Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s3dkvVxs-E_6wehltWo9AJgRRVU.roa
File: s3dkvVxs-E_6wehltWo9AJgRRVU.roa (raw, json)
Hash identifier: b2sowd8L/CO1ZujrB5Ke3q5pLBnBbs/UtqVAP3wNaZg=
Subject key identifier: B3:77:64:BD:5C:6C:F8:4F:FA:C1:E8:65:B5:6A:3D:00:98:11:45:55
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCF0988A5775CAA8F5386FF8CCBB4C742
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s3dkvVxs-E_6wehltWo9AJgRRVU.roa
Signing time: Tue 04 Aug 2026 23:08:56 +0000
ROA not before: Tue 04 Aug 2026 23:08:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206981
IP address blocks: 87.83.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:09:88:a5:77:5c:aa:8f:53:86:ff:8c:cb:b4:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 4 23:08:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b37764bd5c6cf84ffac1e865b56a3d0098114555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:13:20:82:38:0c:28:4b:51:7e:e9:e8:bf:
a8:3b:11:bd:39:4a:dd:81:5a:4e:dd:83:8a:8d:10:
dc:2a:02:7d:1a:84:c4:fa:28:b0:b4:b2:f9:8d:75:
f2:99:8b:0f:1d:0c:c0:b4:66:e0:28:90:43:19:00:
3d:9d:8c:d7:0d:94:89:2d:60:9e:9c:a9:41:ca:29:
66:cd:2a:a8:26:73:0d:78:f4:0b:c0:b6:54:92:52:
bf:ae:2c:b9:4e:29:a3:30:de:ab:86:e7:2b:83:3e:
e3:0e:cc:6c:05:e9:3f:f2:f4:12:79:80:06:79:34:
0c:5f:fc:30:57:2d:b5:6b:54:b4:b6:55:2b:64:d8:
63:06:66:fc:a1:cf:b7:02:f0:df:15:cf:3a:18:87:
5c:86:f8:df:fd:90:8a:13:b0:28:13:1a:54:2d:ad:
d5:fa:4b:8b:03:24:fb:23:ff:3c:21:ec:a1:14:1c:
a9:df:25:52:e2:73:8b:b4:55:d5:b3:a9:fc:34:dd:
e5:24:ca:10:bd:08:cd:6a:ab:2c:72:2c:a6:a0:73:
f8:67:22:c2:2c:fc:c3:1b:12:e6:81:69:18:a0:0d:
6b:51:cd:46:ba:be:b2:48:96:da:df:b4:89:12:14:
34:e1:78:06:a9:ad:ac:3b:76:a0:24:d4:99:3c:70:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:64:BD:5C:6C:F8:4F:FA:C1:E8:65:B5:6A:3D:00:98:11:45:55
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/s3dkvVxs-E_6wehltWo9AJgRRVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:e2:ba:44:7c:de:5c:aa:8a:95:09:b5:ba:53:68:34:f2:d8:
d8:47:31:32:8c:80:d3:90:28:9d:cd:3e:f6:55:37:29:49:54:
96:19:8c:2b:7c:4b:f9:47:89:10:6c:55:c5:ec:d2:63:1b:1a:
87:61:93:ae:a1:b1:1a:d0:27:26:c6:1a:04:f3:4e:68:c3:61:
9d:a7:2f:e4:2f:c3:39:2c:10:bd:78:98:16:54:29:81:ec:b0:
fb:62:12:0a:71:7b:cd:5a:11:9c:f9:85:89:09:a9:b3:62:1b:
fd:52:0a:db:19:cb:c9:06:63:58:1e:78:b0:15:ca:88:4f:29:
ea:07:31:8e:68:9a:b2:15:f0:f1:fa:f2:1e:19:3c:76:78:e6:
61:87:33:5c:9c:5c:71:de:34:d2:89:fe:59:6e:15:83:bc:f7:
dd:e3:79:6d:6b:11:b7:99:50:6d:bc:0d:e7:5d:81:fb:9f:78:
47:dd:09:be:93:d1:d1:38:a3:a6:1a:ae:03:ab:16:a8:cd:1c:
5f:23:5d:c6:a7:96:c9:34:ad:9a:f3:90:3b:16:4b:f3:ba:2d:
72:1f:2f:71:33:b5:bf:b6:52:13:e8:36:ce:70:30:cf:47:ff:
d3:34:88:f6:d1:bd:41:85:be:93:de:5c:0a:91:49:95:5f:95:
c6:ac:9b:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/PCYild1yqj1OG/4zLtMdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwODA0MjMwODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzc3NjRiZDVjNmNmODRmZmFjMWU4NjViNTZhM2QwMDk4MTE0NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm4TIII4DChLUX7p6L+oOxG9OUrd
gVpO3YOKjRDcKgJ9GoTE+iiwtLL5jXXymYsPHQzAtGbgKJBDGQA9nYzXDZSJLWCe
nKlByilmzSqoJnMNePQLwLZUklK/riy5TimjMN6rhucrgz7jDsxsBek/8vQSeYAG
eTQMX/wwVy21a1S0tlUrZNhjBmb8oc+3AvDfFc86GIdchvjf/ZCKE7AoExpULa3V
+kuLAyT7I/88IeyhFByp3yVS4nOLtFXVs6n8NN3lJMoQvQjNaqssciymoHP4ZyLC
LPzDGxLmgWkYoA1rUc1Gur6ySJba37SJEhQ04XgGqa2sO3agJNSZPHB/XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLN3ZL1cbPhP+sHoZbVqPQCYEUVVMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvczNka3ZWeHMtRV82d2VobHRXbzlBSmdSUlZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1NwMA0G
CSqGSIb3DQEBCwUAA4IBAQAv4rpEfN5cqoqVCbW6U2g08tjYRzEyjIDTkCidzT72
VTcpSVSWGYwrfEv5R4kQbFXF7NJjGxqHYZOuobEa0CcmxhoE805ow2Gdpy/kL8M5
LBC9eJgWVCmB7LD7YhIKcXvNWhGc+YWJCamzYhv9UgrbGcvJBmNYHniwFcqITynq
BzGOaJqyFfDx+vIeGTx2eOZhhzNcnFxx3jTSif5ZbhWDvPfd43ltaxG3mVBtvA3n
XYH7n3hH3Qm+k9HROKOmGq4DqxaozRxfI13Gp5bJNK2a85A7Fkvzui1yHy9xM7W/
tlIT6DbOcDDPR//TNIj20b1Bhb6T3lwKkUmVX5XGrJto
-----END CERTIFICATE-----
Generated at Wed Aug 26 21:27:14 2026 by rpki-client