Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atsO7ZJSWZHYoatP2R-SrajNACQ.roa
File: atsO7ZJSWZHYoatP2R-SrajNACQ.roa (raw, json)
Hash identifier: p5q9Eph/E6NN5fOEi4t1fNoSwAyXRlywEAlXrWtGt8A=
Subject key identifier: 6A:DB:0E:ED:92:52:59:91:D8:A1:AB:4F:D9:1F:92:AD:A8:CD:00:24
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A15E432FF9C7A75A88B4109EB344803D0D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atsO7ZJSWZHYoatP2R-SrajNACQ.roa
Signing time: Wed 21 Oct 2026 11:40:23 +0000
ROA not before: Wed 21 Oct 2026 11:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 87.86.37.0/24 maxlen: 24
212.135.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:43:2f:f9:c7:a7:5a:88:b4:10:9e:b3:44:80:3d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 21 11:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6adb0eed92525991d8a1ab4fd91f92ada8cd0024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:1a:b5:cf:03:13:c7:f4:ed:4a:a5:f4:32:
68:f3:15:d0:9e:74:a0:87:9f:14:f4:e9:27:28:c7:
d8:1e:13:f8:9a:21:ff:e8:bf:19:a7:08:20:12:36:
50:e6:76:c4:7f:fe:d0:fa:fa:a8:0e:e5:dd:3c:ee:
8a:34:e8:18:0a:d8:e7:b7:1a:b9:d0:dd:01:4a:df:
e3:7c:7d:79:9b:c0:9a:c0:b5:2f:73:2c:6d:41:3e:
dd:1c:db:06:6f:e4:90:a0:52:fd:12:c5:e2:1b:03:
e3:ef:81:07:ba:5b:56:9d:c6:93:21:fc:fe:25:8b:
af:b0:51:f7:4e:4e:4b:96:4d:3d:22:77:f6:b4:02:
3a:eb:89:3d:ba:c9:c4:80:1e:61:5f:5a:1e:50:34:
0f:ac:5a:b7:97:43:f5:98:b9:ba:0e:38:7b:92:aa:
4f:d5:33:a4:e2:64:61:a8:26:c1:a2:44:77:ca:a7:
a2:f2:13:db:17:1e:7c:2c:6e:ab:e4:c8:c5:6b:d7:
96:9d:56:0d:1f:e7:9c:1f:1d:35:11:30:19:50:e2:
53:6e:69:47:92:f5:54:df:3a:5d:21:bf:51:de:7e:
d6:a9:a5:9c:e8:bb:01:8d:e7:d2:90:4b:90:35:b1:
4f:a5:eb:34:05:29:a2:a5:54:5c:0b:94:5c:48:3a:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:0E:ED:92:52:59:91:D8:A1:AB:4F:D9:1F:92:AD:A8:CD:00:24
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/atsO7ZJSWZHYoatP2R-SrajNACQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.37.0/24
212.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
93:43:c8:fb:0c:64:2c:33:f9:bc:a0:ee:74:9c:f6:40:95:f5:
75:e8:5c:29:d2:c7:3e:c0:2f:e2:9c:2e:04:03:70:c0:13:85:
70:6e:0e:a8:74:73:f5:c5:99:98:26:a0:b4:03:aa:e0:17:99:
5b:ca:ce:48:6d:de:4f:6c:6a:47:3e:02:b3:c5:de:1d:0f:56:
33:81:00:ea:68:cb:4d:83:ee:93:10:7e:aa:e0:ea:f1:6f:80:
04:70:ae:d9:3b:e6:a4:f0:6b:37:e7:7f:e4:c0:6d:58:08:a2:
07:1f:c7:5a:02:b4:32:4a:f8:d7:f3:12:0f:42:b2:21:12:bc:
89:4c:92:9c:c4:48:0c:85:9c:44:64:0a:2d:7a:19:34:a4:d0:
05:fe:bf:2e:f0:3c:1d:0c:29:f9:09:02:45:11:98:4d:72:2a:
49:8b:27:26:ba:7e:02:57:13:f7:1e:d6:6a:d4:5d:a6:ce:cd:
79:db:da:dd:60:63:18:1c:4f:50:7e:39:f4:a2:4c:cd:f4:9a:
68:c2:cf:e4:c9:1b:cf:b8:14:36:1f:39:10:fa:66:ef:89:28:
58:74:c5:21:a0:b0:bc:19:2b:02:97:11:82:97:0f:d2:d0:c2:
32:a9:91:ba:c9:ba:ca:e8:2d:d4:b2:f3:1d:39:e6:0e:44:30:
c6:c0:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:22 2026 by rpki-client