Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i_Vo_Y9Cp6CHquL_y7V8SHRaFgg.roa
File: i_Vo_Y9Cp6CHquL_y7V8SHRaFgg.roa (raw, json)
Hash identifier: 4k/VdXyj3eop+t9DK6bnSewJ/nY5cUIKqc1kyVri9lg=
Subject key identifier: 8B:F5:68:FD:8F:42:A7:A0:87:AA:E2:FF:CB:B5:7C:48:74:5A:16:08
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F285C48C78F3C1F8FDD12F9095745FAE3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i_Vo_Y9Cp6CHquL_y7V8SHRaFgg.roa
Signing time: Fri 03 Jul 2026 14:22:44 +0000
ROA not before: Fri 03 Jul 2026 14:22:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 87.84.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:5c:48:c7:8f:3c:1f:8f:dd:12:f9:09:57:45:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 3 14:22:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bf568fd8f42a7a087aae2ffcbb57c48745a1608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:6d:9f:aa:85:5a:4d:73:5e:ad:b9:c4:80:
79:e5:89:b4:b3:2b:de:d0:0e:28:39:ce:c9:3b:33:
9d:a7:ee:3f:62:9a:62:e9:49:7d:45:b1:2e:b3:e1:
32:21:65:7e:01:73:a1:67:8b:0a:be:33:bd:c7:37:
fb:8b:54:c4:f5:63:eb:69:5e:1d:e0:99:05:86:9f:
ed:42:49:43:74:fb:96:81:cb:fb:36:96:a3:cb:67:
49:d8:bd:fa:5e:7d:8e:f8:86:3f:d4:4a:09:28:00:
ed:3d:55:1e:2d:c7:90:d9:9c:ef:ad:fb:cc:0e:98:
f0:2a:e1:84:f2:c9:50:6d:55:1e:09:08:9a:6c:a0:
7d:32:48:0f:4f:86:41:71:5c:5a:ab:e3:4a:b5:60:
00:61:a7:17:f7:ab:d8:06:44:91:23:6a:26:8f:de:
6f:fd:3d:23:48:f3:23:92:d7:f5:99:8b:16:26:6a:
24:fd:e5:3f:95:f8:6b:31:1a:79:e0:a1:cc:78:aa:
50:e2:73:ec:ec:95:2c:73:fb:af:f0:ec:7d:60:9d:
1a:eb:08:14:33:9d:93:f5:66:ee:a8:1f:e5:b8:42:
7c:3b:44:f3:35:55:32:17:08:8e:e1:51:cb:c0:b3:
64:41:80:1a:3f:fc:16:b9:ec:56:68:d2:50:57:cd:
42:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:68:FD:8F:42:A7:A0:87:AA:E2:FF:CB:B5:7C:48:74:5A:16:08
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i_Vo_Y9Cp6CHquL_y7V8SHRaFgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5e:cd:db:45:9c:bf:fc:cf:68:e8:48:f2:31:d5:ab:90:1c:
0b:2c:46:f3:26:26:11:b4:9c:e3:e0:7a:fa:e2:cd:4e:41:53:
54:2c:2e:14:7c:98:e8:48:56:f5:5f:bb:7a:19:32:cc:85:12:
cc:5e:1d:a6:f1:d9:8e:68:37:82:57:6f:f8:66:d7:b6:cc:d4:
b3:f1:e6:05:7c:c3:96:8c:af:cc:53:af:46:6b:60:d9:87:8d:
74:59:61:ae:45:16:82:14:c8:6e:91:f6:5d:be:dc:ec:43:66:
9a:d5:13:a6:d1:80:c4:1c:b5:a2:9f:58:bc:5e:99:6f:4e:4c:
4c:6b:5c:3b:11:f5:76:fa:53:ed:23:0f:6f:16:73:3c:87:c0:
51:bf:80:ce:24:57:d3:da:33:2a:25:ef:81:1f:f3:a7:d5:fc:
b7:4b:be:93:33:72:81:89:dc:79:55:b5:ef:ba:1b:34:a7:e0:
49:54:18:a0:6a:ea:46:01:41:66:2d:02:08:6b:1b:03:7b:d0:
ab:1b:80:02:e0:5c:50:d3:c2:d4:63:93:e3:a1:c6:19:4d:26:
45:e0:a7:1d:a0:4d:b0:50:21:8f:62:48:ab:2c:95:0c:e5:52:
af:2f:03:4c:fb:93:e6:b7:cd:ea:67:41:01:d8:7c:d5:4b:2f:
a1:31:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client