Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Junrdztr4DVQKSphKBivc0EUyEM.roa
File: Junrdztr4DVQKSphKBivc0EUyEM.roa (raw, json)
Hash identifier: kE9fhMf+yapeCyWHBHGUUqf9fcHBHbWvSs8SCZ/STk8=
Subject key identifier: 26:E9:EB:77:3B:6B:E0:35:50:29:2A:61:28:18:AF:73:41:14:C8:43
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0C7874D80BED5D77D1A26890642A629DB
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Junrdztr4DVQKSphKBivc0EUyEM.roa
Signing time: Tue 22 Sep 2026 05:12:08 +0000
ROA not before: Tue 22 Sep 2026 05:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401560
IP address blocks: 85.189.3.0/24 maxlen: 24
87.82.253.0/24 maxlen: 24
87.83.12.0/24 maxlen: 24
87.84.208.0/24 maxlen: 24
87.85.235.0/24 maxlen: 24
87.86.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:87:4d:80:be:d5:d7:7d:1a:26:89:06:42:a6:29:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 22 05:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26e9eb773b6be03550292a612818af734114c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:a8:64:6c:64:94:71:45:b3:31:61:6a:62:
de:56:72:3b:15:c6:57:d8:c2:62:ed:31:1b:e0:4a:
d0:de:f6:05:cd:3f:9e:1a:1a:6e:b7:7f:eb:c4:a7:
3e:c4:43:87:f8:77:55:df:33:a1:fb:39:ea:a9:bf:
a0:9e:72:3b:3c:1e:2a:22:9f:a4:41:44:5a:22:4b:
aa:74:fe:ef:13:3f:47:a9:ee:9e:2d:13:82:94:4e:
7c:4d:c4:a2:b6:4a:5f:47:93:cb:36:d9:fd:e4:34:
45:50:e7:b2:09:27:35:71:3c:b0:f5:f6:cf:90:71:
f2:37:00:b3:78:bf:e5:9d:3f:f8:93:0a:7a:a6:cf:
5b:40:aa:fa:37:5a:f1:8a:35:a5:16:da:56:31:1d:
5f:86:38:e9:19:cf:75:c2:71:39:83:75:2b:fc:8b:
ab:17:6d:f4:a7:af:64:25:46:45:33:5f:49:f9:3b:
6a:76:e7:94:55:ff:3b:b2:19:71:ff:d8:74:30:11:
c3:0d:c0:0c:7d:22:28:e9:3d:33:d4:ea:d8:07:8a:
fb:9c:ad:4f:a7:2e:f1:bb:f8:3b:4e:9f:3e:49:d7:
0e:33:8f:47:5a:7a:30:c0:92:ec:ae:7a:9b:71:d8:
15:2d:82:39:d4:0e:8e:2f:cd:9c:c0:aa:5d:f3:9a:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E9:EB:77:3B:6B:E0:35:50:29:2A:61:28:18:AF:73:41:14:C8:43
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Junrdztr4DVQKSphKBivc0EUyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.189.3.0/24
87.82.253.0/24
87.83.12.0/24
87.84.208.0/24
87.85.235.0/24
87.86.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:77:c8:26:0c:e4:ac:f9:2c:14:7e:72:c0:11:ac:c7:b5:d8:
d4:0c:2e:86:4f:61:ab:d7:51:1d:ae:2d:a6:3c:58:5a:82:e0:
5c:1a:6e:3b:7a:1a:13:b6:7f:aa:0f:cb:f5:47:3c:93:5a:6f:
58:25:c0:ad:70:a8:b4:68:7a:9a:87:e4:f1:8e:b6:50:3a:4d:
39:e3:e7:1d:06:cb:13:d7:92:13:ed:be:27:28:fa:e1:16:b9:
cc:10:88:37:d1:47:9f:f6:ef:eb:4e:75:2d:1d:15:0a:35:c9:
8b:b1:78:56:db:e7:14:d4:90:1c:cc:ac:6a:3b:d7:dd:e0:d0:
da:91:93:d8:ee:bd:f9:0b:2b:d9:71:c6:80:3f:46:e7:2c:8b:
09:74:77:92:6b:24:e8:b4:1c:28:a4:da:79:bf:57:ab:bb:18:
9c:a6:e4:58:c8:54:e1:d3:dd:73:6b:c2:17:c7:3b:89:ea:bc:
0a:ca:7e:8f:b0:5c:21:f7:8d:a5:f6:1b:a7:2f:a4:c0:4a:ff:
c5:c0:a9:e7:1d:ab:ca:51:92:c0:84:9e:3a:58:e9:53:aa:80:
3e:d4:03:87:ff:02:89:dd:27:d6:dc:fa:ef:cc:db:ef:3d:0b:
60:5c:85:5f:b8:00:a1:77:44:d7:fb:03:46:e5:4a:8f:60:cf:
ab:e1:5b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:49 2026 by rpki-client