Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e5pAQsm38bMHeWI4BJJk1t2FXd8.roa
File: e5pAQsm38bMHeWI4BJJk1t2FXd8.roa (raw, json)
Hash identifier: GNvrQmiD/x16tEDMhgjoy0T+Qwf/FH4DatebYpk8v4E=
Subject key identifier: 7B:9A:40:42:C9:B7:F1:B3:07:79:62:38:04:92:64:D6:DD:85:5D:DF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF3DB4EA76A70E40929E819E287B8697D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e5pAQsm38bMHeWI4BJJk1t2FXd8.roa
Signing time: Tue 23 Jun 2026 09:41:36 +0000
ROA not before: Tue 23 Jun 2026 09:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197646
IP address blocks: 87.85.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:db:4e:a7:6a:70:e4:09:29:e8:19:e2:87:b8:69:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 23 09:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b9a4042c9b7f1b307796238049264d6dd855ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:da:d4:82:df:80:56:87:b3:98:8b:5e:15:
cf:c9:ac:ca:3b:1b:9a:48:71:92:bc:c7:d1:59:0c:
c5:59:d2:f8:19:15:54:11:63:f9:b7:c0:63:3d:02:
44:a6:ab:47:01:30:76:0c:48:ee:0b:29:c6:3a:0e:
b8:c2:e8:fe:04:cb:02:70:c4:69:2d:6a:53:37:78:
c2:68:23:7a:38:7c:dd:34:2d:34:c3:3e:7e:a0:11:
9d:d1:9f:5f:e9:2c:42:f3:92:75:ff:11:a7:8f:fd:
e2:07:35:74:da:3b:29:f4:13:e4:39:8d:b0:45:01:
fe:55:a5:cd:29:c6:68:a0:c3:94:ca:14:8e:ff:fb:
29:62:12:9c:c9:6c:08:e4:95:40:83:df:b2:b0:39:
aa:39:b1:13:69:30:e4:d2:bd:2c:ba:11:37:4e:11:
64:12:b7:ca:55:ac:ee:c4:1e:12:71:08:e8:fa:d4:
a9:7a:c9:9c:43:1c:5c:52:d6:38:28:70:d7:4a:1d:
87:47:ad:08:81:81:9a:6b:fc:6b:22:d7:8e:fb:be:
5b:1d:f2:8a:2c:74:52:7b:bb:25:38:1a:89:3d:af:
88:3b:f1:d4:28:59:d8:38:45:29:4d:64:6f:b3:d4:
f1:40:9b:a0:03:0e:04:02:63:ca:1d:9c:a8:d7:34:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9A:40:42:C9:B7:F1:B3:07:79:62:38:04:92:64:D6:DD:85:5D:DF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/e5pAQsm38bMHeWI4BJJk1t2FXd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.66.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:42:42:ca:8e:f1:0c:2d:80:d1:66:05:68:1d:8e:e6:cf:ad:
36:1b:17:4b:6f:dc:db:0f:8e:48:cb:e2:b6:b3:f1:f6:47:4d:
71:3c:5b:c7:5b:f0:7b:d7:0e:7e:e2:57:6d:f5:a6:77:0f:f8:
b8:d7:a5:8d:bb:94:c5:c4:0b:98:16:c1:7e:ee:41:44:89:a4:
4e:64:0d:c6:13:78:18:f1:d4:ac:e2:6f:33:f2:9a:0f:0d:17:
5c:36:b3:36:63:5b:6e:c1:98:c6:c7:b2:59:54:af:43:f9:bf:
51:88:32:ab:64:a2:38:ea:52:66:2b:7c:ba:9b:cc:e9:32:e4:
41:e0:84:06:aa:12:c8:78:87:86:0c:9b:7e:25:f8:a5:46:ba:
1e:f9:1f:59:82:74:20:e7:1a:3b:7a:4e:3a:58:4b:bc:d9:52:
09:88:3f:ac:01:19:76:1f:22:07:01:12:83:f8:14:66:47:bf:
23:d3:85:7c:f3:f6:43:ce:e5:90:00:09:1e:e5:49:08:c5:c4:
85:80:68:94:bd:f2:a3:7d:96:84:7a:a3:17:bf:8d:55:0e:32:
fd:d4:64:85:dd:ee:57:35:36:1b:26:9b:76:11:8a:34:d4:32:
ac:df:f0:04:29:f6:6f:1b:64:e1:a4:73:a4:0d:49:b4:f3:9e:
b4:a5:2a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client