Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pWm4xDFbnLcT9_SSTjx9n7LEqGY.roa
File: pWm4xDFbnLcT9_SSTjx9n7LEqGY.roa (raw, json)
Hash identifier: 56wMfQ6kOKEdhFapF91FJ2B/krfZvgslDceoA0Q7uww=
Subject key identifier: A5:69:B8:C4:31:5B:9C:B7:13:F7:F4:92:4E:3C:7D:9F:B2:C4:A8:66
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CECF430BAB64CDD00A784440F3682735
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pWm4xDFbnLcT9_SSTjx9n7LEqGY.roa
Signing time: Wed 23 Sep 2026 15:08:04 +0000
ROA not before: Wed 23 Sep 2026 15:08:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 87.82.57.0/24 maxlen: 24
87.86.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 08:35:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:cf:43:0b:ab:64:cd:d0:0a:78:44:40:f3:68:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 15:08:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a569b8c4315b9cb713f7f4924e3c7d9fb2c4a866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:77:7e:63:c3:60:ad:45:2a:b3:b1:73:b0:
35:45:c5:94:91:8f:9a:6e:e5:5a:d2:f4:bc:1b:a4:
e9:a4:8a:57:94:3e:28:05:9b:77:6f:9b:d3:3e:0c:
56:2f:88:71:b2:ab:e2:0c:e1:10:50:9c:5c:bc:56:
3d:a6:19:c2:3b:71:32:0a:4e:2d:d3:a7:a1:17:d0:
94:b5:8c:7a:0e:c0:dc:cb:f7:16:02:cc:82:b1:6d:
b9:08:a6:dd:b1:37:43:34:95:7a:c5:3b:59:76:53:
b2:65:a2:ee:6f:e2:a8:11:42:6a:71:9d:7f:ee:f6:
2d:a0:59:74:60:6a:2d:c5:89:3d:2c:b2:6f:78:4f:
d7:3b:2f:ae:a9:a5:1b:e9:7b:6d:a4:9b:3f:45:69:
2a:d0:8e:ae:da:11:3e:7a:b6:3b:24:83:f8:58:7a:
14:30:14:0e:ab:41:3f:d3:14:70:20:37:68:40:90:
65:80:c7:8c:b4:33:4f:7e:e3:0b:c0:ec:bb:d6:24:
22:e5:27:78:54:04:d8:a2:56:a0:63:0b:5c:eb:18:
b7:ce:89:60:3d:d9:38:bc:da:dc:14:a0:29:c1:8a:
53:2f:d6:52:16:97:b9:37:4b:c8:85:5a:4b:8d:24:
71:27:1a:ff:63:6f:1c:0a:fa:7a:99:fd:0d:fa:c0:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:69:B8:C4:31:5B:9C:B7:13:F7:F4:92:4E:3C:7D:9F:B2:C4:A8:66
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pWm4xDFbnLcT9_SSTjx9n7LEqGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.57.0/24
87.86.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:32:d2:2d:71:e7:48:e4:85:98:b4:8a:e6:24:95:d5:c0:0c:
c8:c5:d2:31:78:59:01:ee:97:eb:e4:00:31:7c:42:07:e4:23:
be:86:90:d0:16:0b:97:97:dd:8c:56:77:11:3a:8c:a2:81:5c:
fc:2f:06:ce:97:4d:e7:7e:6f:6a:8c:0b:ba:30:98:1e:d1:34:
6f:e1:e6:7e:90:11:e3:91:1a:42:22:ce:54:f0:07:97:89:bf:
29:18:a3:63:fc:c3:8b:7f:1f:05:7c:9c:49:cf:4b:01:fb:4e:
29:c8:2f:ad:d5:7e:2e:ff:ed:86:2e:b1:ba:46:23:af:1c:0d:
ad:97:08:7c:7a:70:be:54:54:35:a4:c8:64:30:33:70:bf:8d:
11:27:63:c8:5c:ec:4f:b6:57:6f:fa:30:fb:cc:e6:c6:23:0f:
23:41:56:0f:fc:36:81:b4:12:4d:4f:bc:94:f0:36:1e:06:07:
89:d4:e2:b1:a9:35:92:b0:1a:c4:45:1a:5a:cd:7c:0a:ce:b5:
ea:de:4a:cd:36:70:90:ff:9f:6b:ea:f1:2d:61:f5:01:e5:16:
36:3e:7a:12:98:ea:b4:e2:78:ac:b0:68:5c:b5:1f:68:50:1d:
05:29:2a:07:b5:b4:22:40:c3:a2:a9:71:a2:d4:1f:67:99:57:
a8:04:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:56:11 2026 by rpki-client