Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UNT7Gy-_pKlp-rz0tmCRsSfBY6w.roa
File: UNT7Gy-_pKlp-rz0tmCRsSfBY6w.roa (raw, json)
Hash identifier: wdpZOkNBjcBcf5XpJcfcZ5r+MIA627gSb7SBAGxm6XA=
Subject key identifier: 50:D4:FB:1B:2F:BF:A4:A9:69:FA:BC:F4:B6:60:91:B1:27:C1:63:AC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0BF45592EC75D1D3047EDD8D9E911DC4C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UNT7Gy-_pKlp-rz0tmCRsSfBY6w.roa
Signing time: Sun 20 Sep 2026 14:43:08 +0000
ROA not before: Sun 20 Sep 2026 14:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.82.206.0/24 maxlen: 24
87.83.66.0/24 maxlen: 24
87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
185.3.73.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:45:59:2e:c7:5d:1d:30:47:ed:d8:d9:e9:11:dc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 20 14:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50d4fb1b2fbfa4a969fabcf4b66091b127c163ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:30:1f:63:24:d4:a3:5e:22:58:22:51:41:
15:5f:29:10:f7:51:8e:42:7e:08:dc:ea:74:ce:35:
a7:fd:23:11:bb:89:e2:53:10:2a:df:c7:f5:67:69:
c2:24:2f:ef:31:58:60:10:20:f8:34:e5:31:08:23:
ef:df:97:fe:06:ea:be:7e:7f:33:33:23:93:54:61:
70:45:8c:36:9b:bb:9e:d1:f0:f3:f3:59:f1:1c:6e:
05:32:eb:0e:41:f0:9e:17:24:dd:87:9d:4d:f1:17:
f2:c9:ce:70:56:8e:09:7b:0b:e1:f5:30:26:c6:63:
04:72:ff:ce:e9:bc:52:d4:e5:c9:2e:2c:a6:df:f3:
6b:20:5d:e2:ba:30:18:26:16:be:e1:14:76:b0:fe:
75:46:72:d3:7a:b6:21:aa:78:ec:b1:1b:1e:f9:4d:
5a:4c:16:48:c8:b1:62:c6:8e:ee:a0:af:95:2e:65:
0f:c7:b9:da:a5:a2:b7:4b:ce:77:e0:ee:0b:5f:bd:
3c:9c:46:40:f2:94:3b:07:f4:58:7e:dc:4e:72:15:
be:fc:a3:bb:da:49:e5:f0:f0:6c:69:af:3f:8d:52:
50:d9:cd:0b:fc:06:ce:dc:f6:81:52:69:37:7f:8e:
e0:a2:6e:2e:9e:d1:b1:5e:c8:a5:1c:b1:2c:08:8a:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D4:FB:1B:2F:BF:A4:A9:69:FA:BC:F4:B6:60:91:B1:27:C1:63:AC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/UNT7Gy-_pKlp-rz0tmCRsSfBY6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.206.0/24
87.83.66.0/24
87.86.181.0/24
87.86.252.0/24
185.3.73.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
08:84:16:35:46:ff:84:bc:86:31:24:58:48:08:90:f7:5e:eb:
68:7e:81:90:a3:42:25:09:71:6e:d1:a1:1a:2a:54:5f:72:df:
c4:5e:57:54:3e:4d:8c:b7:8f:2d:0d:91:6f:01:17:d4:ea:e2:
dc:12:42:47:60:5d:6e:15:b4:c9:48:9d:9e:0f:52:f1:89:aa:
60:e5:d8:d7:4d:0c:91:51:f8:a5:cc:0a:32:d0:6f:9c:ef:29:
fc:0f:0d:9d:f7:2d:fb:08:1d:28:7d:47:61:bf:1b:1b:eb:d9:
fe:ee:d0:6e:e4:84:a0:0b:b2:67:de:45:f9:4f:be:08:ec:d3:
5c:fc:98:62:39:6a:46:2c:72:7c:43:aa:22:18:4d:53:9b:25:
f6:83:b8:72:c2:3f:1e:62:9d:36:0b:a3:65:0d:fc:a5:ac:a7:
06:37:09:e6:2b:fb:06:7a:01:97:85:49:a2:56:17:e6:9e:47:
3c:c2:74:57:fe:05:d8:3e:9a:16:48:f6:2e:9f:19:f9:cb:c2:
9a:ab:0e:64:e6:98:ad:b2:70:98:bd:cc:4f:60:93:21:7d:0e:
1f:21:7d:75:48:16:44:f1:87:ac:29:10:1b:e1:f4:ac:df:76:
df:f2:6b:9c:be:d4:42:77:61:65:68:d0:a0:9c:a8:1e:a3:85:
ee:bc:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:14:35 2026 by rpki-client