Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/geqbkr7crEdzCkRzeXHzagRhjKw.roa
File: geqbkr7crEdzCkRzeXHzagRhjKw.roa (raw, json)
Hash identifier: 4r14Z28j1iitreb/aod8zu3wpU1l7WCYLlmy/yA8dy8=
Subject key identifier: 81:EA:9B:92:BE:DC:AC:47:73:0A:44:73:79:71:F3:6A:04:61:8C:AC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EED24390F1355C66C1FF84A2073A09E6E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/geqbkr7crEdzCkRzeXHzagRhjKw.roa
Signing time: Mon 22 Jun 2026 02:23:54 +0000
ROA not before: Mon 22 Jun 2026 02:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141280
IP address blocks: 87.84.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:24:39:0f:13:55:c6:6c:1f:f8:4a:20:73:a0:9e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 22 02:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81ea9b92bedcac47730a44737971f36a04618cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:09:97:4e:10:50:e6:90:9e:2c:e4:60:0c:
f1:09:10:ba:f5:c2:69:98:b6:18:13:5d:44:d2:9b:
99:21:d9:d5:4f:23:31:b0:58:3a:fb:70:de:00:b4:
6d:30:be:fb:41:f1:b7:a1:5b:f8:b0:5c:02:25:bf:
89:50:e2:cb:b1:fd:66:0c:21:bf:25:df:fc:29:e4:
43:83:da:5d:05:98:15:82:1a:03:87:ca:a5:99:b8:
93:c7:f7:3e:98:80:81:58:76:c2:61:d4:bc:5b:d9:
32:30:d5:1a:97:96:69:c7:68:47:35:1d:c9:1f:41:
de:97:ce:7d:f6:d2:bc:4c:af:87:d5:db:83:35:e8:
d2:c9:6a:bb:14:5a:5c:a5:73:3e:c1:4b:3c:b4:b9:
3b:01:b7:0a:51:23:50:b8:23:2f:32:3b:31:70:6a:
cc:7f:a2:23:64:5c:c6:2f:f0:a2:f2:51:d4:12:79:
7b:9b:10:79:77:cc:66:fb:38:6f:fe:b9:af:36:a2:
62:45:f3:04:08:b4:e9:01:07:87:21:77:9f:aa:6d:
ed:64:6f:c3:21:b0:e8:00:eb:e0:28:40:a7:da:59:
54:81:27:40:68:16:cb:62:a0:28:14:11:20:07:86:
99:50:3b:dc:c2:be:41:63:4c:14:e0:ba:9b:e6:70:
cd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:9B:92:BE:DC:AC:47:73:0A:44:73:79:71:F3:6A:04:61:8C:AC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/geqbkr7crEdzCkRzeXHzagRhjKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:cc:be:ae:26:9f:d0:18:e2:1a:fb:a5:1d:13:03:81:24:f8:
a6:d9:3f:75:9a:4c:83:24:ab:de:4b:7e:7f:ce:ce:d9:df:e1:
ca:be:6d:63:6f:bc:c4:2c:77:92:c2:f2:15:5a:69:bf:f2:c7:
fe:0d:f1:32:ea:c5:c7:60:63:e4:9b:65:1e:84:5b:56:d7:95:
89:8f:cf:64:bc:b6:2c:7b:ec:2c:85:f4:b0:9e:dc:be:7a:45:
d3:5f:e4:e1:8f:c5:05:b9:72:e2:3c:44:8a:9f:bf:e7:ed:7b:
ff:93:28:42:69:d8:df:76:63:c9:9a:a8:e1:b4:d0:ba:ce:21:
0a:22:cb:67:37:ac:c4:3b:29:bb:21:ba:40:c1:57:91:3e:2f:
34:0b:a9:12:ed:7d:bf:ef:64:6f:f8:93:8e:4b:3d:fb:98:ef:
ac:6a:8e:5a:47:17:c4:f2:fe:3e:30:aa:9a:34:ca:23:33:59:
8c:f3:11:f6:03:c6:c5:fa:0b:20:2f:51:4c:9f:3e:6f:c2:3a:
b3:b4:25:c7:df:56:ab:c5:ae:45:6c:5e:e2:92:6f:b1:86:d4:
89:e8:6f:21:93:de:68:ae:40:c9:f2:7d:e5:5d:eb:1b:53:34:
68:25:83:9a:61:d7:8a:44:99:22:ad:d6:a2:d5:e7:07:10:25:
0f:4f:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:05:31 2026 by rpki-client