Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FRVu5ygNRJtPH91biLSgChakm74.roa
File: FRVu5ygNRJtPH91biLSgChakm74.roa (raw, json)
Hash identifier: na+EbUeF4vQKXH7ym83Q9I6UNno5zlPmIgBLs/mpRbs=
Subject key identifier: 15:15:6E:E7:28:0D:44:9B:4F:1F:DD:5B:88:B4:A0:0A:16:A4:9B:BE
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CECF437FC071DA3E996A018C287B511F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FRVu5ygNRJtPH91biLSgChakm74.roa
Signing time: Wed 23 Sep 2026 15:08:04 +0000
ROA not before: Wed 23 Sep 2026 15:08:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402628
IP address blocks: 87.82.57.0/24 maxlen: 24
87.86.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:cf:43:7f:c0:71:da:3e:99:6a:01:8c:28:7b:51:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 15:08:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15156ee7280d449b4f1fdd5b88b4a00a16a49bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:b0:76:9b:d7:d6:f7:7f:26:f0:01:b7:dd:
fb:e1:36:ca:90:51:28:dc:af:d0:f7:29:d7:36:82:
4f:11:e7:ed:1f:1e:82:14:8c:bf:69:50:93:97:cc:
2f:42:1a:5b:c8:2e:d7:c3:33:65:f6:9b:30:e5:c2:
51:3b:87:fd:6b:c6:82:84:55:d6:84:9c:ef:e9:5c:
47:12:fe:6c:ec:96:29:ca:bf:3a:57:c2:a3:ef:1a:
f5:ff:ea:5c:d9:a2:20:58:ad:1c:7d:07:90:2a:23:
20:13:99:12:9f:c1:cb:85:2a:43:1c:3b:05:d4:f2:
7b:09:ea:99:0e:65:bd:a1:10:21:df:79:64:74:ce:
67:a6:82:be:88:e9:9f:7f:9b:85:a2:cc:28:20:02:
dc:ed:15:21:89:98:0d:bd:e4:fa:cd:7e:b5:39:26:
95:ec:e2:8b:68:e2:27:c7:b5:ab:41:f9:2e:41:38:
99:22:77:ad:ce:11:85:ae:44:2c:d0:0d:53:22:91:
e5:1d:32:bb:82:25:9a:0c:d5:ff:c5:5a:b0:39:c9:
81:f0:6c:a5:3c:16:4c:1e:96:b6:f4:e7:02:7b:d4:
35:64:53:ed:f8:f8:49:f8:3e:71:2e:27:ba:62:68:
8a:3d:f8:3a:a4:11:95:ac:ca:96:cb:0e:a1:fa:03:
e5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:6E:E7:28:0D:44:9B:4F:1F:DD:5B:88:B4:A0:0A:16:A4:9B:BE
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FRVu5ygNRJtPH91biLSgChakm74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.57.0/24
87.86.214.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:40:15:ff:0c:58:fc:d3:04:f8:a6:b8:5e:a6:e4:e1:93:52:
9c:dd:9a:37:b9:0f:7b:d0:35:03:af:ff:31:86:3e:52:b3:02:
b4:dc:e6:4f:02:eb:68:9b:28:d9:f4:be:9b:c3:48:bb:88:83:
60:ba:6b:83:2e:a6:7c:17:b6:fe:ca:65:be:ac:f7:b2:a3:4e:
c2:80:2a:87:33:07:d5:62:23:34:60:93:06:bc:02:07:8d:7e:
d2:97:fc:a9:91:27:38:06:83:60:e7:7c:4f:ec:86:43:d2:09:
79:09:64:ab:d2:09:49:f1:9b:9f:f8:c9:49:a3:2d:74:61:de:
12:ea:c9:40:b6:62:0f:e2:bc:a8:b1:7e:db:33:57:d4:a9:7d:
34:7a:8b:b8:53:72:14:82:14:e5:5c:c6:e5:9f:3e:77:bf:f7:
97:62:30:b6:d6:3e:9b:3a:14:da:4d:99:17:be:30:26:6c:59:
b3:00:61:37:a9:33:c2:de:79:df:ce:35:23:5d:37:fe:f1:8b:
a4:1e:2c:e3:cb:84:ad:44:9f:2e:6e:2c:20:1c:33:55:22:36:
08:12:cc:b6:8c:b5:e6:d4:f0:2c:5f:a5:01:ef:64:68:c9:52:
7a:98:c1:be:03:3b:19:bf:38:0e:8b:68:5e:27:5f:43:84:80:
14:5a:95:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:06 2026 by rpki-client