Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/839K-vKQDLSTwMi3nTUbevknphU.roa
File: 839K-vKQDLSTwMi3nTUbevknphU.roa (raw, json)
Hash identifier: HWchlrTom/TGMmTux6MqBdQXZihANha7ZNaVFdwZvu0=
Subject key identifier: F3:7F:4A:FA:F2:90:0C:B4:93:C0:C8:B7:9D:35:1B:7A:F9:27:A6:15
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019F461C5169B397BDA20090E33948198163
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/839K-vKQDLSTwMi3nTUbevknphU.roa
Signing time: Thu 09 Jul 2026 09:01:28 +0000
ROA not before: Thu 09 Jul 2026 09:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 80.86.210.0/24 maxlen: 24
80.86.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:1c:51:69:b3:97:bd:a2:00:90:e3:39:48:19:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 9 09:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f37f4afaf2900cb493c0c8b79d351b7af927a615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a7:10:26:40:91:6a:99:52:90:4c:4e:3b:3e:
f3:e6:9a:cc:a6:88:57:2a:f6:9d:d8:a7:15:61:ea:
48:06:d1:d1:3e:80:95:66:26:d7:82:6d:c9:d4:a9:
63:b2:9b:89:9e:32:d4:76:a4:9f:93:4c:73:6c:e5:
1d:cf:96:df:bf:28:54:7b:5c:85:c5:e5:c0:ec:5c:
88:b8:f9:c5:66:c5:63:7e:e7:6a:2d:d2:85:97:10:
0f:53:dc:ac:76:70:c0:76:49:05:8c:75:34:2b:47:
89:72:71:5b:97:74:db:cb:48:8d:09:53:b0:59:68:
5e:40:73:f6:2b:a0:4f:7b:af:72:27:7d:79:3a:47:
c6:f2:d8:42:71:ff:81:53:09:5c:42:d9:40:fc:c4:
fb:42:1c:e5:25:14:26:d9:68:a1:70:10:e3:63:8d:
ae:e0:ef:86:c4:77:f0:4a:c1:83:09:d4:7f:b7:1b:
1d:6b:89:7c:8b:56:05:b4:d2:1f:02:eb:0c:a5:1b:
c7:17:9a:1d:66:86:dd:90:d7:f6:93:4b:8b:45:73:
cd:eb:6b:b6:d7:98:b9:ac:fd:bd:94:1c:a9:39:c9:
91:07:d8:96:1f:ea:d8:03:55:13:cb:5a:6f:7a:5a:
c4:47:90:3e:d4:e5:4f:7d:d5:72:05:05:55:71:77:
92:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7F:4A:FA:F2:90:0C:B4:93:C0:C8:B7:9D:35:1B:7A:F9:27:A6:15
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/839K-vKQDLSTwMi3nTUbevknphU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.210.0/23
Signature Algorithm: sha256WithRSAEncryption
73:4d:dc:08:17:76:48:69:70:45:80:3c:4b:cb:1f:16:f2:22:
36:fc:2c:b0:d5:59:a4:8d:25:c2:c5:96:eb:de:ed:05:b0:a2:
34:32:e4:e3:df:e9:2e:b6:8e:0e:e6:0b:cb:f2:db:32:ab:a2:
ce:75:69:c9:de:b0:3d:76:df:10:c2:b0:0e:ca:5b:7e:2b:d7:
3d:23:c3:05:0c:e3:f6:c9:69:ff:5a:75:21:45:14:98:ac:aa:
21:f5:df:6c:77:bb:89:15:55:d3:55:b4:cc:79:da:7a:f7:ff:
7a:35:8d:05:68:69:f6:17:29:2b:4d:51:ab:1c:7f:d2:76:a3:
33:3a:6b:db:e9:e5:57:c4:71:a2:e5:17:ab:23:4c:77:a2:d8:
e1:b4:c8:01:07:c2:17:80:97:cb:57:59:a5:6e:6e:2b:50:b6:
23:da:44:e1:97:f6:6a:e3:cb:c4:46:dd:bf:df:9d:32:60:4a:
40:9c:6c:0f:73:f5:5f:97:d1:34:43:2c:ce:6f:2d:5b:fb:8c:
3f:0c:7b:0a:9e:63:5f:f4:89:53:d0:fe:97:98:fe:a8:27:a5:
c6:32:af:72:4f:c7:04:a9:8b:09:0a:66:2e:dc:b0:e7:9a:88:
d1:a5:da:d1:f8:cd:8c:80:7a:47:53:e1:cd:01:f9:f6:9a:0a:
1c:1d:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:31 2026 by rpki-client