Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OIMrgzh3aUZPnWkwbwR1B_QlWh0.roa
File: OIMrgzh3aUZPnWkwbwR1B_QlWh0.roa (raw, json)
Hash identifier: nB7E5/xAJqj3Af4++/L4dyKh7cDytqiFO5hBNrusgl0=
Subject key identifier: 38:83:2B:83:38:77:69:46:4F:9D:69:30:6F:04:75:07:F4:25:5A:1D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01F0A5FE10783E9A9B21499FBA57995F7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OIMrgzh3aUZPnWkwbwR1B_QlWh0.roa
Signing time: Thu 20 Aug 2026 11:59:28 +0000
ROA not before: Thu 20 Aug 2026 11:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22160
IP address blocks: 87.83.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 12:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:0a:5f:e1:07:83:e9:a9:b2:14:99:fb:a5:79:95:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 20 11:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38832b83387769464f9d69306f047507f4255a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:47:44:74:96:bd:18:0f:01:40:19:50:47:
64:80:72:be:f0:71:e8:49:06:f1:f4:ab:df:8e:4e:
3b:f3:91:b0:12:9f:07:9a:4e:4f:98:7c:30:65:fd:
bf:1c:c1:cf:4f:98:69:90:d6:b3:cd:33:ba:2c:e4:
09:c7:7e:6c:ff:7c:2b:27:67:54:ba:aa:68:ae:23:
b9:32:62:94:2c:55:ba:e0:87:be:50:a8:a3:00:9a:
e2:06:75:61:53:50:b4:64:5e:a7:cc:13:d2:ce:94:
ec:89:0e:15:23:aa:61:2f:06:1e:8b:b8:c6:a5:70:
40:d3:63:5f:83:92:0d:2d:86:4c:b7:9e:3a:47:0b:
7c:a5:ac:79:2c:c6:a5:8d:f0:17:49:77:68:39:c5:
fc:c5:c8:bc:bf:21:c9:1c:54:22:99:bf:b0:ed:b8:
32:38:2a:6c:e6:94:a5:26:3b:f7:ec:a9:9a:5a:b1:
27:ce:15:3e:2d:b2:c4:10:0c:eb:ad:77:9a:62:aa:
20:e5:f1:a1:31:c9:9f:8c:96:d5:e6:15:85:d8:eb:
44:54:73:e8:1c:ea:7d:98:0d:3c:b0:b0:53:79:16:
d3:af:77:09:de:1d:18:b8:88:dd:92:b8:c9:6d:8a:
f6:81:8f:77:a0:67:65:b1:05:82:56:b5:8a:f1:c3:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:2B:83:38:77:69:46:4F:9D:69:30:6F:04:75:07:F4:25:5A:1D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OIMrgzh3aUZPnWkwbwR1B_QlWh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a4:cb:c2:ef:ee:2a:7f:53:8d:e8:d5:16:24:fe:48:60:2e:
5a:88:2e:1e:d1:d4:ae:e2:bd:91:c1:31:af:b9:df:42:00:9c:
1c:dc:12:45:98:cb:f3:98:80:0a:8a:11:8e:b1:a7:d1:d3:dd:
13:0f:64:4f:79:71:96:2b:3c:ee:6e:c3:8b:f1:84:85:30:85:
19:38:b6:90:3e:48:9d:eb:a8:25:bc:3b:c2:23:a1:89:de:7e:
e6:ab:3c:c4:49:45:93:35:6d:44:9e:e8:52:1d:05:b5:4a:30:
a6:bb:5a:9d:66:66:1a:ec:50:34:1b:bc:92:0b:a0:1e:49:19:
6f:44:d4:eb:e7:ce:dc:c3:80:1d:25:87:c3:34:45:07:a0:33:
1b:4f:28:fa:0b:b0:7c:f8:10:4e:f3:4b:66:42:84:cc:ff:75:
ae:00:05:0b:ba:19:54:88:23:83:f9:6c:ea:f5:0d:fc:38:c0:
b1:d1:54:f2:24:88:2e:1c:de:ed:98:ec:a0:eb:c5:99:72:3f:
df:93:bb:fd:ed:c3:52:22:52:fa:b6:39:b0:02:21:06:2e:cd:
a2:0a:ae:5b:31:41:aa:b0:ec:c2:80:dd:d0:ca:8f:98:c8:2e:
88:a9:e4:c3:92:26:a6:4a:5d:95:93:70:b2:46:db:32:3e:06:
36:aa:0d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:53:37 2026 by rpki-client