Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QAAdplwq-Xqbo6Jz6OVu9kSxSyU.roa
File: QAAdplwq-Xqbo6Jz6OVu9kSxSyU.roa (raw, json)
Hash identifier: cCB++rJw7WuuYyWmsCM0Hs7B0eRrBKhYtZ35eL7kMn8=
Subject key identifier: 40:00:1D:A6:5C:2A:F9:7A:9B:A3:A2:73:E8:E5:6E:F6:44:B1:4B:25
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0CDBD9367914BCB0ADB661E822B1015A2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QAAdplwq-Xqbo6Jz6OVu9kSxSyU.roa
Signing time: Wed 23 Sep 2026 10:09:08 +0000
ROA not before: Wed 23 Sep 2026 10:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140666
IP address blocks: 87.84.0.0/20 maxlen: 24
87.84.32.0/20 maxlen: 24
87.84.80.0/20 maxlen: 24
87.84.160.0/20 maxlen: 24
212.212.64.0/18 maxlen: 24
217.204.104.0/23 maxlen: 23
217.204.108.0/23 maxlen: 23
217.204.136.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:bd:93:67:91:4b:cb:0a:db:66:1e:82:2b:10:15:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 23 10:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40001da65c2af97a9ba3a273e8e56ef644b14b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:2c:33:ac:ad:78:56:4c:33:9f:70:59:66:
c1:1e:3a:88:2a:f6:9b:ff:e9:87:00:96:5d:09:0d:
d1:42:80:ae:c6:82:62:73:1d:4c:f0:df:f6:3f:7c:
77:b5:f6:d0:ad:19:43:4f:13:3e:a8:cf:f3:ff:ec:
8d:b4:17:10:f7:cb:a9:8c:0b:74:ea:88:1f:e2:02:
7b:df:ac:f4:d0:d8:0a:92:14:e6:11:2e:9a:85:c6:
82:1a:67:3c:86:40:4a:c6:5e:7c:09:b7:a0:06:15:
52:52:82:37:80:60:d2:da:b2:8c:5d:da:16:df:91:
14:ee:83:77:fb:16:9a:75:24:fb:20:94:70:5f:a4:
ed:d9:16:de:b9:eb:16:3e:62:c8:ba:a8:bd:1f:18:
ba:74:ac:43:f5:e0:cd:96:57:b0:bb:4f:59:db:19:
25:b4:e8:ab:53:76:30:ed:df:79:06:2d:6d:8b:66:
ed:b8:52:2d:20:ce:71:c1:ab:45:4d:44:a3:29:70:
02:71:8f:ea:37:27:2a:d7:5e:b3:ad:85:1b:f0:45:
60:6f:77:ff:97:52:de:92:24:ce:6f:70:25:55:4a:
af:4e:d2:14:80:1d:2d:ec:d3:99:b3:fc:e8:0c:6f:
77:46:38:ab:28:87:14:0d:a8:1c:2b:ff:1b:cc:10:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:00:1D:A6:5C:2A:F9:7A:9B:A3:A2:73:E8:E5:6E:F6:44:B1:4B:25
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QAAdplwq-Xqbo6Jz6OVu9kSxSyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.0.0/20
87.84.32.0/20
87.84.80.0/20
87.84.160.0/20
212.212.64.0/18
217.204.104.0/23
217.204.108.0/23
217.204.136.0/23
Signature Algorithm: sha256WithRSAEncryption
77:df:2a:38:2f:66:85:bb:74:81:f7:30:ec:21:8f:51:92:f1:
c7:b9:0c:67:b0:91:a6:fc:7d:51:b6:f4:30:ad:3f:11:2a:dc:
94:16:31:e2:c8:e6:6f:52:6a:7e:e2:68:bc:b6:e0:cf:1e:5d:
2d:de:bc:aa:48:84:f1:6e:98:00:00:f3:67:9f:1f:f2:bf:b1:
ee:6e:3f:86:61:07:78:e7:c7:fd:f7:d8:af:fc:5e:a0:5c:0b:
ab:c7:b7:e3:90:6f:46:39:b2:00:dc:c2:b5:0c:9c:7e:ba:06:
49:91:d7:4b:b1:e6:de:0a:67:fe:14:87:53:15:92:22:26:e2:
14:b1:82:bc:b9:43:be:d6:99:7e:26:0c:9d:a2:61:a9:8e:03:
62:30:df:52:43:e7:e5:0d:55:a5:24:03:36:ac:14:ba:33:64:
fc:c8:62:30:34:5e:7d:92:75:ff:03:64:f4:90:ed:66:c2:70:
18:47:57:59:15:86:53:47:37:8a:c8:56:08:ef:9f:1e:a0:6c:
9a:92:33:1f:dc:81:cd:fc:8f:b8:9b:37:21:0d:75:cd:1b:6c:
03:07:5e:23:0a:8a:8b:bf:c7:b7:56:99:4c:68:b1:d9:1f:a9:
a7:4f:68:62:94:8e:f3:21:ac:19:51:34:5f:e3:5b:52:68:c6:
be:24:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:03 2026 by rpki-client