Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eA9NIEV0wFq_bG-xi6Vax9QEiT8.roa
File: eA9NIEV0wFq_bG-xi6Vax9QEiT8.roa (raw, json)
Hash identifier: H6FcQJqLnh2xr7GA2ivzn6wOv0ynq1WGcKR0vA1WiOQ=
Subject key identifier: 78:0F:4D:20:45:74:C0:5A:BF:6C:6F:B1:8B:A5:5A:C7:D4:04:89:3F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06A31C9169C9EFD00CDEA518B8011F800
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eA9NIEV0wFq_bG-xi6Vax9QEiT8.roa
Signing time: Fri 04 Sep 2026 02:14:02 +0000
ROA not before: Fri 04 Sep 2026 02:14:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153656
IP address blocks: 87.84.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:31:c9:16:9c:9e:fd:00:cd:ea:51:8b:80:11:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 02:14:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=780f4d204574c05abf6c6fb18ba55ac7d404893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:a4:31:33:36:9c:8c:56:31:35:18:bd:8b:
97:67:4c:cd:e1:ed:a8:f3:a6:b5:04:4c:9a:a5:4c:
77:4b:e8:ae:db:18:4c:de:9b:47:db:ef:51:c0:cc:
ed:f5:02:1b:a7:53:9d:28:66:ff:7d:9e:3c:b4:45:
a4:04:4b:06:eb:42:92:27:6c:fe:22:ed:98:3a:61:
15:ca:4a:63:30:68:c4:59:fb:54:6b:c5:0d:ef:05:
9d:c0:6f:47:6d:dd:6a:c5:57:e0:97:83:fc:2e:d9:
48:d6:07:42:87:88:17:78:bf:5a:1f:76:b3:44:59:
f7:2f:41:b7:d2:7c:16:7e:41:90:fa:ec:40:96:82:
70:40:19:9a:a5:54:f8:c0:e9:78:ec:ca:50:c5:bf:
7b:92:b4:1a:39:13:fe:ed:ce:37:13:08:11:0f:02:
53:0f:6b:4f:b0:e8:5b:03:43:87:f4:00:eb:b7:7e:
94:a3:0c:40:f5:b4:e2:ea:79:80:28:fc:55:b8:65:
9a:24:7e:5d:2d:a3:ce:1b:ee:01:92:ee:bd:db:a4:
a8:c4:66:2c:d1:df:8d:9d:d6:4a:4a:2f:5d:b3:64:
08:bb:6b:58:38:29:2c:04:a9:a7:95:f8:8e:00:30:
c3:04:b4:dc:d7:63:7d:d6:92:87:ad:74:ec:70:ae:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:4D:20:45:74:C0:5A:BF:6C:6F:B1:8B:A5:5A:C7:D4:04:89:3F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eA9NIEV0wFq_bG-xi6Vax9QEiT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:cb:bc:3a:f4:d6:95:be:13:fe:ab:a0:fe:a3:a2:e6:37:0b:
78:5d:27:41:43:e3:be:f5:d3:5c:12:2a:6e:98:99:d7:a9:a3:
6e:3f:64:2f:5a:c0:74:16:3b:79:93:90:86:2f:40:a6:b6:f5:
d8:af:df:0f:41:4d:c6:da:f8:d7:cc:aa:28:74:16:68:10:0a:
b7:07:e7:62:09:71:9d:9b:19:36:55:22:a6:6a:50:da:33:ac:
aa:25:2d:94:74:27:43:83:c7:55:7d:31:fe:6c:d1:fc:c6:0b:
02:c9:af:e6:29:ac:ca:7b:5d:25:b8:b3:53:27:6e:1b:28:d7:
f6:79:f1:ea:51:f2:36:5c:a2:57:5e:bc:9d:ee:54:93:c1:6e:
ab:65:6d:cc:68:cc:02:14:c4:1e:b6:00:fb:43:5f:3f:24:6b:
26:23:28:9c:ce:c9:4b:f2:05:6e:68:0c:11:6f:af:ba:73:b1:
61:3c:ff:57:94:e6:18:5c:71:2e:4c:2f:a9:62:ad:f5:60:40:
5c:48:6e:de:b8:bb:fe:83:c2:d3:68:de:fd:5c:5c:39:4e:49:
24:5a:c7:59:a6:c7:6e:d6:76:0d:87:c2:da:5f:c1:87:5b:af:
63:ca:ca:07:04:7f:14:20:c9:66:c0:52:ed:7b:bd:23:45:a5:
04:6b:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 07:29:45 2026 by rpki-client