Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BcyVWS4CJvY4msY-cuwT7b65J1g.roa
File: BcyVWS4CJvY4msY-cuwT7b65J1g.roa (raw, json)
Hash identifier: q/m0hcghySO2fwCqtnvzq9V3VWs4q3bDXMgIRE+STJ0=
Subject key identifier: 05:CC:95:59:2E:02:26:F6:38:9A:C6:3E:72:EC:13:ED:BE:B9:27:58
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F84B1D72B4A53DAD110B2F763E08C2336
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BcyVWS4CJvY4msY-cuwT7b65J1g.roa
Signing time: Tue 21 Jul 2026 12:41:15 +0000
ROA not before: Tue 21 Jul 2026 12:41:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 87.84.77.0/24 maxlen: 24
87.84.216.0/24 maxlen: 24
87.84.217.0/24 maxlen: 24
87.84.238.0/24 maxlen: 24
212.134.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:b1:d7:2b:4a:53:da:d1:10:b2:f7:63:e0:8c:23:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 21 12:41:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05cc95592e0226f6389ac63e72ec13edbeb92758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:d9:55:c0:1e:2f:b2:09:45:61:48:4e:64:
0f:ff:79:33:57:a4:a6:c5:04:c6:a7:af:80:ad:bc:
08:8d:c4:9e:dc:9b:6f:ec:56:ee:0d:b6:3b:fd:77:
9e:5c:ab:af:da:fa:ec:93:8b:b8:5d:25:b3:5d:3e:
2a:a8:93:7b:1e:8a:e0:c1:62:60:b2:66:d9:cb:99:
1f:d1:3a:c3:b2:d6:1f:d8:b6:a6:9b:b6:6e:6b:7a:
2e:5a:03:99:99:20:43:0d:d5:09:04:38:c0:e7:3d:
39:3f:cb:75:4f:a5:95:75:d3:50:ef:23:e1:4f:fb:
f1:1f:dc:0b:9b:82:84:fd:22:8b:7e:e6:8c:1d:60:
96:f9:c9:19:ad:4c:13:01:90:ac:e5:eb:0e:08:0d:
40:bc:03:6d:c2:a6:b9:a4:92:54:5f:50:1b:89:c6:
ca:7f:c0:5e:9d:79:ac:f8:1a:c1:f0:cb:01:eb:95:
1a:db:ec:58:8c:b6:b1:22:95:fe:dd:22:e0:82:1a:
48:d1:44:cb:54:84:56:3e:d2:32:49:8a:9c:25:d6:
23:63:1c:1e:40:a6:f5:a2:6a:65:77:36:5f:3c:01:
f9:85:15:28:ec:82:d6:7d:c5:9d:a2:10:42:79:fb:
36:00:3b:b1:a5:49:50:b0:fa:96:9f:4e:d4:ea:a2:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:95:59:2E:02:26:F6:38:9A:C6:3E:72:EC:13:ED:BE:B9:27:58
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BcyVWS4CJvY4msY-cuwT7b65J1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.77.0/24
87.84.216.0/23
87.84.238.0/24
212.134.38.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:a8:91:71:79:41:f1:9d:10:ac:8c:2c:c4:e4:bd:38:90:43:
8f:46:95:98:88:f1:24:00:0b:5f:8f:b6:b2:9b:18:2e:44:52:
b5:60:64:b7:40:6e:2c:dd:3b:f8:8b:d7:d4:5f:56:f0:d0:1e:
95:94:15:b5:d3:ac:51:37:81:ef:5e:21:40:aa:4b:55:0a:8e:
b8:13:e4:78:8a:18:88:17:87:87:5e:40:97:2a:c0:80:63:3e:
58:1d:96:c1:1a:5d:f0:7b:5a:a2:87:a8:27:51:17:77:98:2d:
61:88:cf:21:fa:cf:39:ce:45:66:74:35:d5:fc:23:83:0e:c5:
93:ef:6f:f2:3a:88:40:4a:d5:fc:5e:0d:33:d5:f5:7c:16:ae:
72:b8:5e:a0:3b:32:7c:52:48:5b:b1:33:56:43:36:1e:bd:84:
87:20:5f:c8:07:8c:aa:39:a6:42:41:e2:81:b1:5c:e9:7a:14:
1e:bd:7d:af:67:7a:89:02:88:8c:0d:ee:7d:e4:97:ae:0f:2a:
6c:1f:2f:d2:d5:74:74:4e:f4:1f:fd:56:67:c0:89:a2:8f:68:
74:b6:58:d2:e1:70:73:56:5c:4d:0d:13:a7:55:3e:5b:17:f9:
1b:cc:e8:a8:5e:38:a5:17:12:03:29:c5:a4:40:4e:8e:32:d1:
56:01:c4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:19:54 2026 by rpki-client