Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pAe-bxzA81GwBThCTcgRhu3-8rk.roa
File: pAe-bxzA81GwBThCTcgRhu3-8rk.roa (raw, json)
Hash identifier: b5XryAXKfz0kXOOLrN9sluXbIePYHzpImC4mEwXoOIo=
Subject key identifier: A4:07:BE:6F:1C:C0:F3:51:B0:05:38:42:4D:C8:11:86:ED:FE:F2:B9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0FE48AED17D01991A45DE77BA0F70268D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pAe-bxzA81GwBThCTcgRhu3-8rk.roa
Signing time: Fri 02 Oct 2026 20:22:51 +0000
ROA not before: Fri 02 Oct 2026 20:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218702
IP address blocks: 78.154.116.0/24 maxlen: 24
87.83.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fe:48:ae:d1:7d:01:99:1a:45:de:77:ba:0f:70:26:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 2 20:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a407be6f1cc0f351b00538424dc81186edfef2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:34:53:83:ac:59:0b:f1:48:6f:fc:51:50:
48:d9:ac:50:81:d6:36:34:1c:de:0d:84:fd:55:ba:
04:96:3e:db:35:35:1c:c3:9c:a7:21:d6:ce:ba:08:
54:27:bb:1c:7f:72:d9:ee:65:76:f5:23:66:57:23:
d3:78:11:48:6d:02:45:55:4b:55:62:f3:8d:9f:da:
9b:46:25:87:bd:b8:59:cd:8f:06:2a:82:de:21:67:
95:a7:61:ac:eb:32:b6:22:06:39:64:c1:39:31:d8:
cd:38:80:10:44:0d:c2:e2:2a:99:d4:d9:bf:bf:ae:
f4:61:43:dc:0c:ff:b1:cc:1b:11:29:d8:22:51:d1:
28:f1:0e:5d:f3:cb:61:c5:87:7f:43:37:06:0d:0d:
f6:fd:6e:8f:b6:68:1f:bc:e4:5b:d3:ba:37:35:6d:
74:b1:21:a1:9d:c6:8d:14:13:c4:bb:cc:9f:6e:2d:
3f:49:f9:04:60:ac:d0:ee:8d:05:29:bb:7e:74:4b:
c4:b9:59:1b:f1:92:f4:1a:bc:38:93:b0:82:59:f6:
3d:16:c2:3e:39:2a:d9:4c:5b:2f:5e:b4:2b:9e:43:
c9:3d:9b:b6:22:68:d7:f5:3a:98:19:8e:f6:10:1a:
47:6f:bb:7b:41:50:d4:e7:76:e0:61:2e:69:84:36:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:BE:6F:1C:C0:F3:51:B0:05:38:42:4D:C8:11:86:ED:FE:F2:B9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pAe-bxzA81GwBThCTcgRhu3-8rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.116.0/24
87.83.170.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f4:fd:8c:56:6a:29:8f:f3:5b:cf:b9:c8:e9:2c:4e:aa:11:
65:52:8d:58:2c:63:c3:9f:97:03:8e:b3:a0:63:74:d6:67:01:
f3:28:5e:58:0c:f0:17:5e:6b:b0:cb:ae:c3:85:aa:0c:b2:eb:
1a:b4:50:7a:0f:50:e9:f1:23:3b:88:30:4f:21:c8:8e:63:a4:
13:c8:dc:37:40:a2:1d:7d:57:97:11:30:e5:38:5b:f3:cd:88:
fa:02:41:68:7d:90:c3:3f:c3:a0:b4:17:f4:56:b8:ab:e7:81:
a2:a5:85:c5:d1:e4:3e:04:b0:4c:ea:d2:0b:c1:11:c4:01:4f:
a5:c5:ac:ba:67:ea:3d:9a:74:00:5d:e6:16:b4:ae:84:3e:5b:
ba:82:cb:b1:3a:db:97:ac:59:67:13:e7:19:d7:c6:4a:07:15:
66:93:ef:61:2f:70:20:ff:26:36:ab:fa:e9:36:69:78:47:ba:
49:79:cf:c7:df:b7:78:80:ed:a1:5f:6a:9b:27:6c:e9:4e:3a:
70:da:28:9c:7f:3b:a9:66:e4:99:1a:0c:19:94:c2:0b:fb:80:
6e:b5:71:13:ba:ef:ef:43:7d:94:0b:fd:86:64:e5:b1:8d:49:
a9:dc:99:28:96:5e:7c:1a:96:27:2a:84:52:eb:11:bf:96:26:
1b:9c:7b:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaD+SK7RfQGZGkXed7oPcCaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDAyMjAyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDA3YmU2ZjFjYzBmMzUxYjAwNTM4NDI0ZGM4MTE4NmVkZmVmMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6c0U4OsWQvxSG/8UVBI2axQgdY2
NBzeDYT9VboElj7bNTUcw5ynIdbOughUJ7scf3LZ7mV29SNmVyPTeBFIbQJFVUtV
YvONn9qbRiWHvbhZzY8GKoLeIWeVp2Gs6zK2IgY5ZME5MdjNOIAQRA3C4iqZ1Nm/
v670YUPcDP+xzBsRKdgiUdEo8Q5d88thxYd/QzcGDQ32/W6PtmgfvORb07o3NW10
sSGhncaNFBPEu8yfbi0/SfkEYKzQ7o0FKbt+dEvEuVkb8ZL0Grw4k7CCWfY9FsI+
OSrZTFsvXrQrnkPJPZu2ImjX9TqYGY72EBpHb7t7QVDU53bgYS5phDYNaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKQHvm8cwPNRsAU4Qk3IEYbt/vK5MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcEFlLWJ4ekE4MUd3QlRoQ1RjZ1JodTMtOHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATpp0AwQA
V1OqMA0GCSqGSIb3DQEBCwUAA4IBAQBw9P2MVmopj/Nbz7nI6SxOqhFlUo1YLGPD
n5cDjrOgY3TWZwHzKF5YDPAXXmuwy67DhaoMsusatFB6D1Dp8SM7iDBPIciOY6QT
yNw3QKIdfVeXETDlOFvzzYj6AkFofZDDP8OgtBf0Vrir54GipYXF0eQ+BLBM6tIL
wRHEAU+lxay6Z+o9mnQAXeYWtK6EPlu6gsuxOtuXrFlnE+cZ18ZKBxVmk+9hL3Ag
/yY2q/rpNml4R7pJec/H37d4gO2hX2qbJ2zpTjpw2iicfzupZuSZGgwZlMIL+4Bu
tXETuu/vQ32UC/2GZOWxjUmp3Jkoll58GpYnKoRS6xG/liYbnHsR
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:45:38 2026 by rpki-client