Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mXjS2AWxxBCcGjC0P1vojT2MHq8.roa
File: mXjS2AWxxBCcGjC0P1vojT2MHq8.roa (raw, json)
Hash identifier: jD2adDvntmHCJ1YEz31mcZ8XUXYJ4M/+aakJQ9l7nYk=
Subject key identifier: 99:78:D2:D8:05:B1:C4:10:9C:1A:30:B4:3F:5B:E8:8D:3D:8C:1E:AF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F453F021F66CE954A1DE975B3F11CCB10
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mXjS2AWxxBCcGjC0P1vojT2MHq8.roa
Signing time: Thu 09 Jul 2026 04:59:44 +0000
ROA not before: Thu 09 Jul 2026 04:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402267
IP address blocks: 87.83.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:3f:02:1f:66:ce:95:4a:1d:e9:75:b3:f1:1c:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 9 04:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9978d2d805b1c4109c1a30b43f5be88d3d8c1eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:49:9e:09:37:09:f6:1b:d5:94:b8:c7:d9:
6e:44:49:05:38:ac:3f:ac:87:b1:5c:1b:c0:99:a8:
7b:ac:b8:b3:f5:16:a6:3c:2e:52:a6:7a:34:32:86:
ad:62:2e:ea:df:f9:22:5e:3e:3e:a1:ab:52:df:e0:
49:5f:d6:3d:e0:62:3f:26:3b:01:98:4d:9e:e3:ad:
f5:05:e0:69:47:ae:7d:5d:6c:86:5a:37:77:38:a9:
83:5d:1a:63:eb:69:58:ad:bb:29:01:e2:3f:c0:19:
da:67:3d:ed:ae:24:fa:16:d3:76:cf:ce:fa:02:8e:
f7:3d:80:6f:97:9e:28:af:9b:33:b6:96:fd:34:8c:
ec:8e:4c:f0:9e:7b:11:88:ca:26:0e:9a:ea:56:7e:
41:b5:33:e3:c5:66:0d:ee:41:67:4b:3f:61:51:eb:
90:fb:bf:bf:c6:65:a3:8b:b0:27:da:de:5e:0b:db:
a1:bf:7e:ce:6e:8f:e5:0b:75:de:35:d9:d3:36:59:
88:76:3e:1d:58:c8:0f:6a:40:95:48:57:41:3e:d0:
77:9f:5a:8a:b1:42:29:fb:9e:2e:bd:40:68:5c:5a:
56:e3:b0:18:1b:97:00:74:2d:13:46:9a:27:87:92:
bf:a5:0b:aa:d2:8a:79:bb:3b:17:ba:11:a9:07:61:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:D2:D8:05:B1:C4:10:9C:1A:30:B4:3F:5B:E8:8D:3D:8C:1E:AF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mXjS2AWxxBCcGjC0P1vojT2MHq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d7:ec:6a:75:bf:ec:e3:8e:dc:f1:7a:c2:28:67:5d:74:d3:
62:11:36:1b:41:b9:1f:db:89:fe:dc:e6:df:19:88:1e:84:05:
6c:6c:0a:c8:e8:1f:23:b0:db:34:1c:df:8a:47:d6:04:51:9d:
e8:54:da:63:4f:93:f8:2c:a3:83:b3:8e:68:54:11:77:c0:bf:
29:ca:d8:00:58:cf:7e:b1:af:a1:bb:64:42:1a:a9:a5:9c:18:
aa:8e:40:48:d9:77:2a:9b:17:fd:f0:f4:d8:c0:ef:8a:93:6d:
40:9f:f8:7e:b0:aa:7d:7e:e6:9c:49:68:df:5d:79:17:43:88:
89:35:2c:15:95:3c:5c:bb:51:21:60:00:7d:e0:d3:af:01:c0:
3c:24:94:44:3e:82:aa:6b:07:e4:c2:fa:46:7f:1e:27:d6:bb:
06:62:af:b7:13:2b:4c:f5:46:21:01:12:3f:ec:e4:1f:9d:96:
b2:9b:4f:60:7f:3b:22:68:27:e0:c0:56:01:47:2b:74:93:79:
7a:b6:73:98:86:14:bf:cb:be:d5:94:33:65:dd:75:52:47:65:
99:7d:31:07:79:f9:dd:17:b1:5c:be:67:78:e2:4e:15:4e:52:
67:80:2c:9c:92:98:40:13:22:0e:1a:b7:ff:49:f6:94:6d:6c:
f6:33:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client