Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0J6OK5YoFgFvO8P6TW1OUG3_BtM.roa
File: 0J6OK5YoFgFvO8P6TW1OUG3_BtM.roa (raw, json)
Hash identifier: vhuzAkjdtMHl+rFpSvXCARu8zP86gDAE/6L9YpW7fts=
Subject key identifier: D0:9E:8E:2B:96:28:16:01:6F:3B:C3:FA:4D:6D:4E:50:6D:FF:06:D3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019D0654BCD518FE3467CBC8C9F2F15D045E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0J6OK5YoFgFvO8P6TW1OUG3_BtM.roa
Signing time: Thu 19 Mar 2026 13:41:49 +0000
ROA not before: Thu 19 Mar 2026 13:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399468
IP address blocks: 87.82.48.0/23 maxlen: 23
212.212.0.0/21 maxlen: 24
212.212.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:54:bc:d5:18:fe:34:67:cb:c8:c9:f2:f1:5d:04:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Mar 19 13:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d09e8e2b962816016f3bc3fa4d6d4e506dff06d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:f2:24:cf:18:be:2b:ac:a2:e3:06:10:04:
ff:74:b5:af:f6:04:8d:d0:38:6e:ae:c1:54:12:d8:
e8:22:1c:a2:a5:f2:fb:07:e7:fe:3f:22:91:b6:c5:
32:a5:38:01:9c:f6:6b:8b:8b:de:b0:e2:87:a7:76:
ce:21:69:1b:91:6c:ef:0a:6a:fc:2d:fb:bc:7a:57:
85:41:60:fe:a1:ac:e1:e3:db:ec:8c:7a:c3:fd:35:
08:aa:cf:fd:ae:a1:2f:ad:e1:f7:31:3b:6d:0e:37:
76:38:ad:79:d3:ab:51:83:07:63:51:78:24:08:fd:
ec:6f:b7:a7:f3:52:a0:ff:8b:9f:d5:69:ae:35:96:
dd:30:5c:5f:3d:ff:51:9f:85:af:9f:ef:8f:0b:a0:
37:9b:2c:12:49:a8:9e:dc:8a:01:51:e9:15:93:45:
29:b7:63:32:ff:c9:e2:7c:13:dc:b0:79:27:e0:1f:
bb:2e:4e:42:d3:9e:b8:f4:f4:56:f0:26:a9:19:8a:
ca:dc:f3:08:d7:37:f0:54:c1:68:5f:b6:da:ec:13:
bd:1b:27:15:61:98:d7:3a:ee:b7:df:e8:68:0f:84:
c2:fd:8a:a6:1c:13:fb:fd:f3:33:aa:b0:b6:01:55:
bf:4b:f4:14:50:3e:35:15:88:3a:c5:83:d3:a5:87:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:8E:2B:96:28:16:01:6F:3B:C3:FA:4D:6D:4E:50:6D:FF:06:D3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0J6OK5YoFgFvO8P6TW1OUG3_BtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.48.0/23
212.212.0.0/20
Signature Algorithm: sha256WithRSAEncryption
63:9a:c2:a4:b2:a2:f6:e0:9f:83:c0:37:de:ed:67:f2:e7:e5:
e3:53:92:d4:36:93:a2:38:f8:03:b0:57:ac:90:ea:fc:0c:c9:
84:dc:25:c7:bb:3e:ee:b4:51:24:07:c9:97:04:79:6d:1d:cb:
cf:3b:73:51:33:e4:58:db:46:9f:7e:9c:62:80:ff:bc:8c:00:
82:f7:82:38:b8:0d:b6:bb:d0:40:5d:11:b3:e3:fd:29:1d:85:
81:0a:50:ef:79:a2:3c:8a:36:a0:64:69:21:fe:b8:59:43:a3:
3e:21:51:45:f9:64:85:e8:42:30:81:cf:96:1c:a7:3b:7a:f8:
4b:58:57:0e:54:a4:1a:27:0b:ea:dc:df:c0:c3:56:2d:96:ed:
f1:2b:84:04:2c:dc:cb:ea:e1:b6:62:bc:04:29:85:e6:36:92:
6c:10:ac:fe:3c:cd:66:b7:b9:7f:f7:cc:70:22:11:24:2f:21:
0b:c9:cf:cc:c7:20:ec:9b:3d:02:e4:90:24:28:56:17:65:57:
ed:7c:ab:49:60:10:6b:f5:d7:d4:70:33:11:b9:b6:3c:2e:3c:
ef:ce:fd:54:53:ce:0b:0c:58:51:96:ac:82:e6:69:b5:c6:e3:
54:60:53:e5:ae:99:f5:a0:a0:7e:3e:07:c9:48:f6:71:36:9f:
2e:31:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:54 2026 by rpki-client