Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OBlcicarBERi_tFWlcUkrdPcCEg.roa
File: OBlcicarBERi_tFWlcUkrdPcCEg.roa (raw, json)
Hash identifier: wFHmPoofIxs5H9VGoLlhpOnOdize7kLiWmALdjJf4OM=
Subject key identifier: 38:19:5C:89:C6:AB:04:44:62:FE:D1:56:95:C5:24:AD:D3:DC:08:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BE91E7BF45B4A04388D2FA44B363C0F6
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OBlcicarBERi_tFWlcUkrdPcCEg.roa
Signing time: Sun 20 Sep 2026 11:27:08 +0000
ROA not before: Sun 20 Sep 2026 11:27:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 87.82.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:91:e7:bf:45:b4:a0:43:88:d2:fa:44:b3:63:c0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 11:27:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38195c89c6ab044462fed15695c524add3dc0848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:b1:1c:74:51:0a:98:a1:4b:33:0a:dd:87:
8b:8d:21:98:a9:40:45:bf:e7:af:36:da:04:eb:49:
50:af:b2:38:14:d8:eb:8a:51:55:04:de:f9:88:a4:
af:63:06:cf:05:38:f0:90:8f:52:1c:ee:bf:70:a5:
47:65:55:fa:b4:b5:56:b4:30:a3:3c:82:d7:08:94:
43:1a:ff:d4:44:26:93:a6:3f:8f:cc:3a:4b:62:6e:
de:9b:62:06:17:64:04:14:20:f4:41:d8:3d:7f:63:
d4:37:fa:af:ef:78:d7:52:f1:72:99:60:65:3f:70:
23:af:fd:57:fd:75:b9:29:36:f5:87:d3:82:1a:0b:
89:40:26:84:db:c2:68:7a:50:96:6f:35:a7:2c:50:
46:f6:ed:33:9d:cf:f2:28:df:bf:24:8f:7a:51:8d:
cb:7f:f7:6a:45:71:1d:a4:ee:fe:5e:c5:c9:eb:61:
82:e7:ac:d7:bc:2a:94:ac:6a:c3:84:f2:e2:9d:6f:
c1:90:cb:fa:6a:e3:10:18:3b:a8:ae:b7:fc:90:c3:
d4:80:e8:cd:a8:e8:6a:2e:08:53:0d:7b:96:09:b4:
5d:ec:73:7b:52:15:4f:7b:63:4c:34:c5:95:06:bd:
7d:1f:14:28:d0:1f:d1:cf:ef:a9:e6:d8:d3:2b:65:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:5C:89:C6:AB:04:44:62:FE:D1:56:95:C5:24:AD:D3:DC:08:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OBlcicarBERi_tFWlcUkrdPcCEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:3c:0f:66:dd:02:bf:76:78:e0:d3:43:8f:7d:4d:9e:52:33:
00:17:14:a9:e1:c3:4e:8c:02:be:10:6a:d8:d2:0a:09:61:60:
b0:af:f9:62:83:73:c3:59:73:91:45:09:25:c3:af:ec:32:ae:
49:f1:7f:91:f0:8d:60:50:9e:5a:34:e6:96:bd:e0:fb:ce:de:
aa:2c:6a:2b:37:7b:26:df:34:56:b9:5a:d6:b9:90:51:8b:48:
e7:bc:64:bf:8a:44:b5:f0:2a:79:c3:4e:37:7f:85:a7:b7:5f:
42:e4:73:c4:00:66:3d:7c:d2:76:b9:f1:e9:17:bf:b6:f5:f9:
80:b4:de:ba:ff:06:40:e1:25:10:cd:3c:e4:17:37:3f:a6:0a:
8f:6b:33:49:96:7d:62:aa:d8:d4:2a:16:74:8d:d6:24:85:9b:
71:f1:e2:9d:e1:22:2e:aa:45:5e:83:0a:49:c8:5a:75:36:eb:
11:8e:2e:47:49:4e:da:cf:2c:df:51:94:e2:1a:1c:d7:86:6b:
67:97:be:bc:ef:4e:c6:ba:cb:65:b8:e4:5f:9d:a7:b7:e7:bb:
d4:4e:50:c7:64:ad:90:6c:a8:ac:c9:0d:6e:6a:c9:3d:00:18:
3e:b1:d4:23:35:c1:9b:8e:41:ce:b5:d8:8f:32:bd:74:cf:5e:
04:6d:6f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:47 2026 by rpki-client