Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EFTc4POFJKkeIRm5lrg7OUCXTbY.roa
File: EFTc4POFJKkeIRm5lrg7OUCXTbY.roa (raw, json)
Hash identifier: iJDj+8PFMNn5tcykaAhHqw3BMzFT9/ZaJknIsYsObQM=
Subject key identifier: 10:54:DC:E0:F3:85:24:A9:1E:21:19:B9:96:B8:3B:39:40:97:4D:B6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D3CD320A048C1B73292CDE0B05220B0A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EFTc4POFJKkeIRm5lrg7OUCXTbY.roa
Signing time: Thu 24 Sep 2026 14:23:55 +0000
ROA not before: Thu 24 Sep 2026 14:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218702
IP address blocks: 87.83.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:cd:32:0a:04:8c:1b:73:29:2c:de:0b:05:22:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 14:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1054dce0f38524a91e2119b996b83b3940974db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:80:48:c7:9a:67:e2:7b:17:da:dc:e3:64:
91:31:a8:17:a6:bd:9c:af:51:60:3c:a0:35:58:f6:
69:6f:55:be:ac:c7:90:3f:5a:b8:6c:c2:eb:3c:d2:
9f:7c:37:4b:0c:07:a9:35:8b:a3:17:04:4d:d3:0f:
39:9d:6c:23:cb:68:6c:dc:c1:c8:8e:6c:e4:ac:a4:
01:cb:fc:ab:e1:80:06:a5:71:60:f8:67:1a:7a:1c:
17:03:3c:3d:1d:d6:99:87:6d:0a:d3:ca:d5:34:6f:
6d:93:89:89:4c:3e:82:9d:f7:14:8e:f5:8b:c0:64:
f3:2a:7b:b6:ad:d5:bb:92:df:88:43:9f:0c:6e:cc:
0f:d8:f3:d9:08:e1:cb:61:2f:1c:ca:59:a8:20:8a:
70:f3:89:1c:18:c1:8f:80:3a:ff:00:b6:4d:1d:90:
47:99:3e:9d:6e:ef:cc:7d:23:e7:71:28:36:9b:3f:
c7:ca:c9:53:3d:a7:45:15:af:f3:5a:a2:11:7a:df:
57:6a:01:39:a0:90:c6:6f:b3:a3:ab:0b:75:5b:cc:
fa:1f:aa:81:80:d2:d8:47:e0:3f:d0:d8:2e:43:b0:
de:28:27:32:f6:93:17:f0:c5:a1:5c:a2:3f:d0:ab:
64:09:76:3d:cd:6b:c9:e3:09:61:25:70:3c:43:c9:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:54:DC:E0:F3:85:24:A9:1E:21:19:B9:96:B8:3B:39:40:97:4D:B6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EFTc4POFJKkeIRm5lrg7OUCXTbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.170.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7b:1d:2b:c6:1f:90:90:fb:bf:5b:06:19:47:6d:81:6f:33:
9f:d7:6c:0a:6a:2c:d4:11:00:72:d6:cb:19:f5:27:67:28:e6:
b5:fe:62:a0:4a:6c:b6:7e:02:45:8c:0c:0b:18:04:24:01:c3:
5a:98:d5:86:2d:60:25:20:56:ca:6b:90:19:f4:63:e1:64:24:
a3:84:0b:b8:63:53:aa:c2:c4:e6:a6:11:ab:1a:00:48:c0:62:
82:f6:f0:19:ea:de:e7:dd:51:3f:bd:f6:bd:d1:27:fb:4f:bb:
eb:bd:27:c4:86:e7:0d:05:e8:4d:b4:1f:4a:4b:4c:18:11:12:
f6:c9:43:07:39:7a:ae:60:12:80:06:88:27:3a:be:a3:93:78:
32:cb:c0:b9:82:c1:a7:e9:cb:34:20:34:8b:3d:79:3c:0f:49:
1d:20:7a:12:a7:6b:43:12:d9:5c:9d:8a:cb:c3:0b:3e:dc:01:
c4:23:b3:f4:e9:42:8a:ed:d5:2f:cf:d6:83:fa:5c:77:b4:4a:
f6:9e:74:b4:25:65:52:ce:bc:03:ce:23:2c:2c:b6:61:63:ed:
78:e1:67:ab:3e:72:60:52:85:7e:bc:05:ee:1a:1a:9f:45:7b:
87:35:17:1f:5c:bd:ca:dd:51:e2:0a:c6:23:6e:ae:cc:a4:cd:
86:28:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:38:32 2026 by rpki-client