Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iSwd2YG1dN7Iz0EhID9McHltU9g.roa
File: iSwd2YG1dN7Iz0EhID9McHltU9g.roa (raw, json)
Hash identifier: Q5uZfiMQj9f3w8m3yOnDDpmHYBqKcwRYqHv1LWAw2No=
Subject key identifier: 89:2C:1D:D9:81:B5:74:DE:C8:CF:41:21:20:3F:4C:70:79:6D:53:D8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A04336C0189E5CF8CE61A4FC26607685CF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iSwd2YG1dN7Iz0EhID9McHltU9g.roa
Signing time: Thu 27 Aug 2026 12:34:16 +0000
ROA not before: Thu 27 Aug 2026 12:34:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17404
IP address blocks: 87.85.71.0/24 maxlen: 24
87.85.131.0/24 maxlen: 24
87.85.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:36:c0:18:9e:5c:f8:ce:61:a4:fc:26:60:76:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 27 12:34:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=892c1dd981b574dec8cf4121203f4c70796d53d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:08:a1:e7:6d:0a:02:25:4d:c3:e4:24:da:65:
a4:cd:45:9a:4d:36:48:14:5d:ef:ff:84:08:e3:38:
23:a8:cd:98:28:a1:78:69:c6:ca:aa:5b:d2:cb:15:
ed:59:19:86:96:cd:13:fd:e2:c6:f2:c8:dd:68:73:
c1:7d:3f:9d:79:33:a6:9d:1b:24:c0:3e:84:1d:ec:
c0:fd:4b:ef:f1:9b:02:30:7d:0e:f0:63:b2:69:69:
e8:9f:f0:e3:78:92:5f:6a:5c:23:77:de:cf:8b:b2:
31:8d:0b:2a:ac:c5:d9:52:1a:58:96:80:94:ac:44:
98:c4:f4:fc:48:d9:8c:dd:fe:9c:51:cb:07:18:9e:
f5:8a:6b:ed:73:0d:58:ff:a0:31:0e:69:cd:31:a9:
ca:e6:98:4c:55:a4:7b:9c:16:a0:e4:9c:17:ee:98:
0e:bb:6c:93:2e:8a:09:96:cf:1f:d2:38:2c:3f:03:
54:38:cb:bd:10:7b:88:bd:d0:cf:85:b6:77:9a:cc:
76:07:7e:4c:a6:8c:2a:36:a1:b3:90:3e:d5:28:11:
74:d9:57:4e:39:ea:19:e5:3d:52:51:3d:1e:00:af:
8c:35:54:71:8d:86:a0:52:53:fa:76:22:34:c8:9e:
80:d6:73:ad:16:49:83:e6:52:19:75:c6:ce:87:09:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:1D:D9:81:B5:74:DE:C8:CF:41:21:20:3F:4C:70:79:6D:53:D8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/iSwd2YG1dN7Iz0EhID9McHltU9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.71.0/24
87.85.131.0/24
87.85.174.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5e:24:29:05:43:7f:ac:1e:2f:64:fc:ff:43:d5:a6:7e:96:
83:d2:96:dd:5f:63:d5:be:d5:9d:83:07:58:65:2f:f9:cf:db:
7a:2e:e5:8d:d6:dc:10:34:13:a0:32:b5:8f:14:b3:f2:05:e3:
2c:1f:28:99:e3:9e:7f:95:64:34:ee:41:c4:7a:21:7a:a9:67:
da:4b:02:4c:1e:31:fe:67:17:d5:b3:71:8f:d2:a9:fc:67:ee:
1d:0f:ad:c6:10:41:e0:7b:a0:7d:32:05:e6:c2:6c:10:64:34:
32:38:cc:03:80:bd:2b:21:ac:66:40:29:46:8f:65:1f:6d:f1:
bd:2f:d6:50:86:f8:67:b0:48:5c:ea:1b:2f:1a:75:22:7a:1e:
97:6c:b2:12:bc:86:26:5b:6b:09:7c:b3:f3:05:48:2e:28:4d:
95:ba:fd:42:27:88:f3:ac:40:ce:2d:e4:a5:fd:ef:8b:1f:0a:
8a:42:81:50:29:ad:79:97:70:f0:7e:c2:99:80:23:21:48:db:
ba:64:47:bf:db:4f:9a:a6:ee:e4:5b:37:80:86:ab:c2:e7:5a:
b0:80:96:58:45:5b:7d:5b:55:82:61:b2:c5:61:c1:5d:2b:16:
0d:37:4d:2c:f2:2a:9a:50:c1:32:88:08:55:58:93:f2:80:fd:
4a:aa:a4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:27 2026 by rpki-client