Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hTq26J5FqqcJFBOTPnCA4yAwo0Q.roa
File: hTq26J5FqqcJFBOTPnCA4yAwo0Q.roa (raw, json)
Hash identifier: Fz/C+/TgBfpDKbdRcDPN7VvgAvtlmBwAcPbpqqh+ECc=
Subject key identifier: 85:3A:B6:E8:9E:45:AA:A7:09:14:13:93:3E:70:80:E3:20:30:A3:44
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EEECD07C6E08AE94AF165BDD028E62C50
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hTq26J5FqqcJFBOTPnCA4yAwo0Q.roa
Signing time: Mon 22 Jun 2026 10:07:54 +0000
ROA not before: Mon 22 Jun 2026 10:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 87.85.71.0/24 maxlen: 24
87.85.131.0/24 maxlen: 24
87.85.174.0/24 maxlen: 24
217.79.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:cd:07:c6:e0:8a:e9:4a:f1:65:bd:d0:28:e6:2c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 22 10:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=853ab6e89e45aaa7091413933e7080e32030a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:a0:84:95:da:0d:f7:6b:2c:75:6b:a1:b0:
2d:18:50:b4:2e:46:6b:d0:55:5a:91:90:37:61:2e:
79:11:2c:0d:93:23:41:d1:70:d7:e3:dd:34:ef:23:
44:38:07:e2:74:59:96:3a:9e:b6:a9:7a:2c:9c:88:
ed:06:5e:a6:6f:90:44:a1:4d:2f:ec:61:65:80:6d:
de:f2:55:ed:3c:0e:76:54:8d:a5:b7:1f:1f:4a:1c:
8c:77:6e:8a:fa:6d:7f:ca:ee:dc:8a:ac:d7:d8:d9:
02:53:0e:2b:57:38:2e:42:cf:fc:52:ef:e8:d4:fa:
fc:65:7e:be:40:4e:cf:36:3f:87:d0:af:3f:46:6d:
af:e8:72:a8:b0:92:11:a5:55:77:e0:26:ab:e3:d7:
b5:87:ef:b9:4a:04:68:6d:b2:e7:75:3f:07:3a:36:
4e:8a:e0:13:21:fc:69:ad:f8:01:86:29:b7:25:45:
33:7d:f1:3e:74:75:a6:ce:d8:04:20:ff:44:71:b9:
72:86:e7:dd:ed:97:19:f7:c0:bd:9a:e2:96:42:1f:
d7:0f:85:5f:b9:1c:eb:f9:02:fc:98:eb:cb:c2:0c:
a0:7d:a8:49:14:c2:9d:de:26:60:57:e3:f9:da:9a:
b0:a3:d7:59:b3:02:cf:6f:2f:5b:f8:40:52:12:60:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:B6:E8:9E:45:AA:A7:09:14:13:93:3E:70:80:E3:20:30:A3:44
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/hTq26J5FqqcJFBOTPnCA4yAwo0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.71.0/24
87.85.131.0/24
87.85.174.0/24
217.79.126.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cd:1a:1a:65:e5:76:2f:d0:04:3e:ea:c1:6e:cf:97:8a:fe:
dd:7a:37:1a:aa:10:4c:28:b9:02:ec:62:2b:33:d8:b4:9c:ac:
19:57:fa:f9:6d:0e:a8:de:c9:dc:b9:15:b2:f3:d0:ee:48:0b:
d3:42:fc:01:0b:84:6c:42:21:24:64:6f:0b:f1:13:91:fe:c3:
b0:42:89:e7:d2:7d:a9:77:4f:72:b4:53:08:11:ba:46:c9:d4:
78:ac:76:ed:83:fa:2c:79:f2:cc:14:b1:20:19:5e:c2:61:9f:
a8:7e:0b:80:a9:bb:38:9b:dc:6f:87:61:36:06:4a:0e:a2:5b:
e6:12:5f:ad:e7:35:68:ec:a5:1f:78:cb:1b:c9:79:ea:09:4e:
11:fb:31:12:1a:fd:2a:70:58:92:c8:c7:49:be:4e:22:96:96:
98:36:48:7b:80:c9:13:48:67:7d:5a:ba:62:bb:de:c5:6d:0e:
8e:23:4a:d8:31:9b:44:4c:77:fc:af:1c:fa:81:1e:8c:6c:13:
9d:64:82:78:76:4a:68:aa:30:66:5f:3d:e0:aa:52:14:64:47:
19:4f:37:cc:24:e5:52:a2:55:60:a2:80:8a:65:ac:09:86:88:
1e:16:ba:34:37:1f:28:7a:dd:03:2b:43:f8:7c:5d:2e:de:f6:
55:45:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client