Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/1-8zDLGIBUdttuzongUFSJyrBHyI.roa
File: 1-8zDLGIBUdttuzongUFSJyrBHyI.roa (raw, json)
Hash identifier: NA/2OMk9mJUUPDfOuqk/HqeM1Jw1QwBMqIBpT7majag=
Subject key identifier: FB:CC:C3:2C:62:01:51:DB:6D:BB:3A:27:81:41:52:27:2A:C1:1F:22
Certificate issuer: /CN=25fb431b8b414763ee33fadf298e46a078e32432
Certificate serial: 019F23685BF4C41266566B0C59952E762C44
Authority key identifier: 25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/1-8zDLGIBUdttuzongUFSJyrBHyI.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6730
IP address blocks: 87.236.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5b:f4:c4:12:66:56:6b:0c:59:95:2e:76:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fb431b8b414763ee33fadf298e46a078e32432
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbccc32c620151db6dbb3a27814152272ac11f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:46:73:47:38:c7:e0:a0:b7:7a:f7:5a:36:
47:43:91:f6:e2:b3:af:ae:e6:74:ff:d9:a7:2b:52:
06:09:83:80:c4:8e:8b:ac:9a:16:1e:6c:cc:72:f4:
38:4b:81:99:a4:59:61:72:1c:b4:56:53:27:b8:1f:
26:48:7b:d5:4d:48:13:15:6e:1a:45:08:88:7a:0b:
23:f6:30:9e:90:43:9e:71:92:2f:cc:ea:5d:61:0f:
04:26:ed:3b:f7:49:ba:da:c5:56:53:44:32:14:57:
3a:19:71:03:dd:97:86:92:0d:72:f1:5a:28:06:0e:
14:e6:86:a9:93:c4:81:67:18:06:3e:62:58:41:c0:
1e:c0:60:0d:08:e8:5e:b1:b4:3e:8b:b9:63:fc:b5:
6a:4d:8a:0d:4c:3d:34:2c:12:32:24:c1:76:11:f3:
1a:0a:5b:c2:d9:89:3e:ab:19:90:42:a9:a2:5f:51:
ae:40:c4:39:0c:1f:7c:65:06:7e:32:3d:b0:43:a0:
7f:8f:0b:b2:10:04:2f:74:f0:e7:14:a2:93:db:53:
8b:4c:e5:da:38:e6:f7:c3:37:b1:ad:5b:7d:fc:72:
c3:43:21:33:b4:08:7d:0f:cb:31:5e:65:ca:a7:c3:
0d:c3:a1:c8:33:4d:d3:d9:14:7b:b8:f7:ec:bd:1c:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:C3:2C:62:01:51:DB:6D:BB:3A:27:81:41:52:27:2A:C1:1F:22
X509v3 Authority Key Identifier:
keyid:25:FB:43:1B:8B:41:47:63:EE:33:FA:DF:29:8E:46:A0:78:E3:24:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JftDG4tBR2PuM_rfKY5GoHjjJDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/1-8zDLGIBUdttuzongUFSJyrBHyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/JftDG4tBR2PuM_rfKY5GoHjjJDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.200.0/21
Signature Algorithm: sha256WithRSAEncryption
98:cd:ca:93:df:4d:3d:bb:ab:2a:0b:38:72:b6:e3:fc:5e:c4:
d9:08:0d:e2:3d:57:71:93:f2:00:d6:68:a2:3e:a6:20:af:2b:
65:3b:86:ad:1b:a1:42:9a:87:ff:a6:34:6c:75:be:c9:92:c6:
26:bf:27:28:4d:c7:0e:7a:5b:22:e0:20:78:c8:2c:64:b7:7b:
86:e1:f3:2d:2e:cc:dd:0b:2b:48:7d:d7:f9:99:f9:94:aa:07:
ca:c5:41:fd:f5:8f:a8:d8:b3:f6:d6:f9:2b:39:1b:e8:47:21:
16:72:85:3b:5f:e4:45:69:9c:f4:fc:1c:e6:b1:ae:39:8e:ba:
e9:62:c0:e1:0b:16:1d:0b:1b:0b:2f:a0:bd:94:96:b9:b2:4e:
2d:f0:82:56:f7:bc:d2:fb:d9:d2:32:07:13:5e:27:07:9f:d0:
73:33:4a:48:84:d9:78:22:f5:e7:d9:fb:64:80:9f:33:71:cb:
d5:2a:c3:de:35:78:3c:0c:72:89:ba:1b:17:c4:c7:f4:87:d4:
43:a3:83:5f:24:38:83:8a:69:01:43:05:b2:e1:0b:1b:52:9c:
89:f9:69:10:37:bf:2f:7e:a8:38:d3:ec:6e:21:dd:96:eb:7e:
39:2a:35:c2:10:0d:36:9e:72:93:e1:f8:25:10:8d:df:aa:91:
cb:52:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:23 2026 by rpki-client