Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u0BIYiH6iwry_Ah3f6wZ13H1Dbk.roa
File: u0BIYiH6iwry_Ah3f6wZ13H1Dbk.roa (raw, json)
Hash identifier: jD+fT02Jd+LCCrv02K+KR8osIpARYAqTPxFA6FYGePE=
Subject key identifier: BB:40:48:62:21:FA:8B:0A:F2:FC:08:77:7F:AC:19:D7:71:F5:0D:B9
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A01E41DFD5F61835152BA1FA4D5596D823
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u0BIYiH6iwry_Ah3f6wZ13H1Dbk.roa
Signing time: Thu 20 Aug 2026 08:20:28 +0000
ROA not before: Thu 20 Aug 2026 08:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 46.34.29.0/24 maxlen: 24
87.84.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:41:df:d5:f6:18:35:15:2b:a1:fa:4d:55:96:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 20 08:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb40486221fa8b0af2fc08777fac19d771f50db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:21:37:95:4e:f2:89:49:48:93:93:3e:38:
7a:55:4f:ec:d4:ae:cf:92:eb:52:40:04:37:c9:4d:
ee:83:c8:e6:63:7a:85:b4:e8:5a:be:17:e7:f6:28:
44:6c:cf:97:31:de:c1:1e:14:08:e3:69:de:2f:04:
26:d6:31:64:b2:8f:e3:b8:a3:b9:5c:d4:64:50:11:
db:c5:2d:5f:6a:25:c1:ff:ac:f2:13:14:61:79:de:
1f:3e:63:77:f3:81:18:86:d5:51:36:37:5e:93:ba:
79:e2:a5:89:74:26:3f:74:d9:f1:0f:ea:d2:8e:d1:
12:e5:e2:a5:b1:6b:94:81:12:63:c8:73:8e:88:de:
c8:43:b5:33:99:b5:27:c9:8d:3d:b3:ca:58:2d:50:
0e:15:57:5c:b3:e1:50:b4:0a:9b:bd:b2:9f:27:d7:
57:0c:d5:9e:19:e3:40:63:b4:a7:0b:18:5d:1b:f9:
a1:ca:77:3b:d9:2a:94:20:a1:a3:7c:bf:7c:91:c7:
1e:97:99:7f:95:a4:bb:9d:b8:8e:b8:35:72:8a:62:
f3:1d:0f:9b:8d:c7:a0:cc:1f:74:79:54:90:25:4b:
7d:dc:c5:da:40:e0:8f:30:c7:47:ae:f7:bc:a0:20:
5b:02:ac:7d:e0:0c:5e:b4:4c:f5:33:2c:8d:4a:2b:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:48:62:21:FA:8B:0A:F2:FC:08:77:7F:AC:19:D7:71:F5:0D:B9
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u0BIYiH6iwry_Ah3f6wZ13H1Dbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.29.0/24
87.84.200.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8b:58:1a:04:ca:f9:5e:54:6b:96:29:4a:8e:5e:a4:dc:29:
06:13:b4:83:f8:2e:a4:bf:91:88:11:2f:e0:d9:74:bc:3f:f3:
5a:65:1e:57:7c:4f:bf:31:21:c1:b8:84:0e:60:64:f9:20:be:
75:2b:95:4b:8b:b3:66:52:69:f0:b5:29:6b:75:9a:f4:bd:cd:
2a:a7:39:01:5e:41:96:2c:23:5b:95:91:4f:2d:e5:10:06:fa:
f7:77:62:19:03:18:2d:bc:9b:d2:cb:bd:1f:68:72:c1:c0:d3:
29:5b:cf:56:b3:01:3f:ce:24:64:de:e8:46:6a:d6:f0:dd:99:
98:54:5c:a3:17:93:65:61:02:5f:65:d7:a1:e2:56:65:1f:2b:
e4:5c:2c:03:01:73:16:de:77:c4:05:0f:04:86:9b:ca:4b:01:
73:98:a6:13:c1:61:0d:9e:2f:71:50:07:51:ed:0e:9f:04:bf:
94:a0:15:18:c9:ec:bf:21:3d:ec:58:de:b2:20:f6:f4:6e:43:
83:71:cc:34:04:a6:ac:b6:07:23:08:74:7e:0c:14:c7:b3:23:
d1:85:64:2e:8f:fa:f3:e3:cd:76:04:0c:42:a7:39:0a:ee:40:
8e:e1:59:59:ee:98:26:4e:e5:df:3a:28:0b:5d:72:8c:9a:7c:
31:de:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:40:46 2026 by rpki-client