Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m-17-4HGgQrBU5E8DxJbgGNVOTY.roa
File: m-17-4HGgQrBU5E8DxJbgGNVOTY.roa (raw, json)
Hash identifier: 5UwS61v/BvHE9Y6LeMljNfYCENccMOz05zn37RiI0hY=
Subject key identifier: 9B:ED:7B:FB:81:C6:81:0A:C1:53:91:3C:0F:12:5B:80:63:55:39:36
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A013F6FC3480DA1DF05587AF958C5CA892
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m-17-4HGgQrBU5E8DxJbgGNVOTY.roa
Signing time: Tue 18 Aug 2026 08:22:28 +0000
ROA not before: Tue 18 Aug 2026 08:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402151
IP address blocks: 87.83.216.0/23 maxlen: 24
87.83.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 12:34:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:f6:fc:34:80:da:1d:f0:55:87:af:95:8c:5c:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 18 08:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bed7bfb81c6810ac153913c0f125b8063553936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:77:8a:e8:50:6c:88:34:e5:4f:18:ab:c4:
19:e6:26:a0:01:6b:7e:e6:7a:d5:6e:13:72:4f:cf:
d5:b4:70:7f:2a:2a:57:fb:dd:1c:cf:2a:77:e5:2c:
9f:64:b6:04:5f:fa:32:11:67:11:b8:77:65:a8:0c:
48:f0:c8:7e:63:97:5b:f4:d0:7a:02:b4:5e:98:de:
7e:51:e2:0a:78:67:85:1c:a2:67:1e:75:ee:cc:56:
f7:47:90:71:d0:00:64:63:eb:a5:ec:7d:af:27:e6:
52:15:48:df:bc:05:38:a8:e7:9e:4a:8a:50:ec:f1:
8f:01:8a:d3:20:c8:09:ab:5d:39:87:81:b9:75:8e:
a6:60:23:c5:48:55:96:7e:78:1c:2f:f4:08:27:00:
3f:ba:d8:7c:c4:48:1c:46:29:f8:9f:89:d0:42:e3:
b1:bf:4c:dd:ce:9b:d5:30:7f:19:d0:56:54:3c:43:
a6:3b:d9:99:fb:97:32:88:18:56:49:2d:05:e8:5a:
9d:3f:45:5d:ca:6f:56:1b:ae:fa:83:a5:ce:8d:b0:
89:69:7f:69:38:15:df:8f:76:76:bc:05:b7:78:68:
4b:ba:ea:61:55:db:2d:74:70:d7:8c:43:e8:66:c2:
ca:87:9f:57:ba:26:d9:90:11:c5:b5:97:20:88:78:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:7B:FB:81:C6:81:0A:C1:53:91:3C:0F:12:5B:80:63:55:39:36
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m-17-4HGgQrBU5E8DxJbgGNVOTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
87.83.234.0/23
Signature Algorithm: sha256WithRSAEncryption
21:df:c2:9e:ef:8c:9d:6a:42:70:56:82:65:b2:2b:6f:fd:5e:
80:23:2d:88:84:13:4e:d9:6f:e8:6f:93:47:71:66:54:c6:54:
02:98:44:f0:44:43:63:c8:8f:26:76:c8:73:e5:1c:fc:cd:ff:
da:7a:0c:e8:ec:d7:a9:9f:23:ec:a1:fc:77:44:4f:50:63:dc:
1e:cd:c1:41:35:a4:9b:5d:83:46:26:cf:84:a0:73:c9:9f:91:
60:04:33:fa:f8:40:42:9a:9e:19:15:56:7f:7e:91:98:e0:f8:
e9:7e:d2:59:5b:cb:6c:8c:29:e5:21:3d:28:f0:be:3a:ad:b0:
d4:21:5b:6d:bc:ad:ae:6c:81:f3:16:5b:2f:9b:b7:de:d9:2e:
06:24:b3:9f:aa:4d:cd:ff:d1:d2:26:6b:cc:d2:f8:39:74:40:
c8:b0:ac:fc:46:ad:9d:c6:b0:8d:76:b0:fc:ad:09:26:50:c1:
95:7b:51:cf:83:6c:53:56:7e:e3:40:28:a6:b0:02:2d:14:1d:
f7:8a:02:be:c1:c1:e1:22:3d:ab:85:18:f9:0a:3f:32:24:e4:
40:82:3b:50:3c:35:e8:30:4b:ff:70:1c:50:08:15:71:4f:d2:
73:2d:b8:8a:b5:c2:17:13:24:1b:73:15:2b:84:c4:04:02:fd:
2d:61:6a:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAT9vw0gNod8FWHr5WMXKiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODE4MDgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmVkN2JmYjgxYzY4MTBhYzE1MzkxM2MwZjEyNWI4MDYzNTUzOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRl3iuhQbIg05U8Yq8QZ5iagAWt+
5nrVbhNyT8/VtHB/KipX+90czyp35SyfZLYEX/oyEWcRuHdlqAxI8Mh+Y5db9NB6
ArRemN5+UeIKeGeFHKJnHnXuzFb3R5Bx0ABkY+ul7H2vJ+ZSFUjfvAU4qOeeSopQ
7PGPAYrTIMgJq105h4G5dY6mYCPFSFWWfngcL/QIJwA/uth8xEgcRin4n4nQQuOx
v0zdzpvVMH8Z0FZUPEOmO9mZ+5cyiBhWSS0F6FqdP0Vdym9WG676g6XOjbCJaX9p
OBXfj3Z2vAW3eGhLuuphVdstdHDXjEPoZsLKh59XuibZkBHFtZcgiHhiEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJvte/uBxoEKwVORPA8SW4BjVTk2MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvbS0xNy00SEdnUXJCVTVFOER4SmJnR05WT1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV1PYAwQB
V1PqMA0GCSqGSIb3DQEBCwUAA4IBAQAh38Ke74ydakJwVoJlsitv/V6AIy2IhBNO
2W/ob5NHcWZUxlQCmETwRENjyI8mdshz5Rz8zf/aegzo7NepnyPsofx3RE9QY9we
zcFBNaSbXYNGJs+EoHPJn5FgBDP6+EBCmp4ZFVZ/fpGY4PjpftJZW8tsjCnlIT0o
8L46rbDUIVttvK2ubIHzFlsvm7fe2S4GJLOfqk3N/9HSJmvM0vg5dEDIsKz8Rq2d
xrCNdrD8rQkmUMGVe1HPg2xTVn7jQCimsAItFB33igK+wcHhIj2rhRj5Cj8yJORA
gjtQPDXoMEv/cBxQCBVxT9JzLbiKtcIXEyQbcxUrhMQEAv0tYWpL
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:54:26 2026 by rpki-client