Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/etv4frblflsKwH4sgEsI4lC0nh4.roa
File: etv4frblflsKwH4sgEsI4lC0nh4.roa (raw, json)
Hash identifier: TvMDI+AQbRr2BzxgMhayrN75D83Hv1sziBz2OV8LfMA=
Subject key identifier: 7A:DB:F8:7E:B6:E5:7E:5B:0A:C0:7E:2C:80:4B:08:E2:50:B4:9E:1E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A04FF94DA0DA69C242A656F8B46575B7EE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/etv4frblflsKwH4sgEsI4lC0nh4.roa
Signing time: Sun 30 Aug 2026 00:02:13 +0000
ROA not before: Sun 30 Aug 2026 00:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135230
IP address blocks: 82.110.48.0/24 maxlen: 24
87.82.253.0/24 maxlen: 24
87.83.12.0/24 maxlen: 24
87.84.208.0/24 maxlen: 24
87.85.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:f9:4d:a0:da:69:c2:42:a6:56:f8:b4:65:75:b7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 30 00:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7adbf87eb6e57e5b0ac07e2c804b08e250b49e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:40:fe:6b:ae:10:03:b1:73:19:8a:fa:08:
ef:1f:ef:89:79:29:9f:e8:48:b2:d0:96:9d:19:ae:
eb:3e:05:0a:9e:5c:74:8b:d1:8c:89:90:26:0e:b4:
7c:72:28:3d:b5:92:1f:90:f9:cd:be:ea:34:94:2a:
ce:f7:98:2b:3a:2a:e0:49:a6:99:db:1e:f7:5f:ae:
ab:06:75:a3:02:03:54:4c:d2:10:03:5e:92:20:93:
60:23:86:2a:dc:a4:4d:bf:4b:7d:aa:76:bc:a8:f0:
f5:01:1b:7a:8e:8b:86:bd:43:b2:50:d8:b3:ca:78:
bf:7c:cc:4f:ab:38:ae:68:a7:4b:f2:be:e2:65:13:
41:b1:5b:6a:3c:7a:58:78:df:3e:c5:bb:24:ce:0c:
f6:9d:6c:c1:ab:af:de:97:23:f7:7c:3b:bc:9e:84:
f0:16:a1:ea:5e:e4:04:3f:0d:3f:fc:fa:eb:7e:b7:
c6:a9:a4:a3:7c:d1:b2:79:fb:60:90:d2:29:56:d8:
5b:17:50:1b:1c:82:f7:39:c8:9e:5c:ff:41:5c:22:
73:aa:15:5b:84:1e:e2:c2:fd:da:0c:ad:17:31:56:
9c:38:02:82:21:75:d2:cb:d2:6c:c5:92:af:f2:ca:
cb:26:e0:cc:83:13:a6:e2:67:4f:05:6e:0b:3b:f6:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:F8:7E:B6:E5:7E:5B:0A:C0:7E:2C:80:4B:08:E2:50:B4:9E:1E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/etv4frblflsKwH4sgEsI4lC0nh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.48.0/24
87.82.253.0/24
87.83.12.0/24
87.84.208.0/24
87.85.235.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f3:69:13:be:76:49:f5:6c:4b:9e:e5:be:77:f0:52:f8:df:
2f:88:9a:23:2b:82:0f:3e:3f:dc:01:2e:95:d5:24:26:0c:bd:
de:d8:72:2b:74:19:1d:3d:95:9f:75:a1:34:0f:6e:f7:ed:1a:
0e:06:b4:f1:bc:c6:07:cd:0f:ac:fb:c8:df:a9:31:0d:42:44:
6c:cb:85:3e:a8:28:a3:41:49:d1:bd:fc:67:d0:aa:e1:c2:86:
1e:6a:79:f3:56:71:18:d1:1d:b7:f7:a0:bc:7b:c4:5e:16:23:
d9:79:44:54:43:d1:23:f8:b8:7a:b0:b1:3c:63:55:4b:b6:4a:
f3:87:c1:f3:7d:5f:64:5d:4c:5c:b6:18:8a:f7:9f:d6:1c:65:
be:2b:dd:54:9a:87:16:1f:85:97:85:0b:5c:d1:72:5d:51:a6:
c7:2a:53:2a:62:f8:92:6d:d9:00:96:ca:d6:64:84:46:df:a7:
ce:9a:66:68:f6:e5:cc:70:d3:ba:bd:f3:93:e5:a7:6e:95:0a:
1f:bc:c0:34:85:5a:2b:8e:60:cf:85:6d:90:1d:8d:bf:d5:cc:
5d:73:5b:e5:64:e5:3c:7b:7b:e7:8b:8f:fd:c0:24:77:64:1a:
ec:74:01:03:64:84:86:60:11:ca:30:48:71:1f:48:6d:75:a1:
a4:ce:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:10 2026 by rpki-client