Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pkSzbMh9aa3iCjO5Q_QeUeHf04Q.roa
File: pkSzbMh9aa3iCjO5Q_QeUeHf04Q.roa (raw, json)
Hash identifier: r46J98+Gm0KCfNqWwnSMXzO2pRXBUttxhSermNQ/Aps=
Subject key identifier: A6:44:B3:6C:C8:7D:69:AD:E2:0A:33:B9:43:F4:1E:51:E1:DF:D3:84
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06B52C66121833F0523C5E4C61EAA233D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pkSzbMh9aa3iCjO5Q_QeUeHf04Q.roa
Signing time: Fri 04 Sep 2026 07:29:41 +0000
ROA not before: Fri 04 Sep 2026 07:29:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154603
IP address blocks: 87.82.254.0/24 maxlen: 24
87.83.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:52:c6:61:21:83:3f:05:23:c5:e4:c6:1e:aa:23:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 07:29:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a644b36cc87d69ade20a33b943f41e51e1dfd384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:72:61:4a:f9:ef:fc:d0:5d:3f:30:b5:7b:
b4:f0:f9:a1:33:28:b2:db:62:a8:d7:bf:12:cd:ef:
6a:6d:f2:50:cf:4b:fe:b7:01:ff:6c:4b:ca:b3:38:
f8:4e:09:9b:8c:ec:44:07:d1:a2:75:3d:ea:af:d7:
e8:6a:42:ff:eb:d6:71:23:0b:00:11:62:e5:31:b8:
f8:df:57:f2:77:62:be:42:4b:27:81:aa:cc:96:16:
42:ef:b7:c1:7a:0a:2d:a0:ca:ee:c9:1b:00:95:ad:
0d:b0:bc:64:a1:7c:50:4f:84:74:fd:87:d4:8c:ec:
f2:90:a7:40:19:95:16:59:48:4d:ff:26:cd:0c:7f:
af:d3:6d:d6:b9:a4:92:cb:93:83:db:b2:e0:1a:9e:
5a:44:8a:4f:62:3e:72:d2:cf:86:54:8e:79:1d:4a:
2b:9b:b3:92:1d:1f:a9:64:16:55:58:4c:87:eb:c1:
66:58:af:24:d7:71:fe:a3:c9:d5:be:8c:e2:88:70:
21:5a:61:67:1b:3f:dd:2d:f4:65:5b:c6:53:c9:40:
ce:52:b8:53:e4:e0:3c:1d:72:60:55:36:e7:19:be:
03:90:96:1f:33:f2:11:62:4f:bb:d5:4d:7a:e3:b9:
f0:3f:08:df:64:6b:dd:72:97:a3:a9:33:2c:69:da:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:B3:6C:C8:7D:69:AD:E2:0A:33:B9:43:F4:1E:51:E1:DF:D3:84
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pkSzbMh9aa3iCjO5Q_QeUeHf04Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.254.0/24
87.83.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:73:33:24:c3:50:c1:c7:32:8f:15:48:07:06:ec:98:a0:af:
49:a5:20:8b:16:55:cb:8b:df:5a:11:64:99:4b:e0:80:58:44:
92:fb:b2:6d:9a:b8:da:9b:2b:4d:70:2c:4d:cc:9a:35:d1:43:
be:e2:76:17:8c:82:00:d9:ac:af:9b:50:36:8a:e4:91:e8:dd:
ea:64:67:45:c5:76:e7:ff:ef:32:48:d6:cc:96:68:09:8c:1b:
9d:3d:93:3f:d5:7a:30:da:35:2b:69:87:53:3a:bd:33:a9:2e:
97:52:fa:44:2e:24:40:31:aa:85:f3:60:ad:c7:02:7f:34:1a:
2a:1e:4e:18:6f:0e:4c:c5:a2:5f:de:ff:bf:23:76:f6:36:f7:
de:94:c4:65:42:b7:63:b7:ad:d0:9a:ca:94:da:e7:22:d2:bd:
ef:29:51:07:8f:64:cd:7b:ad:6e:5c:7f:47:27:2e:50:24:70:
e8:cf:be:13:f8:e8:83:b7:d5:dc:0f:1d:67:79:6e:9a:0f:57:
1b:24:97:70:8f:6c:5c:9d:ee:c7:7a:4d:8f:dc:74:4a:8f:af:
79:ce:8c:f2:1f:65:22:de:81:ab:47:1a:0c:39:0f:c6:f8:54:
19:aa:f3:42:cd:bb:cd:f3:62:35:a2:de:22:63:4d:d3:eb:3c:
c3:a2:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:29 2026 by rpki-client