Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/81dpJBDy9Dao5ZscfFbdcGEGKx8.roa
File: 81dpJBDy9Dao5ZscfFbdcGEGKx8.roa (raw, json)
Hash identifier: xYZWmARqztzpL9bYvU/vnFuYMaN1rzIszkHOfUaA5hw=
Subject key identifier: F3:57:69:24:10:F2:F4:36:A8:E5:9B:1C:7C:56:DD:70:61:06:2B:1F
Certificate issuer: /CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Certificate serial: 019F2368C2299AA51364E8E6AE8034CB0EFC
Authority key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/81dpJBDy9Dao5ZscfFbdcGEGKx8.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8412
IP address blocks: 195.20.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:29:9a:a5:13:64:e8:e6:ae:80:34:cb:0e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f357692410f2f436a8e59b1c7c56dd7061062b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:3f:24:df:3a:49:3a:02:d4:2c:22:c2:d3:
6d:fe:09:76:3a:c8:5c:72:5a:69:16:71:c6:31:77:
87:42:c2:30:06:d9:68:a5:fe:fb:fd:89:7c:90:eb:
6b:77:c7:90:20:13:29:44:0a:e8:2e:b3:06:61:11:
10:d9:31:79:d7:30:12:92:dd:8e:7c:4d:7a:29:77:
be:c1:71:0b:8a:61:01:67:89:92:c9:c6:96:47:96:
83:63:e3:31:36:4d:c7:f9:aa:1e:d6:ac:6a:24:90:
91:9e:d8:04:f7:5d:1a:6f:3d:ba:0d:65:fe:16:aa:
c2:92:bf:67:f8:b7:ef:ce:52:25:0b:89:79:c0:0e:
e9:39:3a:53:8c:dd:6f:91:95:81:bb:34:c0:33:5a:
e3:a7:5f:60:21:10:bf:91:18:09:b1:df:97:c7:8e:
d9:01:1e:2b:fb:2f:a8:73:80:f5:a0:a2:5b:d2:5a:
4e:80:bf:bc:df:0f:08:db:dd:eb:9e:07:0f:54:32:
05:64:cb:7b:ba:d8:dd:60:3d:26:27:64:7d:7d:02:
9f:cd:df:21:9e:04:72:72:52:c9:35:33:dc:d3:5e:
e7:f6:1d:ea:e6:63:ee:ad:5a:c2:99:76:94:87:02:
42:16:82:de:ed:03:de:16:62:f2:36:00:1b:db:90:
83:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:57:69:24:10:F2:F4:36:A8:E5:9B:1C:7C:56:DD:70:61:06:2B:1F
X509v3 Authority Key Identifier:
keyid:67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/81dpJBDy9Dao5ZscfFbdcGEGKx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c7:cc:c8:0b:bd:39:bf:81:03:ad:b9:c2:14:c8:0e:d2:55:
12:d0:64:92:26:2e:22:f7:62:80:1a:ef:c8:d6:7d:e8:31:67:
c8:4e:34:18:ad:22:0a:c2:b4:01:54:7f:9c:40:a6:e3:b2:e4:
b4:19:04:6b:16:7c:fb:1a:f5:7e:ab:93:f3:4c:b7:b2:e7:f1:
19:f8:62:cb:e1:c1:7f:9a:d7:f4:9a:d3:3d:dd:eb:80:8a:a2:
91:ed:e1:ea:39:84:20:cd:ae:0e:05:2e:c9:97:4b:4b:f8:6c:
6c:4d:f0:5a:b8:b4:c8:3c:75:7e:04:21:74:42:7e:92:00:ff:
f1:69:08:ee:74:18:ba:a7:1b:34:3b:db:17:06:5b:87:90:d9:
28:1e:df:de:81:93:4a:3d:62:7d:c6:c3:f2:5c:20:36:68:12:
a2:09:8c:b6:27:7e:d5:9c:21:77:84:35:75:ba:e2:af:d4:11:
a0:30:dc:91:64:3c:b8:08:4f:bb:5d:26:b9:97:86:1e:74:c7:
da:6e:2a:81:35:b7:26:72:12:66:de:98:83:6e:b2:e0:1c:37:
2c:00:90:b4:fa:e1:93:23:9d:02:ae:96:d6:22:e5:06:82:9d:
85:ba:c5:56:d2:8c:1d:8c:ce:8c:f8:01:b9:03:2f:3f:c6:91:
bd:49:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:57 2026 by rpki-client