Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_QHKjmyN-VdISHgKVHkeSVx4GWE.roa
File: _QHKjmyN-VdISHgKVHkeSVx4GWE.roa (raw, json)
Hash identifier: /qfQkpU2F6HrmyERYhntssTtGKFe5OrjUUC0z54Y1lI=
Subject key identifier: FD:01:CA:8E:6C:8D:F9:57:48:48:78:0A:54:79:1E:49:5C:78:19:61
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFF1D76092C9CA209F700481F923033EF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_QHKjmyN-VdISHgKVHkeSVx4GWE.roa
Signing time: Fri 14 Aug 2026 07:12:28 +0000
ROA not before: Fri 14 Aug 2026 07:12:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 87.83.233.0/24 maxlen: 24
87.85.240.0/24 maxlen: 24
195.72.172.0/24 maxlen: 24
212.135.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:1d:76:09:2c:9c:a2:09:f7:00:48:1f:92:30:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 14 07:12:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd01ca8e6c8df9574848780a54791e495c781961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:64:77:f0:ec:e7:5d:45:12:a8:1a:cf:d4:
88:75:1f:b1:b4:75:c0:c2:bc:22:d8:00:d7:fa:e2:
81:0b:03:3f:28:a1:63:74:e9:52:cb:cc:9e:d8:af:
08:9d:06:a9:51:9c:68:5d:85:ee:11:53:09:6e:cf:
7e:3f:5a:bf:3e:43:b1:d4:3d:0c:a6:33:54:88:f4:
69:db:e3:6e:14:05:80:ba:a0:d1:a9:1b:49:21:6b:
5f:9f:6b:58:44:bf:f2:41:03:ae:56:69:28:68:99:
b8:1c:c0:07:a2:e7:8c:b5:8d:e3:18:2d:75:33:51:
f2:a3:17:92:26:b4:51:84:81:5c:ae:30:54:a7:94:
4c:08:7c:f3:b1:ca:5c:7c:65:fb:73:c7:d8:15:03:
3c:8a:2d:c9:e1:da:cf:eb:3a:1f:70:e6:a6:67:0e:
e4:4a:96:4f:87:67:68:4c:e2:b9:0c:b8:ec:74:05:
38:47:f2:be:f0:f7:0c:db:2a:cb:dd:d5:0c:74:f6:
b9:39:52:c0:27:77:ef:20:39:ad:2d:a9:71:10:aa:
e5:98:4f:b2:44:35:75:54:cf:15:02:0d:1a:2d:24:
fb:3c:d7:56:ac:69:95:f7:87:a4:1b:c3:2e:a6:d8:
73:d8:4e:30:e0:3d:13:cc:5f:5e:b8:39:8e:2e:03:
c7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:CA:8E:6C:8D:F9:57:48:48:78:0A:54:79:1E:49:5C:78:19:61
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/_QHKjmyN-VdISHgKVHkeSVx4GWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.233.0/24
87.85.240.0/24
195.72.172.0/24
212.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:ad:31:9d:2d:4e:bc:8f:3e:31:93:a5:69:5d:c7:bd:6b:81:
da:01:c9:83:4f:1c:d5:dd:bf:4f:68:01:05:3f:6d:15:ae:78:
48:2b:5e:c0:0f:40:3b:f7:d1:9c:21:50:e3:b2:f9:1f:4e:73:
b1:83:3c:7c:8d:03:c1:a0:0e:46:f4:42:dc:61:8d:87:b0:57:
af:6f:1e:f2:52:70:b7:be:17:48:fc:89:f8:fa:d7:d4:84:7f:
0b:bd:e5:77:c3:de:c0:14:d3:82:2c:fd:dd:b6:27:4e:44:c1:
96:3f:91:56:87:d8:6b:c4:a8:e3:17:e4:6e:4f:35:bf:9d:3e:
6c:ba:01:27:15:b4:1d:f0:8f:63:22:ab:43:0a:43:a6:88:02:
b8:47:92:f1:c7:6a:ce:59:3c:d7:5d:fe:b2:eb:5e:f5:9f:30:
8a:dc:9e:3a:8b:01:e8:52:2f:95:a1:3c:5e:c8:04:67:06:a2:
a4:5e:26:df:f9:81:6f:5c:93:ee:33:a6:78:23:c4:ee:72:a1:
10:f9:7a:18:9d:8c:9c:cb:89:e3:e0:7f:87:8d:63:3c:38:10:
e6:79:77:b7:42:fd:d6:d9:b2:ca:fb:f8:b8:e0:f4:5f:c9:98:
e5:a3:c7:7f:a5:da:36:55:db:2f:7a:1d:01:40:61:24:34:f7:
e9:1f:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:43 2026 by rpki-client