Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b2vP8aa4dIIj2NIxcRaRgdv3ULo.roa
File: b2vP8aa4dIIj2NIxcRaRgdv3ULo.roa (raw, json)
Hash identifier: 0qNdSzrrhTo2v0L8JUijSnYu1LOtMGb9F5K3UeHeSfw=
Subject key identifier: 6F:6B:CF:F1:A6:B8:74:82:23:D8:D2:31:71:16:91:81:DB:F7:50:BA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FEC5BE06370527365555DCC1400A130A1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b2vP8aa4dIIj2NIxcRaRgdv3ULo.roa
Signing time: Mon 10 Aug 2026 15:47:51 +0000
ROA not before: Mon 10 Aug 2026 15:47:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146961
IP address blocks: 87.85.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:5b:e0:63:70:52:73:65:55:5d:cc:14:00:a1:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 10 15:47:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6bcff1a6b8748223d8d23171169181dbf750ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:7e:90:ab:03:83:fe:96:8e:3b:22:c1:aa:
2b:25:d6:62:c0:5f:38:eb:ce:5c:8a:99:d8:09:e8:
99:df:79:7f:e1:fd:22:45:41:e3:31:14:fa:0d:c0:
5d:b7:52:cb:75:9c:3f:c6:01:04:d1:de:20:de:5b:
5f:6c:f2:b7:e6:5b:fa:ae:71:5e:88:7f:69:ee:61:
20:2e:9b:c7:30:c7:6b:01:2e:6a:bf:35:d1:b2:c5:
73:84:46:00:2b:ed:a2:77:c2:49:6e:e0:11:69:43:
45:f0:75:09:d8:33:54:c4:d6:84:31:9f:76:6d:bb:
62:78:70:80:41:8a:48:69:81:42:db:e6:48:f2:e5:
90:0c:3f:6e:12:c1:a6:d6:7c:5a:33:74:e5:fc:d1:
2b:89:d2:87:2e:6b:28:b4:fa:d7:24:e8:ce:b0:19:
99:2b:00:77:ea:ac:16:5a:a0:54:fd:23:ee:d3:90:
f0:22:a3:35:d2:81:40:88:43:3b:48:68:ea:7e:b0:
5b:c6:7d:b1:5c:60:83:69:f4:06:ac:df:31:bc:ab:
2a:88:56:cb:c9:ff:bd:b1:af:28:b2:57:bc:82:c5:
6d:52:cb:09:73:88:f6:0b:6d:c5:47:d5:de:cd:45:
01:2a:9d:21:4a:c2:31:3d:f4:e6:d6:73:d1:9a:7a:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:CF:F1:A6:B8:74:82:23:D8:D2:31:71:16:91:81:DB:F7:50:BA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b2vP8aa4dIIj2NIxcRaRgdv3ULo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.142.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:7a:8d:9f:97:54:38:f0:7f:c6:ac:11:e4:1d:5c:5a:d1:24:
94:98:7d:ce:7e:9b:dd:46:d7:42:38:02:13:27:34:1a:28:36:
f0:12:18:9b:87:5d:55:64:ca:3c:6c:4a:ae:93:12:b1:95:e9:
31:75:b4:39:61:1b:d8:b1:52:3b:33:67:35:37:20:b3:15:68:
c6:eb:9a:7c:81:dd:ee:89:b4:2d:b6:22:67:5c:c6:6b:50:e5:
0d:0d:0e:d5:50:fa:fb:c4:8b:a9:90:c3:1a:ee:7b:65:93:1b:
06:40:10:52:aa:b1:56:13:90:5d:dc:de:5c:4a:40:3d:df:4b:
92:d4:22:7d:a7:9e:b6:59:ce:3b:2f:18:cc:4d:a2:e7:33:30:
6e:ad:3c:1c:97:0c:b3:06:3f:88:d5:bb:ef:8a:6e:07:8c:de:
35:90:8b:61:52:61:01:c0:a0:69:2e:dc:fe:5f:c3:4e:91:dd:
4e:35:3b:ef:f7:88:bb:9c:6f:56:c9:96:32:26:0a:45:c3:fe:
d0:51:d5:79:4a:8f:5f:68:83:a9:71:a4:ce:8b:a6:ad:90:85:
e3:ad:73:32:81:09:15:68:fc:f5:68:ff:f0:36:bb:c0:48:d6:
30:4b:c2:7a:95:6b:09:b0:98:1a:6b:fe:13:dc:cc:db:34:59:
ad:cd:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:46 2026 by rpki-client