Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/81zKB880vrehM9ku-7-74fMyJFQ.roa
File: 81zKB880vrehM9ku-7-74fMyJFQ.roa (raw, json)
Hash identifier: JwnJsmAo/XigUvX5ZPmaPVUo0DWPjYlFlEXoqwScc+c=
Subject key identifier: F3:5C:CA:07:CF:34:BE:B7:A1:33:D9:2E:FB:BF:BB:E1:F3:32:24:54
Certificate issuer: /CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Certificate serial: 019F23682AD6D78E9E3A3EE52F3D09985220
Authority key identifier: F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/81zKB880vrehM9ku-7-74fMyJFQ.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43727
IP address blocks: 5.187.64.0/19 maxlen: 24
31.210.192.0/19 maxlen: 24
77.241.240.0/20 maxlen: 24
91.195.126.0/23 maxlen: 24
91.202.24.0/22 maxlen: 24
93.157.144.0/21 maxlen: 24
109.106.128.0/19 maxlen: 24
178.210.32.0/19 maxlen: 24
185.33.160.0/22 maxlen: 24
185.177.96.0/22 maxlen: 24
2a00:1440::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:d6:d7:8e:9e:3a:3e:e5:2f:3d:09:98:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7a6db5bbb76f634240638284f8e5bb68fc31762
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f35cca07cf34beb7a133d92efbbfbbe1f3322454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:15:40:ef:60:34:c1:be:f0:44:13:c9:da:
0a:b9:50:4f:e3:33:48:ed:cc:02:a8:ab:af:bf:64:
67:05:be:30:cf:67:6b:c9:17:52:32:c5:d5:78:63:
3f:cb:77:17:0a:35:4d:65:85:30:28:3d:6f:75:c3:
15:bd:00:8f:d2:c8:88:8c:0b:e8:6d:67:9f:05:3d:
ec:f4:5e:44:55:0a:27:19:47:f5:90:e4:3c:ac:64:
a2:b4:01:ae:0e:11:65:35:1b:8f:3d:39:d4:c8:30:
77:d1:bc:be:0d:26:9f:42:11:6b:6c:5c:66:db:ce:
b5:71:5b:9c:44:87:2b:8c:9d:9d:fb:ec:0f:79:fb:
0e:3c:8e:a8:a9:e3:62:8e:40:17:3c:27:02:22:e5:
2c:f7:ad:7c:e1:d7:99:c7:32:e3:bf:f3:6c:74:24:
02:5e:e8:ca:32:ca:10:92:02:c3:f1:3e:4e:00:47:
c2:e1:bd:1e:ba:90:1f:d0:16:e3:c0:6c:51:12:c7:
91:cc:e2:af:90:4b:5d:ae:5c:4c:b8:2c:a7:35:04:
28:a9:e2:88:98:88:32:43:bb:26:50:7b:df:2e:00:
f3:6d:ba:5c:dc:e3:70:0f:cb:fb:8e:35:ee:ca:60:
ad:aa:3c:53:89:4e:5e:47:8b:ae:cd:f6:fb:11:bc:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5C:CA:07:CF:34:BE:B7:A1:33:D9:2E:FB:BF:BB:E1:F3:32:24:54
X509v3 Authority Key Identifier:
keyid:F7:A6:DB:5B:BB:76:F6:34:24:06:38:28:4F:8E:5B:B6:8F:C3:17:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96bbW7t29jQkBjgoT45bto_DF2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/81zKB880vrehM9ku-7-74fMyJFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/514437-93ea-48c1-9127-8b7716354c8d/1/96bbW7t29jQkBjgoT45bto_DF2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.64.0/19
31.210.192.0/19
77.241.240.0/20
91.195.126.0/23
91.202.24.0/22
93.157.144.0/21
109.106.128.0/19
178.210.32.0/19
185.33.160.0/22
185.177.96.0/22
IPv6:
2a00:1440::/32
Signature Algorithm: sha256WithRSAEncryption
55:2b:53:cb:a0:24:19:f6:0b:e3:ac:15:48:48:52:00:5e:d5:
1e:08:23:bd:d8:fe:fa:3c:5b:ae:10:53:d0:31:87:27:25:6a:
a7:1c:68:c5:b3:d6:b3:07:47:e3:f0:75:b1:b8:ee:34:12:47:
0c:84:b3:bb:dd:1e:97:46:88:e2:85:d9:31:3f:59:22:ab:fd:
7a:2a:02:88:11:ad:57:88:99:ce:1c:c1:cb:44:f0:9a:52:19:
b5:77:06:23:4c:aa:ba:e2:63:35:9f:1e:c5:16:8b:ae:08:16:
b8:ff:8e:fb:bf:58:88:61:29:f7:28:b0:92:c6:6c:02:17:e6:
27:3d:b0:f6:48:b9:e6:6c:04:47:dd:fc:30:0d:5a:11:1d:0b:
e1:b8:2c:b4:ad:0f:c3:aa:9b:ac:ae:c5:8f:64:cf:3a:70:3d:
7f:44:a0:b5:b9:0b:0c:b2:ff:d5:8c:1c:9a:85:1d:20:04:cd:
50:1f:4a:e6:55:3d:1e:39:99:b2:fb:8c:02:79:c9:af:17:21:
3a:85:58:79:d3:1b:0f:fb:34:4e:4e:12:36:de:a4:77:ca:9a:
1e:79:fd:1a:be:25:20:40:f0:35:27:a4:9f:b7:25:0c:d0:8f:
e4:38:66:45:08:76:25:99:19:5a:41:98:12:39:3d:86:3b:75:
b1:fa:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:16 2026 by rpki-client