Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aXLV89y3m3i4lRqNhdUT5vz3hx8.roa
File: aXLV89y3m3i4lRqNhdUT5vz3hx8.roa (raw, json)
Hash identifier: YpKuckq+J7QMRe7PfyBvSImMKLFYbUBh3bHB/0hxb28=
Subject key identifier: 69:72:D5:F3:DC:B7:9B:78:B8:95:1A:8D:85:D5:13:E6:FC:F7:87:1F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F90A49EC08865433502CFF609605A30FA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aXLV89y3m3i4lRqNhdUT5vz3hx8.roa
Signing time: Thu 23 Jul 2026 20:22:15 +0000
ROA not before: Thu 23 Jul 2026 20:22:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49453
IP address blocks: 87.83.80.0/22 maxlen: 24
212.74.16.0/22 maxlen: 24
212.135.24.0/22 maxlen: 22
212.135.104.0/22 maxlen: 22
212.212.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:a4:9e:c0:88:65:43:35:02:cf:f6:09:60:5a:30:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 20:22:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6972d5f3dcb79b78b8951a8d85d513e6fcf7871f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:1d:7b:e4:a6:68:f6:c1:bb:aa:2f:e5:06:
f2:e1:73:ae:fa:ab:c9:60:7a:a5:a4:d5:29:fe:d2:
59:43:ca:29:5c:cd:16:d4:73:aa:26:f8:93:f0:02:
d9:f8:40:34:ab:50:dc:c3:65:1b:f1:fb:c4:23:42:
8c:5e:40:5c:66:f6:2c:13:5f:52:19:9d:5d:aa:50:
3d:9d:2b:e1:0b:4d:26:56:66:8a:0d:ad:bd:32:c7:
43:21:24:b0:43:87:e9:52:80:2e:d1:59:e4:ce:1c:
9a:f0:48:ee:94:93:8f:4d:86:96:79:ef:69:a5:99:
ad:e3:74:07:69:26:31:fd:9c:99:73:26:3a:e8:2c:
b1:1d:6f:b7:61:4b:69:ca:14:62:38:bc:16:8f:f6:
3b:5f:b2:aa:fc:48:45:8f:7e:86:4a:97:70:99:fe:
74:8e:81:f8:82:2f:47:b1:3d:ba:d2:4f:ec:e1:bf:
5f:c1:1b:06:d3:03:91:6b:0c:ca:b9:95:9e:41:00:
cb:6a:3f:9d:de:a1:56:c3:14:39:08:d5:a1:04:d2:
66:63:9a:4e:87:6d:da:41:d1:25:14:86:c5:58:66:
a2:d9:77:9d:2a:3f:be:14:bc:be:dd:8b:af:96:5f:
25:ef:0b:ab:e5:46:ed:fc:25:97:0b:ce:98:c2:92:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:72:D5:F3:DC:B7:9B:78:B8:95:1A:8D:85:D5:13:E6:FC:F7:87:1F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aXLV89y3m3i4lRqNhdUT5vz3hx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.80.0/22
212.74.16.0/22
212.135.24.0/22
212.135.104.0/22
212.212.28.0/22
Signature Algorithm: sha256WithRSAEncryption
68:97:5b:6f:56:24:6f:45:d3:8a:02:23:43:dd:df:02:fd:95:
79:12:4e:9a:be:9f:9e:b2:0c:7d:b4:03:a1:ea:bf:98:fc:e5:
82:bb:52:f5:c6:3b:12:49:95:a8:10:ae:82:65:a3:2f:9f:4d:
5f:61:40:80:69:6a:fb:d9:35:d0:55:51:58:5b:b9:97:05:96:
04:7a:ae:d7:ac:9c:f4:15:ad:97:6a:99:e5:51:8e:7e:9a:ff:
84:ca:a5:2c:a3:b8:e1:7e:54:8a:61:e4:a1:25:74:d6:cb:96:
cf:14:93:1c:02:5e:9b:3a:e6:5a:15:96:08:db:9a:75:08:9b:
1c:11:3c:22:03:e0:1a:c4:72:21:3b:f4:fc:11:6b:b0:f1:5d:
9d:eb:11:59:6b:18:86:46:2a:cf:f7:7a:82:3d:50:56:a0:36:
69:c3:44:af:bc:cf:d7:08:5d:c3:e6:9b:25:f4:c0:1c:14:65:
e4:61:58:b6:42:73:ed:59:17:1f:4e:2f:8e:e3:ab:70:41:a4:
4a:06:a4:28:ef:8b:05:7c:3c:bf:4a:99:b9:5c:84:4d:80:6e:
fc:08:64:8e:d3:2e:f1:19:18:dc:7f:09:31:e0:16:f9:ab:86:
7e:24:03:63:9b:14:0b:a2:41:7d:62:21:1f:88:19:25:66:1d:
9d:ba:9d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:01:09 2026 by rpki-client