQEd3GbIQMTsn2Uk/Ik79wDrHBeR9vDRvxngiDrXkOHYv3mzc5
C57LskYFWLzuIu8O6yWkX3ppWs/e9ail2IIue7i5t1y3
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:12 2026 by rpki-client