Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/bi8d97aRtKJIbEgM4Ym7ZPP8QGY.roa
File: bi8d97aRtKJIbEgM4Ym7ZPP8QGY.roa (raw, json)
Hash identifier: d/9DiWX2IjgqVrTrSmOGVp0LDh8tA/ujGXqb66MNQ4w=
Subject key identifier: 6E:2F:1D:F7:B6:91:B4:A2:48:6C:48:0C:E1:89:BB:64:F3:FC:40:66
Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Certificate serial: 01A19266B045F2DD65202A01DD84F90E588C
Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/bi8d97aRtKJIbEgM4Ym7ZPP8QGY.roa
Signing time: Sat 31 Oct 2026 14:39:25 +0000
ROA not before: Sat 31 Oct 2026 14:39:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 87.192.52.0/22 maxlen: 22
87.192.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:66:b0:45:f2:dd:65:20:2a:01:dd:84:f9:0e:58:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9
Validity
Not Before: Oct 31 14:39:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e2f1df7b691b4a2486c480ce189bb64f3fc4066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:09:84:91:a8:aa:cc:13:14:03:e9:f7:dd:
92:8c:2d:b1:22:69:85:7a:af:24:7e:0a:91:cf:4d:
30:ab:3b:ac:98:f0:8e:21:ff:91:3d:23:f6:85:e4:
d1:19:e2:ee:43:85:5f:78:c9:ee:de:d0:93:20:c1:
54:40:6a:63:c3:11:fb:e8:0d:5e:97:7e:ad:64:82:
84:7f:94:0e:99:93:e6:40:59:10:6a:d4:44:04:30:
4c:8b:1a:22:a3:6f:ab:88:d0:95:9a:d6:74:bf:57:
2b:90:7b:9c:c9:fe:3f:2b:1a:4f:b6:18:2d:49:b8:
34:90:d2:19:e8:1f:ba:ec:8e:73:0a:6f:72:71:50:
cf:84:db:9f:e4:ff:07:f2:e0:fd:0d:d0:83:56:dc:
d6:cc:32:f6:dc:99:aa:9e:14:00:15:4c:2d:f0:36:
5c:a4:4d:a0:0e:6f:2e:d6:da:14:9e:18:49:6d:d2:
c0:78:42:91:69:8e:7f:28:e6:0e:21:ec:3b:47:44:
e7:db:24:c8:56:bb:b8:c6:9b:cc:85:66:97:3d:e2:
20:ec:8d:f6:e8:d1:a9:e2:64:68:50:a6:b9:d9:fe:
19:cf:58:31:f0:b9:9a:97:57:a9:25:f2:ae:ea:86:
c8:65:b8:8d:c2:84:55:e0:48:70:3d:46:c4:8d:90:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2F:1D:F7:B6:91:B4:A2:48:6C:48:0C:E1:89:BB:64:F3:FC:40:66
X509v3 Authority Key Identifier:
keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/bi8d97aRtKJIbEgM4Ym7ZPP8QGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.52.0/22
87.192.60.0/22
Signature Algorithm: sha256WithRSAEncryption
63:fa:8e:ef:0b:c6:7c:f9:d5:9d:36:64:bf:c8:d1:99:19:af:
f1:36:1a:eb:e2:30:fd:71:54:fc:9d:9a:0e:42:48:f3:d8:ac:
7a:96:78:a4:18:39:16:a6:4d:17:04:66:4e:67:32:0f:21:4f:
e3:76:bb:dd:51:77:d3:32:7b:c7:1d:78:5f:b5:5a:46:91:53:
06:0b:ac:bf:8e:be:96:a5:b4:8c:b1:b1:83:21:c7:ac:a6:3b:
2e:5c:8c:51:81:2a:fc:b6:e3:9b:45:a2:ee:aa:02:fd:ce:af:
e9:89:27:83:15:8a:8f:25:60:79:6f:13:a9:61:91:6a:12:5c:
7c:11:72:97:66:87:0c:fc:59:6e:76:a5:4a:a3:80:c5:48:f8:
84:cb:82:46:b9:21:d8:07:a1:67:d5:53:37:77:1d:41:8e:d5:
cb:65:c4:07:c7:b0:3c:79:ca:be:2f:9c:5b:13:f7:37:82:b9:
6f:43:3c:de:e7:1d:13:1a:9e:78:d2:9e:74:76:d2:a4:1c:f7:
7b:23:b7:d3:3a:e9:42:5d:bd:b2:56:d6:b2:1d:cf:96:e9:c6:
b1:57:72:38:49:97:82:8d:fb:1a:8b:69:f7:77:96:8e:ca:30:
4d:03:95:47:0e:2f:b3:dd:94:4f:db:53:00:5a:62:c2:81:fb:
fd:93:01:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:54 2026 by rpki-client