Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U0RZzXq4yr8fSGGINJRWkt0_Pcs.roa
File: U0RZzXq4yr8fSGGINJRWkt0_Pcs.roa (raw, json)
Hash identifier: TBHnm8puRk99os4J57iyZrcQQx2dPaUAaCTsBrsFXZI=
Subject key identifier: 53:44:59:CD:7A:B8:CA:BF:1F:48:61:88:34:94:56:92:DD:3F:3D:CB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FC8E76A451235177E92F0109149AD640F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U0RZzXq4yr8fSGGINJRWkt0_Pcs.roa
Signing time: Mon 03 Aug 2026 18:33:56 +0000
ROA not before: Mon 03 Aug 2026 18:33:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 82.109.153.0/24 maxlen: 24
87.86.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:e7:6a:45:12:35:17:7e:92:f0:10:91:49:ad:64:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 3 18:33:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=534459cd7ab8cabf1f48618834945692dd3f3dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:27:2a:85:b4:2b:27:8b:ed:61:ba:1e:c0:
ce:fc:9f:6a:45:bd:63:30:65:72:2d:6c:86:bf:5d:
0c:04:e8:09:12:d9:99:d1:66:fa:97:95:32:4d:46:
ad:41:13:90:a4:6b:eb:24:08:c7:f0:66:13:b2:24:
ab:be:ab:4d:ef:56:57:f1:55:68:eb:01:43:bd:73:
9d:66:a2:ae:5e:35:16:e5:83:5d:ff:8b:5d:76:22:
a7:a1:26:a0:5a:55:78:2e:ac:78:8a:8d:8e:d4:90:
51:89:db:a9:9d:4c:dd:34:ae:e0:04:a2:f3:ae:62:
fe:8e:aa:90:27:fd:33:22:9d:29:55:c9:ef:7d:63:
d9:d2:81:17:0d:b9:33:d4:7b:81:24:06:4e:99:d0:
76:b0:04:d8:a4:93:19:22:11:a6:1b:eb:07:25:66:
78:d8:15:05:60:f8:eb:98:cf:81:1b:05:49:83:09:
be:58:1c:f7:e7:77:d5:e3:26:e5:e9:77:3d:26:58:
03:84:20:f8:8f:96:6b:39:4c:eb:2c:22:3d:d5:1b:
ac:f6:32:53:5a:38:36:c1:3a:0b:f3:50:ec:12:ba:
8c:03:c7:9e:87:ec:da:b4:18:48:66:8c:9e:a1:dc:
fb:a1:d4:bc:b4:d6:89:d9:ef:f2:2e:a3:30:a7:0d:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:59:CD:7A:B8:CA:BF:1F:48:61:88:34:94:56:92:DD:3F:3D:CB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/U0RZzXq4yr8fSGGINJRWkt0_Pcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.153.0/24
87.86.16.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c3:5e:40:e0:94:6a:c9:22:3c:4f:00:ce:f1:e2:0a:ba:d6:
7f:16:3e:23:77:61:f0:66:aa:0b:aa:2a:83:61:66:7c:bc:8b:
bd:b8:b2:32:8b:20:ec:f4:3d:29:60:93:7a:ff:20:b5:c2:fd:
7c:57:e5:32:bd:e5:4b:e2:22:80:d8:a3:d2:bd:5b:f6:bd:47:
04:31:a3:e2:80:d5:ff:34:1d:a1:0c:cd:19:e7:17:24:19:ca:
e3:44:a0:65:a7:ed:47:de:4d:97:ed:8b:ef:8e:26:ab:97:a9:
29:c4:f2:86:75:b6:eb:53:06:e0:5d:a5:10:af:60:11:b6:97:
59:fb:49:25:26:ce:a6:da:57:48:52:67:73:24:2d:bd:c3:cd:
a6:dc:be:fe:20:d4:f5:63:10:25:12:99:07:70:b3:d4:4f:49:
6f:60:3c:58:68:a6:6a:24:6a:3f:88:19:cf:5c:0c:71:cb:07:
b9:0d:54:ac:28:27:8c:46:77:8c:85:93:b1:bb:62:71:de:31:
0d:10:da:1e:f5:83:ac:f4:84:fb:23:55:e4:47:33:d5:9e:1a:
be:97:11:d9:5d:3e:07:57:9e:b8:93:e2:a3:e6:5d:65:99:76:
88:b5:34:46:7b:6e:9f:7f:20:d7:69:67:e0:0b:36:16:b5:49:
26:07:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:08 2026 by rpki-client