Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V37_7GgN5p3r3itJvgGwt-f1qJc.roa
File: V37_7GgN5p3r3itJvgGwt-f1qJc.roa (raw, json)
Hash identifier: J7oA8z33THm8ohaXZH/sm34OkfrPhJzGTaL+YeNYP3Q=
Subject key identifier: 57:7E:FF:EC:68:0D:E6:9D:EB:DE:2B:49:BE:01:B0:B7:E7:F5:A8:97
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A099DE28CFA8365C42BDB93B4524899AB8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V37_7GgN5p3r3itJvgGwt-f1qJc.roa
Signing time: Sun 13 Sep 2026 08:24:28 +0000
ROA not before: Sun 13 Sep 2026 08:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219036
IP address blocks: 87.83.123.0/24 maxlen: 24
87.83.199.0/24 maxlen: 24
87.86.20.0/23 maxlen: 24
87.86.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:de:28:cf:a8:36:5c:42:bd:b9:3b:45:24:89:9a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 08:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=577effec680de69debde2b49be01b0b7e7f5a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:f4:b7:4b:08:08:ce:6c:db:74:8e:ea:16:
97:f4:c9:7a:28:b5:4d:f7:8c:2b:4f:fe:90:1c:84:
b4:0e:36:c1:69:2e:05:44:eb:58:7c:46:26:bb:42:
42:16:99:21:7c:dd:d2:83:1c:8f:25:1d:e7:21:a4:
21:3c:8e:1a:c3:da:fb:38:78:6c:90:f0:f9:f1:7a:
56:2b:f4:83:8b:d3:29:fe:7f:14:6e:7c:2c:4a:78:
d3:b4:df:e7:54:63:11:77:38:bb:a8:ef:1d:cf:a1:
49:ec:df:a0:52:b0:43:3b:8d:bd:2f:43:43:14:d6:
3a:19:61:e4:a7:65:e2:0d:d0:e1:ae:74:c2:18:ee:
4f:f6:65:8a:33:dc:16:dd:b0:6d:a9:93:49:c6:5d:
02:67:c9:2c:29:d1:c4:ff:5b:cd:7d:52:91:2d:99:
a5:ac:f6:3e:01:21:69:27:74:73:4e:52:23:3e:99:
9d:45:8a:33:9b:c0:5c:25:ae:84:d4:61:a4:24:c1:
f6:82:7d:f6:1c:05:82:15:e1:1e:b8:85:1a:30:4c:
0b:ac:12:ec:9e:68:ba:a3:c6:d9:9c:f4:ba:91:17:
3c:c1:54:3f:cf:6a:80:7b:e5:24:7e:57:58:09:92:
53:51:0a:b7:96:19:47:ea:21:6f:a4:ce:e6:54:ae:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:FF:EC:68:0D:E6:9D:EB:DE:2B:49:BE:01:B0:B7:E7:F5:A8:97
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/V37_7GgN5p3r3itJvgGwt-f1qJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.123.0/24
87.83.199.0/24
87.86.20.0/23
87.86.210.0/23
Signature Algorithm: sha256WithRSAEncryption
94:7f:eb:65:c7:43:fb:db:cd:b4:35:99:cc:cb:cf:ae:9c:33:
6f:74:2c:53:c7:72:f2:39:e3:fc:3c:92:e8:d2:2c:0a:1a:2b:
97:a2:66:41:08:00:f1:29:2a:2d:97:f8:d7:2a:05:9f:40:be:
30:6a:af:59:ca:ad:dd:68:84:e2:4e:44:47:e2:23:67:ac:d8:
83:98:87:51:f5:4b:6a:63:38:4e:be:f5:14:98:ea:2e:33:6e:
92:f0:5e:63:cf:58:93:58:14:24:30:bb:ee:d8:ec:08:86:7b:
40:19:c7:9b:b7:34:96:63:c3:f8:66:ff:83:7b:25:32:6c:3b:
e3:88:ed:37:02:8e:1a:5d:68:9f:3c:20:a9:ce:0b:d2:41:20:
d2:68:ca:5a:de:be:ee:b7:75:23:fe:6b:43:1d:16:a4:ca:98:
9e:04:d3:d3:15:8c:df:69:24:f8:d8:45:89:ae:ba:c3:64:bc:
1e:a5:43:ea:61:0d:08:ec:e6:12:a5:fd:a6:2e:bc:0d:f8:cc:
13:37:c6:59:31:79:fa:f2:3b:95:92:2e:3c:88:01:2d:0f:c9:
86:dd:61:cf:70:96:18:2b:0f:11:12:68:43:76:dd:e6:82:b1:
92:b2:12:4c:c9:6b:42:2e:11:60:32:d3:2a:4e:e5:67:db:f0:
83:22:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:44:36 2026 by rpki-client