Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g73xXJwFeGPkqyp3nz03WJ96pWo.roa
File: g73xXJwFeGPkqyp3nz03WJ96pWo.roa (raw, json)
Hash identifier: +iL44nBgdPteHI5WIVO1o+1huudZM6acjNXVScQ1SJA=
Subject key identifier: 83:BD:F1:5C:9C:05:78:63:E4:AB:2A:77:9F:3D:37:58:9F:7A:A5:6A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F0DC6254974B5438E9B71FA717A2172D4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g73xXJwFeGPkqyp3nz03WJ96pWo.roa
Signing time: Sun 28 Jun 2026 10:28:37 +0000
ROA not before: Sun 28 Jun 2026 10:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 87.84.220.0/24 maxlen: 24
87.85.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:c6:25:49:74:b5:43:8e:9b:71:fa:71:7a:21:72:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 28 10:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83bdf15c9c057863e4ab2a779f3d37589f7aa56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:af:b7:48:51:55:8d:07:a7:28:a3:d3:09:55:
64:3c:a0:a6:85:ce:a8:c9:8e:cc:35:f9:cf:dc:68:
d6:83:ef:6f:d6:6d:8e:d1:36:ed:e9:fb:cb:30:37:
26:78:78:6d:63:fd:3e:88:ba:3b:9c:d4:6c:d5:bb:
fc:ac:c4:4e:79:21:c0:f4:27:18:42:da:11:50:c4:
fe:58:32:e4:34:2b:be:28:01:97:a8:40:e2:cd:49:
9b:80:fa:8d:b7:c2:27:67:4f:87:f0:42:b8:30:8b:
f9:99:5c:d7:d7:78:72:c5:d8:3a:f7:fa:58:07:ee:
5a:1f:87:30:2f:a2:5f:53:1b:fb:63:0f:ad:da:8c:
c4:f5:6d:4e:fa:9f:16:84:c0:fa:57:66:82:7a:3f:
a4:9c:38:a9:6d:65:52:b6:92:cf:6a:82:02:ec:2d:
f4:d4:41:ec:9f:19:cc:22:bb:e2:c3:f1:5c:f5:87:
4b:c5:48:8f:44:3e:4c:e3:dc:6a:c8:de:a2:af:96:
07:d0:6a:14:3a:1b:8e:e6:6b:26:0e:ef:b4:bf:63:
50:ae:7a:43:3a:a5:4b:6c:15:34:ac:0d:f0:c0:87:
71:05:4a:f8:a4:a1:74:56:9d:06:85:d4:5c:d9:39:
f3:cf:99:9e:52:51:13:8a:3f:27:95:29:a5:68:8f:
f7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BD:F1:5C:9C:05:78:63:E4:AB:2A:77:9F:3D:37:58:9F:7A:A5:6A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/g73xXJwFeGPkqyp3nz03WJ96pWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.220.0/24
87.85.64.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:42:b5:cb:87:41:f5:79:92:a6:22:58:22:04:1e:c0:50:e6:
da:94:24:5a:ac:66:b6:b9:ee:ad:d2:f0:c6:99:80:8d:2f:ce:
ac:74:91:9f:99:2d:7d:81:31:2b:63:a3:60:e4:b1:bc:d1:57:
e5:f6:2c:ff:cb:02:20:cc:fd:be:d7:43:e7:ad:60:e0:53:79:
5d:ff:60:42:32:bd:1d:11:6b:ea:8b:be:bf:eb:6c:22:c9:6d:
3b:c9:25:68:0f:27:2e:b9:af:34:3c:f0:fe:83:c9:99:c4:40:
7c:eb:a0:92:19:f0:b9:1d:3a:46:bb:8b:dd:3b:87:09:19:85:
6b:e7:a4:6f:82:0b:74:6a:ca:5c:4e:f1:cc:6b:5d:df:0d:76:
b9:fc:e5:0e:97:36:16:85:cc:5e:5b:3a:00:4b:09:a1:f3:b5:
2d:29:36:80:d8:59:8f:a7:71:b2:96:d4:d6:4b:2d:f4:5b:39:
1d:71:e8:35:1b:6f:18:89:91:2e:39:16:ff:75:45:c1:ee:fe:
54:51:d5:c6:81:3d:76:03:ad:c7:87:2d:af:52:fb:4b:3b:d8:
bc:6a:43:64:c6:68:63:45:eb:64:10:41:39:0d:4b:a2:d1:aa:
92:c2:94:56:33:78:e9:ee:8c:75:a0:70:85:50:95:8c:6d:b9:
28:b8:22:95
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8NxiVJdLVDjptx+nF6IXLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjI4MTAyODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2JkZjE1YzljMDU3ODYzZTRhYjJhNzc5ZjNkMzc1ODlmN2FhNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76+3SFFVjQenKKPTCVVkPKCmhc6o
yY7MNfnP3GjWg+9v1m2O0Tbt6fvLMDcmeHhtY/0+iLo7nNRs1bv8rMROeSHA9CcY
QtoRUMT+WDLkNCu+KAGXqEDizUmbgPqNt8InZ0+H8EK4MIv5mVzX13hyxdg69/pY
B+5aH4cwL6JfUxv7Yw+t2ozE9W1O+p8WhMD6V2aCej+knDipbWVStpLPaoIC7C30
1EHsnxnMIrviw/Fc9YdLxUiPRD5M49xqyN6ir5YH0GoUOhuO5msmDu+0v2NQrnpD
OqVLbBU0rA3wwIdxBUr4pKF0Vp0GhdRc2Tnzz5meUlETij8nlSmlaI/3oQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIO98VycBXhj5Ksqd589N1ifeqVqMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZzczeFhKd0ZlR1BrcXlwM256MDNXSjk2cFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1TcAwQA
V1VAMA0GCSqGSIb3DQEBCwUAA4IBAQDLQrXLh0H1eZKmIlgiBB7AUObalCRarGa2
ue6t0vDGmYCNL86sdJGfmS19gTErY6Ng5LG80Vfl9iz/ywIgzP2+10PnrWDgU3ld
/2BCMr0dEWvqi76/62wiyW07ySVoDycuua80PPD+g8mZxEB866CSGfC5HTpGu4vd
O4cJGYVr56Rvggt0aspcTvHMa13fDXa5/OUOlzYWhcxeWzoASwmh87UtKTaA2FmP
p3GyltTWSy30Wzkdceg1G28YiZEuORb/dUXB7v5UUdXGgT12A63Hhy2vUvtLO9i8
akNkxmhjRetkEEE5DUui0aqSwpRWM3jp7ox1oHCFUJWMbbkouCKV
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client