Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/slRIbwYqZbJXyHnygA91va6SGJw.roa
File: slRIbwYqZbJXyHnygA91va6SGJw.roa (raw, json)
Hash identifier: pA6FRw07pZstu74dkxlZUiLiALJHZZYbvsyABhMc4yk=
Subject key identifier: B2:54:48:6F:06:2A:65:B2:57:C8:79:F2:80:0F:75:BD:AE:92:18:9C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B471796A8A575E7181FD0295B964BD25
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/slRIbwYqZbJXyHnygA91va6SGJw.roa
Signing time: Fri 18 Sep 2026 12:15:30 +0000
ROA not before: Fri 18 Sep 2026 12:15:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8447
IP address blocks: 83.148.156.0/22 maxlen: 22
85.189.204.0/22 maxlen: 22
86.53.152.0/22 maxlen: 22
87.86.8.0/22 maxlen: 22
87.86.82.0/23 maxlen: 23
87.86.84.0/23 maxlen: 23
194.6.108.0/22 maxlen: 22
195.72.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:71:79:6a:8a:57:5e:71:81:fd:02:95:b9:64:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 12:15:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b254486f062a65b257c879f2800f75bdae92189c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:64:a4:18:20:3c:bf:e3:b2:7f:5f:8d:6c:
98:57:30:3c:8e:8a:1b:3d:9b:86:93:36:f6:89:ad:
ef:4a:63:8d:35:24:5e:7b:2a:4d:16:77:0e:7a:81:
72:3d:8c:8d:fc:b1:5d:63:d9:17:6d:29:14:f1:b6:
27:4a:ff:0a:9a:9e:44:90:67:d9:58:bf:6f:c9:ab:
64:7c:17:47:3e:c7:cc:99:4c:63:f8:34:e7:32:7d:
01:f0:32:01:b6:10:0a:d2:94:9a:26:72:7d:38:8b:
4c:38:99:b2:b3:23:c3:42:8d:ee:ec:2b:5d:e4:a2:
c6:68:60:fe:2b:a5:9f:e6:14:34:69:ae:e4:92:9f:
79:2d:4c:5a:2c:30:26:46:3f:df:35:7f:36:02:cd:
83:fd:b0:c5:8a:f9:4b:73:cf:d8:2e:df:1c:e8:4d:
8e:d5:af:37:6c:7e:27:70:63:59:b9:0b:58:9b:a6:
16:41:c3:04:42:97:c6:e7:b1:b0:6e:c0:39:5b:82:
4a:0f:49:ea:2c:e4:63:f2:30:a1:1c:ee:fa:c0:3e:
9e:a0:bd:ab:85:ca:31:86:c0:25:3f:c2:85:2e:f9:
c6:74:e6:f1:d0:16:5e:b2:b8:93:37:d3:dd:73:7f:
1d:24:fe:c8:b8:1f:5d:99:ae:7f:b7:9a:57:e3:8c:
66:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:54:48:6F:06:2A:65:B2:57:C8:79:F2:80:0F:75:BD:AE:92:18:9C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/slRIbwYqZbJXyHnygA91va6SGJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.148.156.0/22
85.189.204.0/22
86.53.152.0/22
87.86.8.0/22
87.86.82.0-87.86.85.255
194.6.108.0/22
195.72.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:6e:75:e1:9c:10:d7:0c:09:bb:8c:16:17:06:0a:fe:7a:59:
84:7d:28:21:36:be:15:2a:58:ed:2c:20:f9:e7:43:1d:c2:c0:
bf:57:c4:ce:37:e0:17:34:b7:53:67:48:87:19:62:c3:53:1a:
35:fa:13:de:6b:5b:12:fa:66:25:49:86:b4:00:a8:75:3c:9e:
f6:b4:59:0f:f1:35:ee:41:51:02:6d:7b:f7:a5:d2:00:82:cb:
f2:fb:a7:b1:02:04:de:ea:48:65:73:c8:79:6f:15:53:5d:06:
fb:be:7f:f5:68:59:a2:bb:84:34:ea:7b:25:2d:ab:64:7e:5a:
c4:3e:3f:85:26:4d:cc:ef:da:a9:a7:13:22:ed:13:7b:63:cd:
09:da:56:74:20:90:2e:3a:d6:12:6c:5a:4a:79:2e:40:30:84:
7b:fe:37:be:bf:51:67:74:1e:b6:a7:96:de:96:1f:cc:80:8b:
f6:e6:df:11:91:4a:cd:96:c2:9d:6d:3e:95:19:e8:6b:e4:1b:
98:4c:61:c1:a6:62:43:f2:f8:80:a9:2e:3b:8c:be:5e:ba:2a:
bf:fc:dd:a1:6b:90:bd:33:54:fe:96:d8:c7:db:13:6f:f1:ca:
7b:ab:86:24:05:74:3f:c6:5a:de:69:1e:3b:13:84:b5:7a:7a:
d5:cf:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:07:59 2026 by rpki-client