Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_Y0PVHx0-MMb37A54waUc2JBJc.roa
File: J_Y0PVHx0-MMb37A54waUc2JBJc.roa (raw, json)
Hash identifier: 72yTlli2OYbOz18uLj277wvofZFzMzemNn8xe6WEzFA=
Subject key identifier: 27:F6:34:3D:51:F1:D3:E3:0C:6F:7E:C0:E7:8C:1A:51:CD:89:04:97
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A19868CA810C96D34F6987BFDFFF9F471E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_Y0PVHx0-MMb37A54waUc2JBJc.roa
Signing time: Sun 01 Nov 2026 18:39:26 +0000
ROA not before: Sun 01 Nov 2026 18:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 87.84.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:68:ca:81:0c:96:d3:4f:69:87:bf:df:ff:9f:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 1 18:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27f6343d51f1d3e30c6f7ec0e78c1a51cd890497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:d8:f0:18:db:38:7a:22:ed:b8:70:fe:bf:
cb:9d:88:1c:a7:cc:b6:00:38:03:1b:c6:bf:d6:b7:
41:c8:75:e4:54:23:fc:a8:96:d9:91:11:80:5c:9e:
a2:e7:cb:6f:7a:66:d9:28:79:94:26:9e:3c:67:24:
12:90:d4:57:ff:f3:35:8a:67:4e:77:9c:14:3c:9a:
d9:0a:de:78:7c:e0:ad:67:49:8c:c8:21:a7:b7:fe:
e9:5c:17:3a:dc:18:cf:76:95:c1:ff:30:16:29:30:
3e:bc:cd:71:88:10:f6:fc:bc:0b:9a:ab:a5:22:c0:
3a:eb:2c:54:b0:d8:b3:21:76:b6:73:50:db:19:25:
6c:e9:82:14:a6:1f:0c:0b:b4:39:c0:a9:5a:46:b0:
47:e0:9f:dd:4d:71:b0:06:48:53:18:f0:4f:01:55:
9d:42:71:6b:9a:58:e9:28:42:aa:6a:eb:d7:50:87:
12:0d:65:95:3d:fa:50:98:cb:5d:6e:07:9c:c4:17:
4d:cb:22:5b:c5:94:81:67:88:a4:42:d8:19:fa:56:
ec:f6:03:34:5d:33:b7:41:a6:3e:d4:83:a1:89:e8:
4e:65:cf:44:b8:ad:8c:05:24:46:77:26:59:f9:a1:
4c:fc:d2:b3:34:b1:a4:12:60:87:59:7e:2e:8e:1f:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:34:3D:51:F1:D3:E3:0C:6F:7E:C0:E7:8C:1A:51:CD:89:04:97
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/J_Y0PVHx0-MMb37A54waUc2JBJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:68:40:bf:dd:ec:9a:a4:51:d0:c0:6c:fc:b2:8d:36:da:8b:
df:89:fb:fd:3b:cd:b7:88:83:d9:12:b6:69:6a:34:6d:53:0c:
2b:39:29:09:bc:11:41:4b:e4:03:e9:5c:fd:ce:b0:c7:91:1f:
92:31:0e:2f:d3:12:d2:26:3a:87:fe:fd:d7:83:e4:19:f5:3c:
a2:8c:c7:6d:ee:e4:e1:7c:31:71:da:ee:fc:33:12:91:c9:75:
23:d2:b0:7e:15:ca:a0:9b:b0:ad:d6:37:1b:8b:39:66:5a:42:
2b:64:18:6c:ba:01:16:0b:d1:b4:7d:99:6f:55:5d:7b:e5:e3:
46:32:ce:23:77:6c:27:2d:ed:32:06:27:17:c4:45:d8:5b:b0:
a5:ca:c6:4c:03:7e:0a:a0:22:a0:f5:92:05:07:c3:ef:ad:be:
65:5f:57:ab:e4:69:91:59:07:12:0b:2d:37:7f:d5:c9:cd:c4:
64:da:84:e0:39:7c:80:19:d4:81:69:09:8e:24:65:7d:f0:f7:
d8:94:01:63:3a:6a:97:e5:18:84:cd:22:f9:e0:eb:21:9c:71:
1d:54:f8:db:7f:fb:b6:dd:a2:53:15:35:fa:a6:81:fc:6b:c7:
b5:6d:c6:c3:3f:5c:22:b3:c1:c6:29:e3:d6:e5:f7:6d:62:b8:
db:c2:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:31 2026 by rpki-client