Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oVJUjTPY8_FujsvCkKXL6WaMc2k.roa
File: oVJUjTPY8_FujsvCkKXL6WaMc2k.roa (raw, json)
Hash identifier: BzyJUScoQDq5ER15c3cxTocU6nHJsQNIiw+bcd0eN5M=
Subject key identifier: A1:52:54:8D:33:D8:F3:F1:6E:8E:CB:C2:90:A5:CB:E9:66:8C:73:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05CE42ECB940DD051740F047B8686FF1E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oVJUjTPY8_FujsvCkKXL6WaMc2k.roa
Signing time: Tue 01 Sep 2026 12:14:13 +0000
ROA not before: Tue 01 Sep 2026 12:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 78.154.116.0/24 maxlen: 24
82.110.231.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.173.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.85.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:e4:2e:cb:94:0d:d0:51:74:0f:04:7b:86:86:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 1 12:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a152548d33d8f3f16e8ecbc290a5cbe9668c7369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:26:6e:76:ff:26:66:8d:60:31:ea:2b:3a:
fd:4e:ce:8a:11:76:6b:cf:a0:b9:74:0f:d3:59:cb:
de:91:72:b8:7b:8d:46:bc:24:a7:e3:9d:a3:60:16:
0b:b6:b6:d2:cd:ca:b1:d2:71:d5:9d:79:c8:80:8d:
58:98:bf:e7:82:02:7c:5a:aa:30:fa:78:1a:ca:4f:
5e:5d:50:d3:8e:f3:1d:8e:6a:c2:ed:6b:85:31:18:
6f:b8:eb:f5:8a:2f:31:72:8b:56:d5:d6:5d:db:cb:
86:95:a9:3e:7a:a9:36:ab:20:7a:09:4e:72:d4:f4:
6a:c2:6e:62:42:d2:2c:ab:c2:1f:da:cc:aa:0b:28:
d5:a0:4c:16:ac:bc:bf:c3:7f:98:83:85:1d:e5:74:
54:00:fe:3c:eb:15:c3:34:12:16:d1:e3:72:94:9d:
6a:a4:c5:70:01:1a:61:76:11:99:f0:8b:27:c5:06:
56:04:0c:38:0a:6b:fe:38:08:04:92:65:c8:92:6c:
be:2c:be:5f:39:68:42:ad:3f:c1:52:67:86:15:9c:
8c:ae:54:29:3b:f3:8f:05:4c:a8:d9:f4:4a:ff:77:
28:4f:9a:d8:a6:36:b8:77:fa:42:a4:a9:1e:6e:7f:
f9:dc:59:b3:7d:18:87:d7:e3:07:fa:34:81:16:2b:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:52:54:8D:33:D8:F3:F1:6E:8E:CB:C2:90:A5:CB:E9:66:8C:73:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oVJUjTPY8_FujsvCkKXL6WaMc2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.116.0/24
82.110.231.0/24
87.82.240.0/24
87.83.86.0/24
87.83.173.0/24
87.84.156.0/24
87.85.68.0/24
Signature Algorithm: sha256WithRSAEncryption
97:08:cd:55:50:42:e6:a1:8d:a8:db:4d:fa:6f:5f:9d:5d:dc:
24:bc:74:75:5f:91:99:f7:47:e0:d6:5b:b2:d5:91:00:a6:bb:
0d:8b:79:a7:2c:4f:2f:13:bf:56:60:97:78:77:d0:76:d6:87:
e0:22:69:0a:a6:2a:55:7d:66:f6:59:73:3e:62:4f:54:7b:ed:
a1:2b:83:32:05:ff:5c:8f:06:6b:df:fd:0a:b6:03:51:67:69:
e7:0e:89:93:1d:27:f5:82:5e:a3:74:c7:70:7f:b8:e4:b7:cd:
8c:46:66:1b:e5:8b:a6:94:c0:e0:58:1d:86:a1:90:a2:2b:f9:
3c:15:9d:e7:38:87:2d:69:f1:45:d1:48:08:71:87:ba:87:ac:
a2:8c:28:62:75:9b:58:c7:50:88:c6:ee:41:d8:76:ce:41:d0:
fa:6e:63:d7:4a:b5:18:87:65:56:ba:a3:86:ad:39:13:1c:b7:
35:c5:4e:63:7f:c1:96:72:4f:79:ee:f5:de:ee:f7:1e:dc:d4:
d5:02:67:b5:20:8f:4b:11:a9:6f:37:08:49:ab:36:a5:fd:2a:
41:53:83:fe:66:11:da:d1:16:c4:aa:e3:ec:88:4c:89:94:e7:
5b:8b:5e:ff:9d:a4:8a:aa:4b:47:5c:c7:aa:15:7e:99:58:83:
60:9d:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:04 2026 by rpki-client