Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/V_RH0cFrlNuXtOikRL8paVXhPiA.roa
File: V_RH0cFrlNuXtOikRL8paVXhPiA.roa (raw, json)
Hash identifier: 2QNuOmmTPV5Xa8OFE3M/48CSd4MMOY+NZDAhqAP0Grs=
Subject key identifier: 57:F4:47:D1:C1:6B:94:DB:97:B4:E8:A4:44:BF:29:69:55:E1:3E:20
Certificate issuer: /CN=7b7f52ac232e043fa8608b6c5e9923fa25478b2e
Certificate serial: 019F80EDC684A01D0ABCC9DA9D1B25AEF2C3
Authority key identifier: 7B:7F:52:AC:23:2E:04:3F:A8:60:8B:6C:5E:99:23:FA:25:47:8B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/V_RH0cFrlNuXtOikRL8paVXhPiA.roa
Signing time: Mon 20 Jul 2026 19:08:14 +0000
ROA not before: Mon 20 Jul 2026 19:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 87.192.200.0/23 maxlen: 24
2a06:7ac0:f00::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:ed:c6:84:a0:1d:0a:bc:c9:da:9d:1b:25:ae:f2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7f52ac232e043fa8608b6c5e9923fa25478b2e
Validity
Not Before: Jul 20 19:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f447d1c16b94db97b4e8a444bf296955e13e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:2c:5a:0c:54:0d:9c:46:0f:62:d6:0b:f3:
a5:b7:4f:7b:b2:e1:2f:7a:9f:a3:53:cb:1f:02:5e:
71:3f:74:9c:4c:05:d8:37:5e:20:3e:d3:b6:50:65:
82:92:a3:4f:93:11:25:bf:1d:ff:ea:90:e7:ab:c7:
95:6f:9e:af:01:b5:c0:b3:0a:ce:61:4c:96:dc:7a:
ed:d8:53:c2:e4:0d:36:8a:c0:91:6f:3a:4a:16:0c:
17:75:2c:14:c0:e2:2c:24:e7:9e:f6:80:1b:d6:52:
31:6f:c8:64:49:25:2b:55:49:45:4d:10:71:c3:de:
ce:2d:58:e4:bc:64:c7:e2:96:64:c3:56:8f:ac:f8:
2a:35:a5:54:ce:2b:0e:4b:8e:6c:0e:e8:f2:63:b8:
4c:91:59:8c:a4:f9:07:72:c8:44:71:ed:4c:01:b8:
eb:07:50:20:d8:e8:02:e2:89:d1:15:35:f4:bf:ab:
7e:19:d7:15:16:6a:2a:be:4e:ff:fe:9d:c9:fd:4f:
b6:37:9b:c4:c6:fd:63:c9:d8:a7:93:ef:d5:3d:f8:
bf:c6:c3:cf:0d:99:4c:f7:9b:b1:28:60:f2:70:6a:
99:b8:8b:43:fa:2c:d7:6e:ef:44:c7:9a:90:9a:4a:
8e:28:4e:e4:bf:a4:cb:b0:84:a4:7d:d3:f4:d8:b2:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:47:D1:C1:6B:94:DB:97:B4:E8:A4:44:BF:29:69:55:E1:3E:20
X509v3 Authority Key Identifier:
keyid:7B:7F:52:AC:23:2E:04:3F:A8:60:8B:6C:5E:99:23:FA:25:47:8B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e39SrCMuBD-oYItsXpkj-iVHiy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/V_RH0cFrlNuXtOikRL8paVXhPiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/cfecb0-aeb0-4fbb-8503-5973d41251fc/1/e39SrCMuBD-oYItsXpkj-iVHiy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.200.0/23
IPv6:
2a06:7ac0:f00::/47
Signature Algorithm: sha256WithRSAEncryption
90:e6:55:5f:4e:13:bd:d0:22:c5:16:c9:cb:14:c8:df:05:81:
25:72:7a:a8:17:25:4b:a3:47:3c:be:67:b7:87:b9:d4:3f:60:
6c:4a:ea:29:25:e0:ac:c3:aa:81:e8:f6:a2:b6:84:77:3b:d1:
6b:07:57:fd:03:8c:08:b5:49:2e:58:a9:47:5b:f7:6c:8b:b0:
2f:ae:73:2b:23:e5:8a:5a:f3:9a:4d:21:cb:a5:e6:05:6d:64:
f1:05:82:aa:9b:4e:54:88:49:84:36:37:0e:87:ce:de:17:e8:
65:f3:d1:3d:ce:6b:89:3f:2d:68:97:3f:a6:e6:bf:8e:93:3b:
05:00:3a:61:81:d2:d8:6a:33:52:f3:ef:54:04:a2:65:46:dc:
db:c4:e1:5b:e0:ce:e7:d1:37:f4:58:dc:51:40:02:50:01:98:
f7:54:95:60:70:93:42:d1:0e:19:2d:b7:e7:a5:87:0e:3e:52:
f4:5c:83:4e:99:d9:e5:0e:af:71:bc:30:78:f7:de:69:5c:4c:
6e:46:b6:9f:f5:93:8a:43:91:ac:26:b8:81:e2:93:d2:e3:c0:
b4:b7:c5:53:94:1f:d9:b4:25:6f:22:2a:14:d3:d4:b6:a2:7a:
a5:68:c8:73:20:11:1a:d2:40:5e:9a:71:d1:64:bb:16:f8:2d:
50:5d:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:56 2026 by rpki-client