Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eImiVxayFFp586SE52Gia5IMlbE.roa
File: eImiVxayFFp586SE52Gia5IMlbE.roa (raw, json)
Hash identifier: rPot2xTra0H6ZKVTyZisayM9qmnrGGTYg/Vk1qG+Suw=
Subject key identifier: 78:89:A2:57:16:B2:14:5A:79:F3:A4:84:E7:61:A2:6B:92:0C:95:B1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1D41FC46AED65212AEA4EF9A5A3B312CC
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eImiVxayFFp586SE52Gia5IMlbE.roa
Signing time: Fri 13 Nov 2026 08:56:54 +0000
ROA not before: Fri 13 Nov 2026 08:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219447
IP address blocks: 87.84.17.0/24 maxlen: 24
87.84.22.0/24 maxlen: 24
87.86.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:1f:c4:6a:ed:65:21:2a:ea:4e:f9:a5:a3:b3:12:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 13 08:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7889a25716b2145a79f3a484e761a26b920c95b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:3b:d0:a8:eb:3d:2e:66:c2:d7:b6:36:84:
15:51:ff:a2:31:6c:90:fa:8a:d6:03:ae:98:fb:74:
29:0a:3a:eb:42:d6:b7:ff:06:45:b7:8e:15:34:8f:
8b:f0:67:9d:ea:8b:af:b4:a5:54:7a:f1:83:4b:e0:
0b:5d:72:7e:48:4d:cd:e8:96:cf:1e:d5:b6:39:65:
42:a3:b9:ba:ca:6b:cf:3e:d8:ec:ab:f2:86:2f:fd:
1f:c6:ff:e9:db:fb:88:94:b5:51:e4:40:3a:b2:af:
99:17:f1:8e:77:a2:98:a9:9a:e0:bb:77:13:e1:01:
d6:0a:19:6f:7d:6b:16:fa:af:d0:24:9e:8e:2c:d0:
5c:f5:9a:a0:6d:0c:07:23:9c:25:7b:f1:af:9d:ae:
98:c7:21:cc:16:9a:d7:f3:dc:f6:f6:8b:a3:97:38:
0f:32:35:02:69:f6:74:e1:33:f8:0e:31:6c:ae:05:
9d:8c:92:2b:f6:08:a2:aa:d7:0b:39:07:e2:42:87:
c4:56:4e:22:2b:01:a8:db:0f:47:54:f5:41:b2:ae:
5f:31:64:71:45:29:16:02:0c:e5:8f:45:10:9e:ff:
cb:d3:8b:98:8e:da:5b:90:5b:91:37:5d:02:7a:f8:
e4:16:38:29:c4:b5:00:9a:02:96:71:b7:36:e2:9a:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:A2:57:16:B2:14:5A:79:F3:A4:84:E7:61:A2:6B:92:0C:95:B1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/eImiVxayFFp586SE52Gia5IMlbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.17.0/24
87.84.22.0/24
87.86.20.0/24
Signature Algorithm: sha256WithRSAEncryption
38:fd:59:e6:09:82:43:a4:ae:40:03:bf:3a:e4:88:96:93:f6:
97:eb:36:64:9d:0d:7d:f1:14:ee:40:b7:58:5f:07:1c:aa:c4:
89:00:4f:be:17:5e:7f:d2:a1:b0:cc:66:d5:bb:00:2e:a8:49:
ca:b7:63:73:52:9b:63:3c:7b:b5:c8:e9:4c:69:7e:94:c5:82:
34:e1:bc:03:6c:86:ea:20:61:24:42:15:75:52:a9:f9:8a:db:
f2:3d:dc:f9:7a:1d:b5:e3:4d:c3:80:1f:cb:63:f3:6b:82:21:
16:6e:b7:23:1c:ff:37:d1:d9:35:b9:b0:d9:9c:a0:1d:be:fc:
db:87:c4:29:bb:cd:64:63:81:e2:c8:4f:a5:d7:e7:42:ce:c7:
20:54:86:4e:c2:e3:76:eb:ec:18:1b:2f:7b:0d:63:8c:5f:17:
19:af:ba:02:52:8a:26:c3:83:8d:12:1d:94:65:99:b0:e5:c7:
e2:c6:41:21:e1:a4:97:b8:0f:c5:8f:d7:13:96:5a:62:50:2b:
25:76:f7:a3:30:34:2d:eb:8e:5d:43:77:89:af:c0:1d:17:f5:
5b:8e:cf:07:8a:b4:dc:4c:42:e6:87:da:c8:e7:90:f3:85:7d:
d4:62:49:c2:b1:08:3a:06:1d:fe:ef:03:fa:62:bb:b2:66:05:
7f:dc:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:17 2026 by rpki-client