Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/87x1D7pYeaB1gXkvbE0BFkgXr-8.roa
File: 87x1D7pYeaB1gXkvbE0BFkgXr-8.roa (raw, json)
Hash identifier: Ln5Bb2F89AAwGIw+We1i3J/fjL0LEyPyu8CtB1jNHEg=
Subject key identifier: F3:BC:75:0F:BA:58:79:A0:75:81:79:2F:6C:4D:01:16:48:17:AF:EF
Certificate issuer: /CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Certificate serial: 019F2368516C76474B7072D5DB7B52578406
Authority key identifier: F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/87x1D7pYeaB1gXkvbE0BFkgXr-8.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214380
IP address blocks: 193.22.87.0/24 maxlen: 24
2001:67c:139c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:6c:76:47:4b:70:72:d5:db:7b:52:57:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f943c02c6f7bf9792aee485a337b4c7852d6ac4c
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3bc750fba5879a07581792f6c4d01164817afef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:15:7f:15:f4:b1:ae:19:79:05:be:60:23:
d5:3f:8e:c6:54:da:f5:5f:ca:24:a9:b8:17:54:d4:
7d:0b:73:88:6b:64:c7:2a:a4:84:85:2a:d5:7a:4e:
2c:a3:df:95:2d:93:cf:7a:17:1b:fe:a1:b7:d6:53:
4c:6c:8f:ea:01:d6:6d:28:43:3f:bb:6c:9e:a7:cd:
ba:72:df:c3:bd:b6:68:18:70:c2:f3:40:4d:4a:7f:
cd:01:bd:41:6a:77:66:bf:b9:71:3e:df:a5:85:f1:
59:bb:b9:69:82:88:ee:ce:cb:de:c7:6f:dc:84:66:
a9:fa:58:47:89:ce:3f:e7:c3:e0:ef:1f:d7:8f:c5:
5f:2a:44:82:5e:8c:c4:1b:8a:05:df:97:0b:f2:44:
b6:1a:0d:fb:c1:7a:ff:40:75:60:d8:42:21:94:03:
78:e3:29:75:3e:12:d8:45:b6:fd:79:86:25:08:c4:
5d:ee:84:31:4a:1f:0b:d3:10:6f:a3:79:a2:8c:83:
b5:ba:e0:a6:88:5c:8d:a6:99:63:99:bb:69:59:c7:
51:60:6b:3b:04:79:e5:3e:42:64:bd:73:6b:2e:99:
0a:ad:2e:7a:be:67:57:aa:6c:10:ee:e6:4f:ac:92:
d7:c2:26:7a:69:55:31:87:2a:17:82:62:e0:34:42:
f5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:75:0F:BA:58:79:A0:75:81:79:2F:6C:4D:01:16:48:17:AF:EF
X509v3 Authority Key Identifier:
keyid:F9:43:C0:2C:6F:7B:F9:79:2A:EE:48:5A:33:7B:4C:78:52:D6:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPALG97-Xkq7khaM3tMeFLWrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/87x1D7pYeaB1gXkvbE0BFkgXr-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/16fbbf-6cdd-49b7-8c21-883b90cd134a/1/1-UPALG97-Xkq7khaM3tMeFLWrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.87.0/24
IPv6:
2001:67c:139c::/48
Signature Algorithm: sha256WithRSAEncryption
0a:b7:5f:42:c1:5d:40:70:ed:9f:70:cd:47:f1:5f:59:70:d3:
09:a0:ff:e7:be:1e:e2:0d:97:b0:1e:86:0c:27:1f:99:d2:da:
f1:44:d4:49:bf:ee:37:2e:35:f7:98:0d:23:80:53:2d:b4:1c:
d8:16:93:79:c1:c5:17:85:aa:71:de:2f:9e:3a:6b:fe:a9:0a:
e4:b4:b8:a3:4f:eb:da:1e:23:ee:c9:c7:e6:ad:bf:e4:4a:1b:
9d:11:5b:e6:af:20:b4:a9:23:bd:81:09:e1:95:10:31:c6:82:
fb:78:2f:75:27:bd:9e:04:13:b8:67:03:6e:a6:c3:32:eb:d7:
a1:5e:ac:22:b7:a0:7a:74:23:92:e4:98:d5:2f:50:c1:b8:f9:
28:dd:5b:7d:e2:1b:30:da:49:47:13:36:7b:46:f3:98:a7:63:
8b:07:45:6c:f2:31:e2:4b:7d:1f:8e:9a:bd:0d:1d:8b:96:0c:
57:00:0b:29:3d:ba:19:3a:fc:61:cf:dc:2e:a7:51:19:45:4a:
9d:51:fa:50:b7:22:91:3f:75:af:40:0e:38:b3:06:10:12:d0:
7b:9b:dd:4a:57:85:35:41:74:ba:c0:cb:85:a6:df:e0:9a:4e:
24:9d:f0:71:49:8c:1a:fc:2f:50:6e:b0:29:e3:84:39:da:2e:
d0:69:8e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:31 2026 by rpki-client