Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b5J7ecWE4Z5Equ1jdiiRFcBhszo.roa
File: b5J7ecWE4Z5Equ1jdiiRFcBhszo.roa (raw, json)
Hash identifier: zZJr2Qx9etj2PK0Kt8bKBugQTdx1BrQ0MNcovNXWF/4=
Subject key identifier: 6F:92:7B:79:C5:84:E1:9E:44:AA:ED:63:76:28:91:15:C0:61:B3:3A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F65111B6B69BC3414856D0EC824CCFDAA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b5J7ecWE4Z5Equ1jdiiRFcBhszo.roa
Signing time: Wed 15 Jul 2026 09:17:27 +0000
ROA not before: Wed 15 Jul 2026 09:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198588
IP address blocks: 87.84.206.0/24 maxlen: 24
87.85.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:11:1b:6b:69:bc:34:14:85:6d:0e:c8:24:cc:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 15 09:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f927b79c584e19e44aaed6376289115c061b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:ad:1f:26:dd:22:13:ae:38:cf:f1:7e:e6:
4f:87:a1:fb:d3:4c:99:fa:bc:79:10:d8:cb:57:3b:
d0:b5:e7:a0:71:11:ad:a8:12:dc:fd:e0:32:f4:e6:
d5:66:24:b7:89:f0:4e:d1:16:ea:e7:3c:79:bc:d1:
eb:51:d7:92:88:62:9d:78:b7:cc:4d:f9:05:fc:3a:
45:3b:17:53:27:13:6b:48:37:13:7f:ea:1b:16:a5:
c8:b2:70:e6:ef:6f:2e:27:08:7d:6e:06:ac:7a:96:
f1:d9:19:88:7c:f4:65:f0:62:e4:39:af:69:9e:19:
ff:d6:4d:f6:72:97:58:81:f1:38:43:83:ad:37:c0:
a4:8b:27:87:d0:f4:5d:af:b9:37:8a:71:50:5c:e2:
4e:84:88:fc:0d:2a:0d:1f:cf:bf:07:77:b1:2f:bb:
22:25:f1:f3:97:31:21:04:30:73:ca:ff:9b:3d:06:
5e:9a:c0:e9:5d:4f:9f:b6:71:6c:c3:3f:8d:0a:ef:
b7:1a:40:df:1d:c5:5f:41:dc:c4:21:dd:9b:ec:e2:
09:af:29:9d:05:f5:85:9e:18:81:74:f1:0d:f6:cf:
b5:9f:c4:6a:67:79:04:b9:e7:ae:69:81:45:b5:b7:
5c:01:2d:9a:1a:42:4e:6a:c6:f1:77:41:f3:50:1e:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:92:7B:79:C5:84:E1:9E:44:AA:ED:63:76:28:91:15:C0:61:B3:3A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/b5J7ecWE4Z5Equ1jdiiRFcBhszo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.206.0/24
87.85.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:d5:db:12:48:b0:5f:43:55:43:d6:cb:9e:40:05:0f:46:fe:
c3:cb:62:be:5b:ba:ac:2f:3d:5a:02:cb:9f:ad:f8:2e:8f:a7:
5f:9b:66:55:41:35:6d:58:37:f5:71:ef:6c:74:09:aa:6a:88:
f8:1e:ae:df:66:85:a1:42:a4:32:b6:33:ce:7c:80:63:8a:a2:
c6:7f:21:bd:47:ac:34:ed:ed:79:6f:e5:9b:7f:60:3c:0e:3f:
d9:b5:ed:7e:5a:08:4d:84:ea:6b:2f:f3:78:28:7c:71:99:b3:
01:78:71:5f:3a:a2:7c:e6:0e:4b:45:1e:f8:c4:68:c1:2c:8d:
a2:e2:5a:9a:be:20:05:96:9f:c6:b8:ca:4d:cc:80:f5:a3:39:
c5:4c:f3:a3:76:40:fc:17:b0:15:45:f1:66:fd:5c:ed:01:57:
5a:44:af:2e:25:25:98:14:35:1c:44:ee:5f:9e:8d:7a:3b:30:
2b:8d:87:6d:6f:e8:1a:56:13:65:65:83:c5:07:67:09:39:0a:
1b:f3:b1:d4:f1:11:fb:0a:9a:5d:75:9e:a6:48:4e:f0:71:ba:
ac:1d:2a:ff:93:9e:f8:e4:6d:cc:7e:b1:3d:87:f8:fe:40:d5:
92:8d:63:0c:6e:90:dc:57:1b:59:05:b0:7a:55:48:79:02:85:
a1:9a:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:26 2026 by rpki-client