Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tO8JfL8o2lxqSuHpAZ6C6GhjbyE.roa
File: tO8JfL8o2lxqSuHpAZ6C6GhjbyE.roa (raw, json)
Hash identifier: h3EOE0t1hAZwpAYmP52GauiFUEPdoygwHGZs0//8gfg=
Subject key identifier: B4:EF:09:7C:BF:28:DA:5C:6A:4A:E1:E9:01:9E:82:E8:68:63:6F:21
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019F5C0E374C12C816B60CE754BB33ABF910
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tO8JfL8o2lxqSuHpAZ6C6GhjbyE.roa
Signing time: Mon 13 Jul 2026 15:17:43 +0000
ROA not before: Mon 13 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 87.56.0.0/20 maxlen: 20
87.56.16.0/22 maxlen: 22
176.20.192.0/20 maxlen: 20
176.20.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:0e:37:4c:12:c8:16:b6:0c:e7:54:bb:33:ab:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Jul 13 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4ef097cbf28da5c6a4ae1e9019e82e868636f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:3b:73:a7:73:53:5a:5b:fb:e5:96:83:38:
70:3c:69:64:f9:f4:4d:f1:75:f2:02:54:04:83:bf:
b6:5b:b1:30:62:73:37:14:f7:a1:1c:92:0d:18:b7:
98:84:ff:61:5b:06:4b:56:75:7c:49:e9:ec:5f:51:
04:00:43:58:4a:91:70:5d:e5:b5:47:6a:68:c0:04:
ff:c4:45:bc:1a:3d:a8:a3:9d:69:34:d8:26:ef:44:
66:89:f3:85:ba:1d:a0:16:d4:58:5b:0c:7d:b6:13:
af:68:a7:17:f3:3a:99:6b:ab:06:1e:f7:79:4a:ff:
9c:ba:26:b5:4e:a6:e3:02:32:d2:9f:90:07:55:0a:
01:a1:3b:c1:bd:da:9f:41:a6:a4:b6:4e:62:98:b4:
33:a8:81:59:35:1a:b2:e7:48:82:d7:72:7b:41:e3:
fe:49:1e:4b:da:c9:b9:63:25:51:b1:9c:33:bc:9b:
34:d6:71:0c:96:04:49:1c:33:f9:79:4b:f5:6f:48:
d9:67:9c:98:36:78:dd:69:fb:9e:7c:7f:8a:02:27:
83:04:e7:a2:c4:88:11:df:6a:79:1a:19:5f:cb:70:
fb:8c:37:b5:e3:d8:4a:8d:07:c8:00:1a:6a:3d:4f:
f6:e5:bb:7b:cd:62:3d:9b:17:d5:08:fc:3e:b8:40:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:09:7C:BF:28:DA:5C:6A:4A:E1:E9:01:9E:82:E8:68:63:6F:21
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tO8JfL8o2lxqSuHpAZ6C6GhjbyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.56.0.0-87.56.19.255
176.20.192.0/19
Signature Algorithm: sha256WithRSAEncryption
43:5b:2a:85:78:32:24:87:9b:79:d2:93:92:c4:5a:22:0f:98:
db:f0:f2:a5:4a:4c:1f:aa:b2:a7:fc:a9:93:17:21:52:b0:d0:
67:38:db:de:36:a4:ed:2b:f2:ac:33:ce:f3:ea:88:1a:c6:bf:
8e:80:bc:88:8e:68:2f:01:5d:fd:dd:7e:4a:e0:27:14:a1:65:
00:55:94:a9:89:4d:65:88:11:c5:f2:dc:df:0e:26:91:b0:bd:
bb:36:32:4c:0f:09:29:d5:8d:1c:a1:8a:2b:32:27:36:ba:e5:
f4:87:2e:62:62:78:84:bb:31:57:a2:e8:42:9b:a6:60:e6:05:
6f:1b:b4:85:b5:aa:6c:8b:84:45:76:c5:94:38:bf:ef:54:2c:
99:89:2a:a1:2e:29:fa:a3:d6:ac:a0:75:89:ef:fb:e1:b1:2e:
f1:a1:5f:bf:0b:32:33:e3:1d:ad:09:69:26:a9:1b:c6:13:49:
ad:c3:61:69:04:60:3b:a8:e9:bd:40:7b:b8:0d:3d:ab:82:e7:
d3:ea:d4:60:ae:dd:71:eb:40:9c:d6:ad:b1:bb:de:84:68:f9:
1c:4a:63:ba:1b:4e:2d:0b:13:be:81:85:db:25:c0:7a:3b:f5:
c3:e2:0e:3b:3b:cf:13:89:5f:96:be:51:f7:2d:75:b6:6f:48:
59:1a:e0:f3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:53 2026 by rpki-client