Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XfsX8Vz7ull1VLpLCA0fnM7hcrg.roa
File: XfsX8Vz7ull1VLpLCA0fnM7hcrg.roa (raw, json)
Hash identifier: PW0R5EGts7t7rI2qRNYz7sre21/LzSSodIe7oxOkvwo=
Subject key identifier: 5D:FB:17:F1:5C:FB:BA:59:75:54:BA:4B:08:0D:1F:9C:CE:E1:72:B8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0928CFF493B3FD9C5EB5D625D85696AB6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XfsX8Vz7ull1VLpLCA0fnM7hcrg.roa
Signing time: Fri 11 Sep 2026 22:18:29 +0000
ROA not before: Fri 11 Sep 2026 22:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219084
IP address blocks: 87.85.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:8c:ff:49:3b:3f:d9:c5:eb:5d:62:5d:85:69:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 11 22:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dfb17f15cfbba597554ba4b080d1f9ccee172b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:95:be:32:cb:dd:10:e6:fc:62:16:ac:b1:
75:58:88:41:56:55:db:53:12:4b:5e:c9:4e:82:ab:
25:81:ba:a2:85:da:fe:8a:b3:f5:09:d4:b1:cb:8c:
21:9c:22:2d:74:10:ef:1d:b5:f2:19:7a:29:01:59:
d8:82:64:8c:49:4b:61:f3:2a:1a:3c:87:8c:f6:5d:
26:a0:68:43:6e:49:35:b4:f0:8d:da:47:dc:17:31:
e9:8d:c3:71:6b:0f:cc:1a:5f:12:88:1a:84:ef:6a:
66:d3:e8:a7:71:b6:97:1d:0b:b7:90:b9:93:ff:91:
44:f5:4b:ca:01:62:ab:ae:71:ab:2d:bb:98:e1:5b:
19:d4:42:84:cc:c5:a6:dd:17:03:ea:a3:98:89:8c:
30:c1:6b:ca:04:5b:31:7f:5b:1f:55:0e:c9:9e:43:
6d:88:9e:98:d9:c2:57:f6:f9:00:b9:25:69:5b:7a:
a2:d5:d0:db:a6:75:fc:fa:8f:fb:85:17:7b:30:8c:
8c:ce:b0:83:62:cc:04:05:07:e3:dc:31:d1:ed:12:
97:d4:5b:21:dd:06:8d:f8:38:70:5d:78:59:87:0e:
81:e8:45:1a:6b:73:33:c7:3c:51:0a:86:bb:47:2a:
42:84:bb:f2:57:73:04:be:2d:77:2d:80:f0:a0:9d:
28:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FB:17:F1:5C:FB:BA:59:75:54:BA:4B:08:0D:1F:9C:CE:E1:72:B8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/XfsX8Vz7ull1VLpLCA0fnM7hcrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.240.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:fe:da:7f:a3:0a:03:71:61:81:16:44:34:da:cc:a5:5b:a8:
53:dc:36:c8:de:68:5b:1d:8e:d0:ed:5a:6a:71:4b:0b:d0:d1:
3d:55:5f:7f:4b:16:24:25:61:52:f0:20:17:8a:cd:a2:f6:d5:
1e:77:b8:09:5f:21:b9:3c:b2:d7:63:9d:35:e8:73:0b:60:dc:
8a:12:90:27:15:e9:4c:67:01:15:8c:d7:60:b8:53:05:ea:7d:
6f:6d:76:7f:7e:93:85:fb:0a:be:ee:3d:36:ab:5f:08:13:c6:
c1:3c:23:af:4d:7e:76:35:d5:3a:1a:c6:da:1b:4c:32:77:28:
6e:6f:07:8c:3d:c4:b5:04:67:bd:ba:f2:f0:04:50:3e:0b:7c:
d8:de:e4:3f:e3:bf:3e:19:35:3b:b5:68:42:3d:90:86:cd:48:
b2:f7:ec:ae:d7:40:3a:cd:76:f0:51:d1:00:8c:77:d2:ba:9a:
2d:89:cd:0d:22:20:31:d1:d4:ad:64:dd:a1:71:7c:e7:f7:57:
56:50:9c:fa:e2:54:e5:91:01:1b:16:f6:da:89:c8:e8:8a:25:
fa:17:e3:58:6d:75:7d:14:d8:4b:88:66:ad:33:4a:c7:c3:91:
59:11:10:e7:38:ed:df:d8:9e:47:61:cd:3e:cb:9a:89:c9:09:
e6:d0:d1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:16:43 2026 by rpki-client