Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xRgNhx_Ncs6v90T4YJAevc6uGt0.roa
File: xRgNhx_Ncs6v90T4YJAevc6uGt0.roa (raw, json)
Hash identifier: JWpiz6jSVoVQdV9B/TGZ+oUZp+ValxXbE5QMlE+UiEY=
Subject key identifier: C5:18:0D:87:1F:CD:72:CE:AF:F7:44:F8:60:90:1E:BD:CE:AE:1A:DD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08E7CF2BCDB122A63138A80CC7C68B2E1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xRgNhx_Ncs6v90T4YJAevc6uGt0.roa
Signing time: Fri 11 Sep 2026 03:22:28 +0000
ROA not before: Fri 11 Sep 2026 03:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401560
IP address blocks: 87.82.253.0/24 maxlen: 24
87.83.12.0/24 maxlen: 24
87.84.208.0/24 maxlen: 24
87.85.235.0/24 maxlen: 24
87.86.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:7c:f2:bc:db:12:2a:63:13:8a:80:cc:7c:68:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 11 03:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5180d871fcd72ceaff744f860901ebdceae1add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:65:bc:91:d9:6f:94:cd:26:1f:df:3c:fc:
b1:6d:84:68:d7:9c:ef:8c:ce:ef:c2:26:12:f5:b9:
87:6e:b6:8d:f2:cd:5b:fd:89:53:03:b1:93:4c:a0:
60:75:14:41:30:d4:d6:2a:9a:b5:a1:14:a3:9a:d4:
3b:9d:4d:f8:06:88:01:24:98:39:ed:b9:f6:a9:e3:
71:fb:63:58:4c:0c:1b:bf:a4:76:f4:2e:ef:b8:e1:
b7:05:dd:f0:dc:71:63:f6:7c:cc:c5:38:47:d1:09:
b6:0c:d0:68:8c:4b:06:9a:a5:42:f3:4b:ff:be:6b:
6c:f9:c7:e9:bc:1a:55:f5:ad:ea:ad:b9:da:1d:24:
5f:ad:0e:8b:0d:05:76:aa:f0:9f:f5:9e:ee:a0:b9:
2c:d9:ca:68:fa:37:c1:89:f1:32:38:27:d5:9e:52:
9a:e4:32:b8:6d:f7:a6:5f:52:7f:34:b9:0f:5e:20:
9b:1d:02:0c:8d:30:ef:3b:38:59:7a:43:26:92:35:
de:f2:53:27:79:1a:ee:0f:30:53:ed:e9:50:c3:16:
55:a6:f6:57:01:d2:3b:3e:f4:36:0a:dc:de:ed:86:
7e:16:ff:3b:03:a2:04:00:60:19:43:e1:73:70:d4:
ed:1c:9c:7a:44:53:df:19:92:d3:91:ad:a5:ab:85:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:0D:87:1F:CD:72:CE:AF:F7:44:F8:60:90:1E:BD:CE:AE:1A:DD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xRgNhx_Ncs6v90T4YJAevc6uGt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.253.0/24
87.83.12.0/24
87.84.208.0/24
87.85.235.0/24
87.86.188.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ea:09:b3:66:92:47:a3:46:97:8e:dc:65:f8:42:64:20:40:
65:73:33:f4:1a:c2:50:27:1d:f9:20:82:1b:0e:7e:2f:02:6a:
4a:ec:76:5d:d9:49:09:a9:b5:c8:dc:b4:6f:dc:7c:15:6b:67:
22:bd:65:2a:a9:54:34:83:53:eb:9c:11:37:93:95:89:16:a8:
2e:b9:5c:e0:f5:4f:5b:44:16:32:df:70:55:4b:ef:67:88:66:
0a:92:14:14:09:af:41:e6:77:1b:2d:45:1f:de:3e:45:1e:8b:
1f:4c:7c:b7:46:f3:6b:1e:da:e1:af:1d:1c:73:fa:4a:fa:03:
20:33:82:74:ca:63:42:ce:65:e2:f3:97:24:67:1c:67:c9:f0:
25:b2:c4:d3:f9:5f:b7:23:9f:55:67:f3:22:04:79:7a:c3:38:
9b:af:0f:51:bd:68:a5:75:26:c1:b4:a1:00:01:04:4d:58:4c:
59:40:7b:13:96:3e:ee:fb:d6:5e:2b:7c:ce:71:0f:58:a8:78:
d9:b4:87:d8:cf:73:9e:19:ba:96:49:86:19:e2:3f:2a:d9:e0:
3f:01:ec:21:f9:e9:a4:03:cf:f7:54:b4:6d:da:2f:9a:36:77:
0c:58:ea:5a:3f:06:33:bd:4e:35:5e:ba:4e:db:50:39:e9:fb:
05:1b:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:34:04 2026 by rpki-client