Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yVUBv5hLjswzezwYp3jHzNUoWA.roa
File: 8yVUBv5hLjswzezwYp3jHzNUoWA.roa (raw, json)
Hash identifier: fL91sQnEZrUhtqI90b4u8uAJ6aRE5dZNBT05hcthW5A=
Subject key identifier: F3:25:54:06:FE:61:2E:3B:30:CD:EC:F0:62:9D:E3:1F:33:54:A1:60
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A084BC4E47A16CA86E4A3C1E0D5409FF88
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yVUBv5hLjswzezwYp3jHzNUoWA.roa
Signing time: Wed 09 Sep 2026 05:55:28 +0000
ROA not before: Wed 09 Sep 2026 05:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396526
IP address blocks: 87.85.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:bc:4e:47:a1:6c:a8:6e:4a:3c:1e:0d:54:09:ff:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 05:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3255406fe612e3b30cdecf0629de31f3354a160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1f:96:23:97:81:4c:81:8d:41:1e:c7:26:78:
d3:76:57:4f:4c:9a:19:06:00:d6:76:88:06:dd:cc:
b5:e6:f7:70:58:5c:e5:c5:2b:c3:b6:4d:f7:6a:f5:
40:12:f5:7c:ff:dc:05:fd:f3:80:fb:02:42:cb:2e:
21:8d:a2:9a:64:35:01:66:d1:2c:fb:37:29:43:1a:
f4:23:1d:b0:52:a0:f6:3f:08:76:f5:d5:0e:ec:d6:
37:bf:e3:2c:35:75:ca:af:dc:4e:69:15:f2:1d:b9:
c5:9c:90:30:21:ef:12:c8:71:90:7a:0b:aa:cd:d8:
45:d5:3f:2f:7a:e4:c3:73:d1:3c:cf:97:fc:56:f2:
d9:67:b2:b4:60:c9:34:b6:31:7e:c5:d2:38:e6:de:
44:d1:5e:2f:51:2e:df:07:2e:36:11:a2:a7:2b:0e:
b5:e3:9c:e9:2a:b7:a1:93:14:41:5c:93:4e:8c:12:
08:1f:d4:5d:6e:05:47:a1:8a:30:d8:0d:97:82:1c:
0a:8d:38:ab:e9:e3:74:a1:38:7f:1d:38:89:30:2c:
6d:8e:fd:71:ef:43:56:64:c9:61:68:49:d5:cb:6e:
b7:52:e2:bf:f9:31:81:84:77:7d:4b:e7:2d:6e:a3:
0e:76:48:69:2f:24:75:61:7f:03:29:b5:e6:35:a6:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:25:54:06:FE:61:2E:3B:30:CD:EC:F0:62:9D:E3:1F:33:54:A1:60
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8yVUBv5hLjswzezwYp3jHzNUoWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
24:af:1f:81:df:4b:4b:fd:6f:4a:f9:9c:b2:0d:b1:ca:ce:35:
42:64:19:0b:d9:9f:84:14:33:97:be:cc:15:0d:cb:13:14:fc:
43:9d:1e:fc:c5:c6:3c:2a:76:46:3f:c6:b8:e4:1b:b3:fd:47:
e2:53:8c:ac:2a:00:e0:40:2d:a7:07:b7:dc:87:04:a2:bf:75:
64:b7:7e:00:0b:2d:cb:66:c0:1b:e0:c7:d1:3b:aa:f0:1a:45:
ea:2a:95:0e:e6:49:98:02:cf:30:05:bd:f8:ed:35:fd:e1:9f:
da:6c:b4:ef:1c:1c:97:f4:b0:54:e9:20:0d:d6:45:06:6d:bd:
3e:34:00:c3:9f:80:d0:89:0b:98:63:28:60:a6:d9:b5:ac:13:
81:cb:f5:37:89:0a:3a:05:fa:9d:77:d3:57:54:6f:2e:fa:30:
ab:b4:05:86:48:50:fa:e1:0d:9d:3b:fc:c7:7e:99:5d:72:81:
ce:c1:75:9c:ef:2e:ca:39:12:39:89:15:e1:78:83:36:1d:4d:
b2:a2:3e:1f:48:00:ea:e4:e2:08:18:e2:61:28:fc:0b:3b:04:
6f:c3:f1:f5:a8:a8:11:99:fa:58:cc:ca:93:53:90:7a:3e:3b:
3f:83:c3:e0:3d:6c:7e:96:e3:2b:bc:8b:40:95:4b:bd:87:14:
8e:ec:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:48 2026 by rpki-client