Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DiagNJMh4WB7ad4h7cNdZOMnIF4.roa
File: DiagNJMh4WB7ad4h7cNdZOMnIF4.roa (raw, json)
Hash identifier: uyhYjHtX6lUrzBGt+78/WSOaYY5O04RyWXllEaDI0yU=
Subject key identifier: 0E:26:A0:34:93:21:E1:60:7B:69:DE:21:ED:C3:5D:64:E3:27:20:5E
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1D41FC3F55EF9BC2E8D79C89D44F7B7C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DiagNJMh4WB7ad4h7cNdZOMnIF4.roa
Signing time: Fri 13 Nov 2026 08:56:53 +0000
ROA not before: Fri 13 Nov 2026 08:56:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219200
IP address blocks: 87.86.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:1f:c3:f5:5e:f9:bc:2e:8d:79:c8:9d:44:f7:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 13 08:56:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e26a0349321e1607b69de21edc35d64e327205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:7e:b0:1e:95:fa:b4:03:2c:dd:65:7d:9a:
4d:a8:16:29:78:21:4c:f6:14:e6:ec:a7:46:ed:53:
48:71:4f:8f:a2:a2:34:0c:93:b6:a7:5b:28:ff:e6:
f2:10:97:f0:83:aa:b8:42:60:5e:68:f1:dd:e8:d6:
69:ee:e8:e2:f0:db:9f:55:d9:d8:f5:d4:14:56:70:
59:7d:7d:72:e5:be:1a:d8:65:7a:22:6e:8f:a7:a1:
d9:90:a3:fb:79:dc:0e:92:b8:9c:3d:22:5a:45:d6:
1c:af:58:bd:2f:e3:77:6e:b8:16:fc:21:ac:5a:aa:
35:93:85:f7:1a:e1:17:1b:45:40:11:2e:35:36:83:
b2:e6:46:3f:12:e5:be:04:d7:29:ac:e7:50:a7:11:
4d:2e:66:50:d8:08:0e:06:f9:46:b9:95:ed:7e:72:
23:6f:db:22:a0:a7:5e:58:9a:5e:c1:07:31:a8:ee:
f2:98:ef:55:75:cf:c9:50:e2:2f:b6:b2:8b:7b:da:
2a:34:40:a5:5d:83:4d:89:06:66:11:b7:84:47:c0:
88:0d:fe:b9:55:55:16:f5:09:f8:20:86:41:96:34:
83:8f:68:fb:bd:64:cb:d7:c7:9c:88:27:90:86:52:
8c:88:fd:c5:ee:ad:5d:75:1e:61:82:b6:d1:a3:b6:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:26:A0:34:93:21:E1:60:7B:69:DE:21:ED:C3:5D:64:E3:27:20:5E
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/DiagNJMh4WB7ad4h7cNdZOMnIF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.20.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1c:d6:0f:da:11:a9:37:bb:45:30:06:3f:32:88:0e:cf:9a:
63:0c:27:c0:43:8e:37:7d:e4:9a:7b:e8:5f:c7:06:92:aa:a8:
71:07:e7:24:d3:85:6f:1e:75:b0:d3:a1:9b:ab:4a:b3:1f:1e:
1c:21:aa:6d:50:44:f4:cf:56:5d:8a:8a:19:fe:d8:8a:a4:af:
a8:cd:2b:61:b6:7e:0a:81:7b:01:c8:be:02:ed:c1:02:27:30:
64:4f:92:d5:5b:a3:3a:78:ef:94:08:2c:93:19:ce:22:22:a5:
ea:ee:ef:92:b0:e5:ef:af:35:12:d5:06:2d:3e:1d:9d:7e:6b:
10:25:0e:d8:d7:4a:07:e8:ed:c5:84:ac:3b:f9:1e:91:70:e1:
6f:79:18:a7:c4:73:70:c0:b2:54:d8:91:15:14:00:5e:9c:dc:
23:20:d0:9a:c0:88:c6:78:fb:63:cc:fc:47:92:0d:6a:30:e5:
98:9e:bd:0b:c0:09:4f:35:69:d6:09:51:7d:7c:04:fd:ee:23:
50:35:28:85:b3:63:2b:2d:d3:a3:a5:57:1e:b7:fc:f9:f1:39:
22:be:27:dc:37:9e:f6:13:6b:42:1a:ac:fc:07:c4:39:99:12:
d8:ba:c0:8c:44:e6:c6:37:26:6c:c3:63:f1:a6:23:12:d1:06:
e1:a3:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:56 2026 by rpki-client