Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AVV2YBYuLCwl4J1T3uRcjsCGj8E.roa
File: AVV2YBYuLCwl4J1T3uRcjsCGj8E.roa (raw, json)
Hash identifier: bJOP2EpTq1fWbYMKAuq+1YMNTkATwC/6jbxmVIzl3dE=
Subject key identifier: 01:55:76:60:16:2E:2C:2C:25:E0:9D:53:DE:E4:5C:8E:C0:86:8F:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A08A92D82AC3DEBBBA14E146FCA17B12C1
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AVV2YBYuLCwl4J1T3uRcjsCGj8E.roa
Signing time: Thu 10 Sep 2026 09:07:54 +0000
ROA not before: Thu 10 Sep 2026 09:07:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38186
IP address blocks: 87.83.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:92:d8:2a:c3:de:bb:ba:14:e1:46:fc:a1:7b:12:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 10 09:07:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01557660162e2c2c25e09d53dee45c8ec0868fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:bd:6d:24:5f:fb:3b:8a:dc:f0:71:9b:e5:
d6:d3:bb:28:da:ec:29:17:36:55:bc:dd:48:75:a5:
46:d2:15:71:1c:f5:e7:d6:8c:67:9e:e7:ed:3d:c9:
50:ab:04:48:fb:3f:39:7c:b3:2d:5b:81:4c:8f:63:
8e:6e:68:82:2f:ae:29:d6:d0:6b:c3:b8:fc:75:f3:
96:dc:92:aa:92:63:71:07:9c:9b:25:d5:2a:50:c4:
17:35:6a:cf:2a:a0:ac:2a:7e:93:f4:91:51:2c:68:
f8:af:9f:ec:14:ab:7e:4d:3c:15:1e:a8:35:37:a6:
7c:24:79:9e:af:84:99:aa:9d:23:b2:a5:24:f1:43:
6a:60:31:90:32:ac:39:0c:0a:1a:f2:ac:68:4f:a4:
e8:b2:08:3c:69:d4:18:0d:23:15:87:55:f3:1b:49:
e8:e7:d7:86:74:4c:44:dc:2b:9d:a3:85:76:78:4b:
5b:5c:86:ef:e0:42:8c:ac:3d:ce:04:53:16:23:35:
fa:1a:f2:3c:3f:cc:25:d4:78:56:96:5e:43:d4:a7:
a5:11:0c:41:fb:38:34:7a:8e:e1:5d:8b:1e:bd:10:
37:39:b5:1f:49:fc:1c:93:be:44:87:80:c8:cb:c7:
ba:d1:2e:bf:62:c7:bd:7c:2b:a9:9a:84:12:f4:62:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:55:76:60:16:2E:2C:2C:25:E0:9D:53:DE:E4:5C:8E:C0:86:8F:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/AVV2YBYuLCwl4J1T3uRcjsCGj8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.161.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3f:97:34:ab:15:de:44:53:f1:8e:d8:a4:3d:a5:42:fb:ef:
f4:b8:06:14:10:dc:ed:18:89:2a:7b:b9:c4:12:8c:53:47:42:
48:cb:10:c3:89:0a:2b:47:e8:29:91:3a:9b:ea:5b:9d:3e:d4:
1c:22:46:b2:8e:94:cc:0e:f3:d4:be:3f:b7:58:a5:09:bf:7f:
7c:da:9f:50:18:46:98:62:74:9f:12:47:c5:55:b5:28:79:91:
cb:00:a8:c0:fa:45:69:68:26:c8:52:e4:9d:e8:1b:6b:b4:37:
36:87:02:57:c3:de:2b:b8:0a:85:b5:a6:f1:81:cd:06:df:46:
a4:a3:b9:1d:a8:a2:16:c4:20:e4:53:26:06:4c:6a:83:08:c1:
91:00:ad:35:fa:8d:d9:03:64:81:42:c8:3f:a0:b2:1f:2b:f5:
86:53:e7:2b:bc:b5:08:2a:db:24:b8:3f:13:91:e1:4c:ce:c3:
65:44:75:37:53:b7:46:b4:93:ca:20:11:38:70:68:cd:4c:d5:
a3:a7:bb:31:2b:b4:d3:e6:5c:1a:25:48:99:1e:51:a2:77:c7:
9b:7f:b4:8f:35:8b:cf:6b:da:55:9d:89:a7:d3:be:d3:0a:9a:
d8:c7:f1:08:28:23:6d:be:b9:65:39:bf:d9:98:99:fb:53:4e:
b4:db:e4:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCKktgqw967uhThRvyhexLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTEwMDkwNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTU1NzY2MDE2MmUyYzJjMjVlMDlkNTNkZWU0NWM4ZWMwODY4ZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pa9bSRf+zuK3PBxm+XW07so2uwp
FzZVvN1IdaVG0hVxHPXn1oxnnuftPclQqwRI+z85fLMtW4FMj2OObmiCL64p1tBr
w7j8dfOW3JKqkmNxB5ybJdUqUMQXNWrPKqCsKn6T9JFRLGj4r5/sFKt+TTwVHqg1
N6Z8JHmer4SZqp0jsqUk8UNqYDGQMqw5DAoa8qxoT6Tosgg8adQYDSMVh1XzG0no
59eGdExE3Cudo4V2eEtbXIbv4EKMrD3OBFMWIzX6GvI8P8wl1HhWll5D1KelEQxB
+zg0eo7hXYsevRA3ObUfSfwck75Eh4DIy8e60S6/Yse9fCupmoQS9GJHvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFVdmAWLiwsJeCdU97kXI7Aho/BMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvQVZWMllCWXVMQ3dsNEoxVDN1UmNqc0NHajhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1OhMA0G
CSqGSIb3DQEBCwUAA4IBAQCWP5c0qxXeRFPxjtikPaVC++/0uAYUENztGIkqe7nE
EoxTR0JIyxDDiQorR+gpkTqb6ludPtQcIkayjpTMDvPUvj+3WKUJv3982p9QGEaY
YnSfEkfFVbUoeZHLAKjA+kVpaCbIUuSd6BtrtDc2hwJXw94ruAqFtabxgc0G30ak
o7kdqKIWxCDkUyYGTGqDCMGRAK01+o3ZA2SBQsg/oLIfK/WGU+crvLUIKtskuD8T
keFMzsNlRHU3U7dGtJPKIBE4cGjNTNWjp7sxK7TT5lwaJUiZHlGid8ebf7SPNYvP
a9pVnYmn077TCprYx/EIKCNtvrllOb/ZmJn7U0602+T3
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:49 2026 by rpki-client