Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y6etlW_Ckfw6Oc2wFuhgKuk-QxM.roa
File: y6etlW_Ckfw6Oc2wFuhgKuk-QxM.roa (raw, json)
Hash identifier: C5zKak3wA121+G784LNYiwNZXUjV/Ur/Xq6sj5Yacnc=
Subject key identifier: CB:A7:AD:95:6F:C2:91:FC:3A:39:CD:B0:16:E8:60:2A:E9:3E:43:13
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FE4CE4747BCE60785FFCC312A7307F29F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y6etlW_Ckfw6Oc2wFuhgKuk-QxM.roa
Signing time: Sun 09 Aug 2026 04:35:51 +0000
ROA not before: Sun 09 Aug 2026 04:35:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 87.84.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Aug 2026 09:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e4:ce:47:47:bc:e6:07:85:ff:cc:31:2a:73:07:f2:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 9 04:35:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cba7ad956fc291fc3a39cdb016e8602ae93e4313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1b:78:bf:22:01:72:b8:52:f1:8c:46:24:8a:
3a:d4:9c:31:d0:60:c7:1c:f9:5d:c2:92:1f:49:6a:
ed:11:e1:6c:b6:28:59:7a:79:50:ad:d1:dd:f4:9b:
8c:23:3b:88:29:8d:e0:5c:b4:6a:54:62:14:f8:a5:
ca:ee:dc:9f:c8:94:3e:ce:ae:42:2d:0f:68:c6:52:
a6:fc:3c:8b:4f:fb:79:35:e9:ab:01:98:7a:43:c8:
82:fd:f9:85:4a:e1:0b:10:5a:cc:de:a2:f1:f7:4f:
7a:6b:e2:ce:10:51:34:b9:2a:9c:21:61:02:0f:4a:
0e:c1:31:4d:de:55:0a:9d:26:25:b0:f0:65:32:90:
98:8e:d4:86:81:0b:83:fe:b3:ba:ba:1b:21:37:dd:
d1:11:c0:93:db:f8:4d:60:46:fb:dc:ca:d0:01:93:
6d:c0:a3:ea:d0:9d:8a:e7:f3:77:82:51:2a:e6:9c:
f2:91:0a:38:c9:44:6a:a0:0e:a8:d6:98:92:e3:d3:
92:dc:e9:d1:33:ea:f2:aa:a1:45:f6:44:99:d8:e6:
d8:cc:23:67:a6:dc:27:a7:aa:3b:9e:25:2d:28:a6:
cd:98:57:36:d3:38:db:8c:bf:8f:b9:0d:e2:86:b7:
c6:ca:fd:1a:1a:22:74:d1:06:9c:ce:8b:3d:b9:76:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A7:AD:95:6F:C2:91:FC:3A:39:CD:B0:16:E8:60:2A:E9:3E:43:13
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y6etlW_Ckfw6Oc2wFuhgKuk-QxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e3:fe:65:06:cd:91:39:1c:75:7f:49:52:cf:ef:f6:a2:43:
a8:f3:57:2c:00:d3:14:38:9a:b1:e0:6e:9f:6c:c6:19:d5:8e:
6b:88:69:7c:d6:67:d9:88:51:6e:e8:f3:e0:05:b8:41:59:22:
e2:83:b1:56:09:c4:da:bc:4c:10:08:5d:ee:a2:34:1b:f6:27:
ec:ce:27:e8:be:72:c6:5d:de:6e:d2:61:b3:ef:75:99:5d:76:
16:81:b7:c4:8e:dd:3a:d6:cb:fc:1b:51:e3:4f:4e:b5:e4:3c:
83:c6:24:2a:21:90:01:d7:82:7c:ff:fe:f6:5a:cc:0c:e5:3f:
02:1c:23:ca:83:23:e4:ce:25:24:24:40:e0:46:b3:28:53:c8:
40:b3:eb:78:62:f5:f4:fa:45:28:8b:6f:29:e0:79:e2:f3:3d:
4c:c3:0d:6e:f3:8f:30:86:17:3d:f3:75:ee:18:c9:a6:db:b7:
b4:d5:f0:02:73:f5:3f:9b:8c:ac:d8:2a:be:6b:81:ea:18:88:
40:bf:90:b0:32:1c:41:04:82:6d:89:64:46:46:20:2a:6c:40:
d6:73:c2:d2:6b:72:bf:58:71:d4:9c:cf:ab:19:88:8b:fa:26:
7e:c4:df:30:33:cc:69:ba:76:85:1c:dc:6f:34:fe:e6:99:d3:
b5:36:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:17:49 2026 by rpki-client