Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/evsFQrOZ2PXdubahV3X8eLlAJfs.roa
File: evsFQrOZ2PXdubahV3X8eLlAJfs.roa (raw, json)
Hash identifier: GGFE7f5WKlIOQSAnOuCZ5AseD4Dgi2c/axjrCz74Yj4=
Subject key identifier: 7A:FB:05:42:B3:99:D8:F5:DD:B9:B6:A1:57:75:FC:78:B9:40:25:FB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EEB7A80284882224EFBABD76562A6C3D6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/evsFQrOZ2PXdubahV3X8eLlAJfs.roa
Signing time: Sun 21 Jun 2026 18:38:54 +0000
ROA not before: Sun 21 Jun 2026 18:38:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 87.85.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:eb:7a:80:28:48:82:22:4e:fb:ab:d7:65:62:a6:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 21 18:38:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7afb0542b399d8f5ddb9b6a15775fc78b94025fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:eb:b4:bb:d8:7d:cb:26:e7:d9:de:9b:6e:
2c:f6:0b:0d:1f:f9:b6:52:79:b8:59:ad:b7:99:64:
b5:d9:3e:b5:77:ea:75:92:a5:fc:e2:ec:7c:12:ad:
2d:47:93:52:50:2d:b8:08:5b:2c:82:a8:9c:11:eb:
a6:68:71:a4:54:f1:7c:61:68:b9:2e:f5:1d:73:78:
8b:98:b2:59:2a:9d:d3:78:52:20:4a:71:ec:15:78:
60:87:fb:e5:b8:00:4d:20:96:87:a6:47:e5:9e:d1:
2c:f1:e5:42:a5:e2:41:69:32:d3:1b:6c:a8:cc:76:
d5:d0:70:b4:00:4f:9b:2c:b6:8f:66:b2:c3:49:82:
dd:a7:8b:11:ac:a7:11:39:91:0d:e4:62:22:ba:a7:
77:bc:b0:8e:f4:10:5e:39:47:5c:bb:2a:cd:c4:bb:
58:c4:15:de:a1:41:46:28:87:77:87:d8:8c:2a:b6:
3b:49:5c:24:79:24:45:78:d2:f8:61:20:ff:80:42:
6f:eb:11:2b:95:07:5a:5e:40:4f:53:93:81:be:07:
d7:9d:b3:8f:a1:a9:6a:4b:61:7c:8f:49:0d:98:83:
68:4e:ad:1b:97:4d:31:53:40:c3:d9:b3:f2:93:f7:
4e:51:8c:20:ac:35:0f:d9:ac:38:7f:aa:af:75:ed:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:05:42:B3:99:D8:F5:DD:B9:B6:A1:57:75:FC:78:B9:40:25:FB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/evsFQrOZ2PXdubahV3X8eLlAJfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9d:97:00:03:8f:fc:bd:6c:34:84:21:a7:e9:af:05:fc:0d:
85:ff:9c:15:56:48:9e:19:a9:4c:01:75:2c:77:77:74:0d:eb:
52:e0:3a:47:6f:bd:ae:e9:4c:93:90:5e:b2:7d:df:b6:7c:b2:
24:67:3c:71:61:16:30:c2:61:0c:9d:25:08:2a:81:f4:46:31:
ce:fc:d3:93:51:36:4d:98:f9:46:cc:d2:7d:9b:2e:d8:54:a9:
5e:ed:80:8a:67:ef:b9:3d:f0:2e:35:35:7e:fc:b1:d7:81:d9:
13:2b:79:79:9a:fe:5f:ea:af:6c:91:bf:d6:6f:46:e7:78:05:
0f:cb:38:39:db:23:57:2a:95:19:6d:78:2b:c3:74:c3:fc:3e:
77:c1:54:58:9f:51:8c:40:6c:5f:06:a6:18:28:ca:9e:fc:a9:
07:fe:51:62:31:d3:d2:9e:e2:01:ee:87:f2:e7:db:6a:11:c4:
e3:4e:a1:e3:90:74:80:9c:f8:70:ca:5e:b1:c0:33:31:85:cf:
c2:de:32:68:28:4a:11:73:6e:cb:c7:96:0a:af:f8:04:0c:5c:
16:e4:5f:9a:7a:02:f6:73:f2:1d:22:4d:c9:be:99:3b:13:eb:
35:20:49:24:59:dd:97:1a:b1:3e:a3:25:72:3c:09:bf:1c:bd:
b6:b1:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client