Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oOSWfJ7fqUyXGWWWK0tvh7_s1s0.roa
File: oOSWfJ7fqUyXGWWWK0tvh7_s1s0.roa (raw, json)
Hash identifier: ARMQMLXsVyDIN+UtWZHJG7C7ZFe8g/95L0qSxbfCw0Y=
Subject key identifier: A0:E4:96:7C:9E:DF:A9:4C:97:19:65:96:2B:4B:6F:87:BF:EC:D6:CD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D2A606BA310942E3960179B7946E584E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oOSWfJ7fqUyXGWWWK0tvh7_s1s0.roa
Signing time: Thu 24 Sep 2026 09:01:31 +0000
ROA not before: Thu 24 Sep 2026 09:01:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 87.82.235.0/24 maxlen: 24
212.212.27.0/24 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:06:ba:31:09:42:e3:96:01:79:b7:94:6e:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 09:01:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0e4967c9edfa94c971965962b4b6f87bfecd6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:47:ab:86:b7:74:ae:63:5e:a3:f9:91:f8:
7f:c3:a5:59:cc:6f:bb:9e:f0:0f:cc:45:dc:f9:8b:
95:b3:40:9e:eb:3e:71:b7:8c:db:7b:12:8d:26:d2:
b6:70:df:4a:2e:da:07:4f:10:58:0f:a6:fb:fa:84:
13:74:8c:62:1d:5e:2f:c9:30:c5:a0:49:5e:64:87:
5d:16:0c:12:f4:bb:1d:eb:92:b2:13:0c:1b:8a:65:
58:47:5e:cc:a5:b7:28:e5:0c:47:a5:84:77:e5:49:
93:aa:5f:6f:3b:4d:de:fd:27:63:8e:73:ef:6f:06:
27:e7:b6:81:c9:88:91:de:87:3c:fe:06:5b:68:7a:
0c:2f:11:2c:29:dd:cf:dd:3e:8c:4c:01:29:fa:7f:
f2:16:63:e4:fb:0a:b5:d6:4c:82:e3:96:79:7c:e5:
74:ac:f7:b2:08:38:73:aa:d6:f3:81:59:0a:df:96:
c9:3d:89:6e:4f:eb:fe:2e:52:7a:da:8b:4e:1c:4a:
b7:23:a3:88:2a:ca:06:72:b9:04:d6:57:95:b3:a8:
7e:f7:e5:c9:6c:77:e5:2a:8e:bf:cf:ea:6c:84:a0:
95:4b:08:41:08:8c:41:8d:4a:5e:b8:1f:ef:5e:50:
cf:a3:b6:4e:bc:d6:a3:97:11:ae:19:25:12:e6:cd:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E4:96:7C:9E:DF:A9:4C:97:19:65:96:2B:4B:6F:87:BF:EC:D6:CD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/oOSWfJ7fqUyXGWWWK0tvh7_s1s0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.235.0/24
212.212.27.0/24
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
38:12:06:a1:28:80:47:29:aa:23:6f:6c:71:d4:c7:72:fd:11:
85:06:6c:18:c0:4d:d0:1c:61:b5:ee:24:5b:4e:41:3c:86:6f:
4e:52:f4:4a:cb:04:93:2d:1c:fc:a1:23:53:9c:ce:38:2d:6c:
fb:c4:67:ce:57:1d:fe:b3:4d:85:1f:0b:3f:fa:31:5e:f7:20:
0a:c1:8d:66:f3:fd:bc:c4:1a:93:83:9c:7f:18:3e:58:f2:82:
f5:b0:07:22:5f:6e:f1:30:35:0a:77:d3:b1:44:cb:44:97:0e:
eb:50:96:77:bb:24:ce:1d:50:9d:eb:1a:7f:35:ae:fc:e5:5a:
cd:e5:38:e9:51:3c:1a:c8:ca:10:fc:68:b3:0b:06:a1:61:62:
f9:b9:ee:35:9c:9b:7b:3a:a3:07:00:82:30:22:67:a8:a7:94:
c2:0f:1f:6f:25:9a:27:81:83:5b:7c:75:45:65:8c:cf:da:88:
30:de:2a:14:72:f6:fe:33:01:bb:02:65:5d:4c:db:fd:13:1b:
31:28:3b:20:70:bf:cd:14:c8:75:a2:84:ac:07:c3:c6:10:48:
6d:a9:b2:2f:fc:0f:86:c0:d5:2b:e4:68:30:fc:b7:6d:f4:b7:
78:28:b7:f5:4e:cb:ba:5b:81:8b:95:a1:e1:93:d7:1a:5c:58:
85:e5:84:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:04:55 2026 by rpki-client