Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/94eJMe0eU-v1UZHiVB4DukcnyMQ.roa
File: 94eJMe0eU-v1UZHiVB4DukcnyMQ.roa (raw, json)
Hash identifier: ZApupMXOSzW8et8uS2ypN59DVlz5u/z0MvUVJoHJ1No=
Subject key identifier: F7:87:89:31:ED:1E:53:EB:F5:51:91:E2:54:1E:03:BA:47:27:C8:C4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A172CB445B5DE44E82EF77B676197E8CE6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/94eJMe0eU-v1UZHiVB4DukcnyMQ.roa
Signing time: Sun 25 Oct 2026 11:21:26 +0000
ROA not before: Sun 25 Oct 2026 11:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 87.84.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:cb:44:5b:5d:e4:4e:82:ef:77:b6:76:19:7e:8c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 25 11:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7878931ed1e53ebf55191e2541e03ba4727c8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:f7:46:4d:1f:4b:f1:0e:36:95:50:57:a9:
10:10:aa:4d:1c:3f:5b:71:8c:b1:47:9b:62:f5:dc:
f8:d1:1e:71:04:63:70:4a:4c:55:01:d0:00:ff:17:
c2:eb:4a:69:d3:d7:66:2f:43:4e:0f:ff:a5:cb:42:
61:29:bf:df:30:72:31:ad:4c:98:52:07:44:80:37:
4b:bb:7d:e4:b8:4c:ee:76:94:a1:09:ff:32:ed:69:
47:1b:aa:24:dd:09:c4:1b:c8:f0:2a:f7:b7:68:1b:
22:f9:e1:0f:5e:4f:01:07:7b:8a:57:74:8c:8c:85:
18:0b:42:df:05:36:39:8e:0a:83:30:3d:47:c5:b7:
2e:45:87:6c:ff:f1:bc:67:12:3e:e8:27:3e:9f:75:
3e:a9:96:6a:3a:46:66:c0:a8:99:56:ea:22:13:e7:
22:72:64:bb:91:ec:1e:51:82:58:c0:40:6c:61:e9:
41:cd:39:e8:8f:ae:89:07:09:2e:0f:bb:62:e2:aa:
01:a4:54:2d:b8:91:6f:e0:89:fd:e8:2e:86:0b:2e:
1b:21:d9:ab:03:65:87:44:19:73:e7:6d:c2:98:75:
de:37:60:30:c9:46:a4:e6:50:64:e7:10:5b:16:68:
ef:92:de:f4:12:e6:9e:d5:e7:d9:26:8f:eb:ac:e2:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:89:31:ED:1E:53:EB:F5:51:91:E2:54:1E:03:BA:47:27:C8:C4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/94eJMe0eU-v1UZHiVB4DukcnyMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:17:1f:61:f0:62:8e:fc:0e:32:73:bb:bf:ca:12:88:f0:85:
93:1b:43:cc:b2:f7:5c:aa:db:8b:78:e7:89:4e:e6:76:af:b8:
a1:b2:92:10:de:9c:ab:30:c6:b6:3a:17:28:68:47:32:67:e4:
fc:7b:50:1b:dd:e2:e8:f3:85:bb:b1:c8:2a:37:5a:09:d5:0e:
62:59:9d:56:d0:4f:44:b1:2c:0a:bd:97:88:2e:17:8d:c8:d9:
1c:02:f9:fd:22:3a:a0:17:f1:98:72:3b:20:cd:b4:a3:0b:e1:
6c:77:86:c2:e4:00:e5:6c:ff:b8:a2:ea:b9:af:82:5d:42:bb:
7d:28:ee:98:5f:1e:6f:bd:6e:0a:6a:e1:f3:39:6c:a3:17:3c:
f8:6f:77:ba:a7:04:e3:49:74:f1:6f:02:eb:d1:2a:9b:bb:da:
25:5a:5c:b8:ca:e4:b4:b9:4b:94:34:06:42:51:60:4f:f1:5d:
0d:fd:5d:37:35:82:58:c0:36:19:55:46:50:77:11:f7:1d:00:
0d:8f:d4:b6:0a:61:0e:4b:9e:f4:74:9d:b1:48:10:a8:f6:38:
27:96:fa:51:93:66:7f:83:a3:b8:a1:ab:71:2d:c4:d9:17:92:
26:d3:12:c2:de:db:e7:bc:7e:fd:6f:78:6d:8a:fc:0a:22:88:
fe:41:08:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFyy0RbXeROgu93tnYZfozmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDI1MTEyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzg3ODkzMWVkMWU1M2ViZjU1MTkxZTI1NDFlMDNiYTQ3MjdjOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZL3Rk0fS/EONpVQV6kQEKpNHD9b
cYyxR5ti9dz40R5xBGNwSkxVAdAA/xfC60pp09dmL0NOD/+ly0JhKb/fMHIxrUyY
UgdEgDdLu33kuEzudpShCf8y7WlHG6ok3QnEG8jwKve3aBsi+eEPXk8BB3uKV3SM
jIUYC0LfBTY5jgqDMD1HxbcuRYds//G8ZxI+6Cc+n3U+qZZqOkZmwKiZVuoiE+ci
cmS7keweUYJYwEBsYelBzTnoj66JBwkuD7ti4qoBpFQtuJFv4In96C6GCy4bIdmr
A2WHRBlz523CmHXeN2AwyUak5lBk5xBbFmjvkt70Euae1efZJo/rrOLPEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeHiTHtHlPr9VGR4lQeA7pHJ8jEMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOTRlSk1lMGVVLXYxVVpIaVZCNER1a2NueU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1ROMA0G
CSqGSIb3DQEBCwUAA4IBAQAeFx9h8GKO/A4yc7u/yhKI8IWTG0PMsvdcqtuLeOeJ
TuZ2r7ihspIQ3pyrMMa2OhcoaEcyZ+T8e1Ab3eLo84W7scgqN1oJ1Q5iWZ1W0E9E
sSwKvZeILheNyNkcAvn9IjqgF/GYcjsgzbSjC+Fsd4bC5ADlbP+4ouq5r4JdQrt9
KO6YXx5vvW4KauHzOWyjFzz4b3e6pwTjSXTxbwLr0Sqbu9olWly4yuS0uUuUNAZC
UWBP8V0N/V03NYJYwDYZVUZQdxH3HQANj9S2CmEOS570dJ2xSBCo9jgnlvpRk2Z/
g6O4oatxLcTZF5Im0xLC3tvnvH79b3htivwKIoj+QQiW
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:13:21 2026 by rpki-client