Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fFw7q0omCvqTM-Ct3u49AUU84dA.roa
File: fFw7q0omCvqTM-Ct3u49AUU84dA.roa (raw, json)
Hash identifier: 47Rpn50KLzyCS88P+QWI7onNeBEUoKJQ14u1dDZf050=
Subject key identifier: 7C:5C:3B:AB:4A:26:0A:FA:93:33:E0:AD:DE:EE:3D:01:45:3C:E1:D0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FDB2F8E9F9C8A035BCBDE2CA451E88D34
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fFw7q0omCvqTM-Ct3u49AUU84dA.roa
Signing time: Fri 07 Aug 2026 07:45:54 +0000
ROA not before: Fri 07 Aug 2026 07:45:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214861
IP address blocks: 87.86.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:2f:8e:9f:9c:8a:03:5b:cb:de:2c:a4:51:e8:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 7 07:45:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c5c3bab4a260afa9333e0addeee3d01453ce1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:05:9e:29:88:1e:e0:7a:bb:e3:39:75:f1:
88:46:18:a7:c9:13:4b:be:4e:c4:ed:c4:e5:55:02:
25:7d:b5:16:39:d8:d9:ae:56:97:ad:33:4b:60:a7:
31:cd:d3:70:70:ca:19:31:ce:5e:2d:00:93:bf:10:
52:97:fc:a0:ad:8b:92:46:41:cc:c5:d2:c4:95:eb:
d3:40:71:f9:bf:de:f9:80:7f:e8:06:23:21:41:f0:
96:70:64:85:8e:34:c3:a8:9d:b4:ec:6a:92:61:0d:
2b:0c:76:37:39:ca:68:eb:19:56:f4:19:05:56:4a:
af:ba:be:19:02:07:bd:ca:11:35:e0:4f:58:91:85:
5a:38:8e:26:e6:0d:f8:e8:b9:14:89:2d:99:87:f8:
cd:6b:c4:1b:d6:83:31:d9:53:d5:28:1d:c9:a6:40:
79:b4:b0:01:fc:e7:27:85:8d:c5:b8:f3:c0:7e:1d:
12:4b:8b:e1:c5:0b:6f:61:65:db:c6:d4:f4:92:7a:
86:c5:f5:48:f0:e0:af:90:b2:99:02:8f:6c:d9:2f:
58:43:fa:dd:5b:8b:1a:0d:39:d5:4f:27:1d:e1:ac:
4e:4f:41:ed:2e:15:fe:1b:ab:a3:8c:5d:1f:2e:ed:
38:48:aa:df:c0:39:65:b4:e3:15:af:da:45:48:4a:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:3B:AB:4A:26:0A:FA:93:33:E0:AD:DE:EE:3D:01:45:3C:E1:D0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fFw7q0omCvqTM-Ct3u49AUU84dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:81:49:c8:b0:a0:bf:22:d4:7a:1e:d9:b2:26:0d:69:db:3c:
f1:f6:29:1c:a2:11:ff:02:b9:d3:c8:21:d3:d9:42:a7:29:46:
24:94:1c:7e:3b:60:af:cb:5f:ca:65:7c:65:34:39:bd:60:d1:
75:cb:2e:ae:1c:95:dc:05:36:67:b8:1a:be:f4:b8:b8:7e:dc:
a9:3c:db:06:68:45:92:c8:e1:42:e8:0a:4c:b3:e8:d7:5e:85:
4d:84:ea:2e:35:2c:fc:64:a3:f4:3f:16:db:66:fb:7d:c0:b0:
ce:41:18:e5:33:3e:98:03:4a:96:2c:11:f4:d3:13:a9:24:9c:
c5:3e:35:d6:56:b4:06:e1:d1:8a:d9:23:a0:ce:45:0a:f1:cd:
7c:55:3a:d3:0f:8f:f5:f2:ec:20:27:ab:b4:8b:14:09:e5:0c:
f9:4e:52:87:6d:2d:0c:aa:27:be:fa:af:49:28:7b:a9:e1:82:
ee:68:47:30:94:a5:49:2f:78:9e:b4:7f:2d:17:8d:1b:e0:63:
29:b0:b4:b0:97:90:0d:74:1c:b8:1b:55:a5:f3:46:9e:0c:d3:
3d:11:ca:fd:6b:40:6e:fd:26:85:05:32:12:d0:5f:84:61:e7:
6d:24:e6:c8:a6:2c:57:2d:b3:c4:b9:b4:80:93:4c:b4:28:7b:
6a:04:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:38 2026 by rpki-client