Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-OXI_jZHzdW7fY2hs5fkv-4q08.roa
File: M-OXI_jZHzdW7fY2hs5fkv-4q08.roa (raw, json)
Hash identifier: 8efnGVVoy8glP7kbJt3AsQmCTNbmnz8Kct33axRoR74=
Subject key identifier: 33:E3:97:23:F8:D9:1F:37:56:ED:F6:36:86:CE:5F:92:FF:B8:AB:4F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A17EC201DDB6037BF084FE5043BA1C1E2D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-OXI_jZHzdW7fY2hs5fkv-4q08.roa
Signing time: Tue 27 Oct 2026 19:06:45 +0000
ROA not before: Tue 27 Oct 2026 19:06:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 87.82.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:c2:01:dd:b6:03:7b:f0:84:fe:50:43:ba:1c:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 27 19:06:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33e39723f8d91f3756edf63686ce5f92ffb8ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:9f:62:03:ee:a6:5e:b1:40:8b:f3:a6:74:
4c:96:e9:22:ea:0b:ed:b6:a8:50:01:e8:a0:66:03:
a8:4d:93:18:78:3e:e6:c1:dc:3b:66:03:97:60:bc:
54:27:a6:32:ab:8f:d1:bb:e4:93:18:c1:af:43:6e:
f4:34:d9:d9:c4:59:89:55:6d:4f:15:37:36:41:06:
6e:80:54:45:4f:6d:44:f4:a6:58:76:24:13:32:2d:
00:93:80:be:e8:9d:36:0a:e6:1d:4f:a4:e7:5c:7f:
4d:5c:95:24:f2:10:04:da:85:18:e4:f0:ba:b0:ad:
e9:c1:d5:f4:04:2e:7e:d5:56:84:e0:9f:9f:ca:b8:
2e:c1:e7:6a:13:6d:5c:ab:80:97:82:7e:22:1f:83:
a4:27:38:2e:07:3c:87:aa:45:79:7e:f1:f1:7a:72:
1c:e4:a6:b0:91:0c:8b:1d:c6:c8:1d:9f:a8:05:ef:
b4:57:fb:34:41:1d:ac:7f:49:71:4b:c3:70:ca:c7:
3a:90:54:09:78:17:87:f4:2e:66:b5:03:72:52:4b:
57:9e:84:0c:d3:8f:8b:ae:df:e9:b9:f7:9a:36:dc:
52:10:a8:b0:e8:4f:d3:00:0a:2f:ac:cc:be:51:aa:
11:a4:61:9c:09:7e:a2:c2:79:ef:a7:68:80:e5:67:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:97:23:F8:D9:1F:37:56:ED:F6:36:86:CE:5F:92:FF:B8:AB:4F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/M-OXI_jZHzdW7fY2hs5fkv-4q08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:79:e5:dc:7f:f1:0e:fa:f3:d8:a2:8e:ff:a2:28:65:d3:51:
db:f1:ea:a3:e3:1b:3a:82:89:17:01:00:15:92:99:e6:62:a8:
e2:18:be:c5:e3:14:f8:c6:ef:da:30:fd:36:6c:ff:c6:9e:6a:
06:22:93:ca:e6:e4:12:79:f6:5d:be:3b:cc:14:db:b1:43:1b:
0f:0f:37:88:ec:14:63:2e:ce:27:93:76:58:02:84:70:ca:18:
d2:9e:e7:e9:ea:e1:de:d4:87:4d:c4:42:82:53:1b:9a:da:d6:
78:44:16:ee:41:6f:ca:81:13:05:fd:b3:d3:aa:1d:2a:11:97:
10:4a:59:15:6f:b3:e3:16:e2:29:96:8a:57:33:f0:52:6b:62:
cc:0f:2f:8e:bf:fe:2c:22:51:78:39:32:f7:21:ca:c0:62:90:
25:6d:39:9f:a3:73:99:54:01:e2:8d:a8:84:c9:ad:50:63:da:
23:2c:1f:32:cd:e0:11:f8:02:53:ff:82:49:74:7e:02:eb:99:
50:b6:41:8d:35:09:5e:96:1f:20:b9:26:92:8b:d9:d3:18:0a:
4d:cc:51:70:cd:52:ee:27:5c:0e:34:05:90:c7:e4:5d:16:36:
68:50:d4:19:f5:0e:e1:50:85:40:a0:8b:0b:5e:0d:14:b6:3a:
95:6c:d6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:50:08 2026 by rpki-client