Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TPwIIe_iDvYiRpzZaBV0R7nBMVE.roa
File: TPwIIe_iDvYiRpzZaBV0R7nBMVE.roa (raw, json)
Hash identifier: HRT7ZZa+wTZTXigBMs0UCVTpxyEoRr/EnxTStV0hIpg=
Subject key identifier: 4C:FC:08:21:EF:E2:0E:F6:22:46:9C:D9:68:15:74:47:B9:C1:31:51
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0803E9B90498249F8ED0E9CF0325C862F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TPwIIe_iDvYiRpzZaBV0R7nBMVE.roa
Signing time: Tue 08 Sep 2026 08:59:41 +0000
ROA not before: Tue 08 Sep 2026 08:59:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140681
IP address blocks: 87.83.121.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:3e:9b:90:49:82:49:f8:ed:0e:9c:f0:32:5c:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 8 08:59:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cfc0821efe20ef622469cd968157447b9c13151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:2c:8a:8b:1f:09:9b:c8:5b:fa:4f:47:b7:
38:63:f7:fe:3d:4f:66:88:cd:09:54:73:e8:ea:30:
c5:72:56:f6:dd:dd:0a:3e:22:74:25:f8:9f:1b:fa:
bb:22:98:3a:07:51:ec:2f:ea:7a:d0:3d:b5:61:7c:
ce:73:83:3d:8e:68:83:db:20:18:f5:b2:12:7a:ba:
02:e7:97:d6:fe:11:e5:a1:6c:79:03:6a:35:3b:65:
d3:09:b7:c7:c9:71:b5:7d:d1:2b:87:34:59:4f:ff:
bf:14:63:eb:0d:14:3c:49:92:db:c7:8c:cc:69:29:
15:0d:ec:28:63:44:c9:ac:bc:af:7a:13:0e:16:c2:
d0:15:49:c0:e2:bd:3f:27:99:a4:84:c7:eb:9f:fb:
95:2d:4d:59:ff:73:e5:70:bb:1b:94:19:45:c3:19:
de:d3:67:ad:bb:8c:83:09:cf:a5:3d:97:2b:a3:57:
c5:1d:12:04:14:01:03:e3:8a:f4:0f:83:1a:16:b7:
88:ba:60:6e:cd:e6:84:38:b9:86:14:10:6e:ed:60:
bd:69:87:1d:94:93:e2:44:26:5e:d5:f8:27:d3:96:
af:e2:4d:c9:2a:54:4f:5d:44:d1:8c:f2:a4:6a:52:
11:75:f9:2e:ee:48:e6:12:e4:b9:ab:9a:83:3b:20:
7c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:08:21:EF:E2:0E:F6:22:46:9C:D9:68:15:74:47:B9:C1:31:51
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TPwIIe_iDvYiRpzZaBV0R7nBMVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.121.0/24
87.84.156.0/24
Signature Algorithm: sha256WithRSAEncryption
06:11:55:d9:cb:24:1f:13:94:a3:09:9f:f7:f3:3d:c8:6a:54:
43:5b:be:49:46:07:09:17:f5:46:df:f1:b6:fc:ab:44:cd:21:
a4:e4:87:39:6b:4c:f7:b9:95:2d:17:78:e0:6a:b6:04:70:f8:
06:f1:b7:95:77:8d:56:8f:bc:cd:a5:5a:e7:e1:f6:2c:5d:4b:
bd:8d:ed:04:fb:37:a6:28:62:e0:e9:ba:e6:be:67:f6:bb:f5:
e9:bb:2e:58:fd:5f:c6:6b:6b:aa:3b:be:2b:61:52:a3:b3:89:
8a:ba:34:ea:bf:ae:04:d9:e7:bf:d0:a3:48:66:b5:d7:44:c8:
0e:fe:d7:1a:65:4b:2c:cb:31:cd:8a:b1:bb:b3:c6:50:49:85:
5e:1c:1c:15:7f:95:b0:81:e0:f3:32:e6:16:ca:14:48:2d:5f:
69:81:55:40:a4:2b:c9:90:96:80:f8:24:48:bd:a8:19:8c:20:
59:03:bf:95:20:3b:77:45:ed:7f:96:ee:a8:60:24:bf:22:3a:
35:f2:54:ac:e4:e1:ad:11:bd:71:dd:9e:40:e5:89:c4:c5:3d:
4b:e5:6f:9d:a8:b1:5b:22:fc:11:d4:38:a7:d4:aa:fe:15:c1:
50:85:0d:23:89:e7:91:c9:98:57:43:7c:37:b5:ff:35:70:4e:
fb:b3:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:24:30 2026 by rpki-client