Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rIrQgI7wBn9sWIr3ibdqkL8d9P8.roa
File: rIrQgI7wBn9sWIr3ibdqkL8d9P8.roa (raw, json)
Hash identifier: FQfwqQ8SpBSVMQvv5AG9As1KQsaXRBkVA7rptysfjW4=
Subject key identifier: AC:8A:D0:80:8E:F0:06:7F:6C:58:8A:F7:89:B7:6A:90:BF:1D:F4:FF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8EE3172184A4C62F4FE5A7B2857CE138
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rIrQgI7wBn9sWIr3ibdqkL8d9P8.roa
Signing time: Thu 23 Jul 2026 12:11:15 +0000
ROA not before: Thu 23 Jul 2026 12:11:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197346
IP address blocks: 87.86.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:e3:17:21:84:a4:c6:2f:4f:e5:a7:b2:85:7c:e1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 12:11:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac8ad0808ef0067f6c588af789b76a90bf1df4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:27:af:70:b2:96:a1:b8:ec:5b:93:d0:27:
ea:3f:76:37:43:00:cc:1c:82:56:ac:cf:8d:e6:99:
c0:9b:71:a1:f9:05:27:10:aa:fa:62:a9:16:dd:2d:
34:b3:20:64:a4:5f:07:fd:63:68:a3:23:66:80:5b:
92:a8:60:1f:20:8a:e7:73:99:98:b8:a6:53:a9:4b:
6e:5a:4d:3d:bc:32:fb:86:90:8e:5b:82:59:de:80:
56:53:e8:dd:f2:ef:49:f6:cf:76:92:73:3d:ee:8a:
1c:4c:4e:21:e8:62:8e:ba:6f:b9:c6:d6:6e:d4:50:
6f:b2:b7:87:a7:73:a3:aa:aa:5b:7e:f8:54:a7:0f:
1f:62:be:b0:d3:a2:d5:84:3d:69:10:e9:69:c9:0e:
22:00:7f:4e:01:10:d5:32:1d:e8:fe:01:c6:b1:a2:
00:78:59:45:16:de:9c:01:a1:1e:1c:09:d9:86:ce:
c4:7d:70:4e:73:4b:92:5e:de:10:09:67:25:21:82:
f4:ad:4b:d5:dd:e8:96:46:08:cb:d8:10:44:08:72:
f4:38:01:e1:a7:2f:46:34:8a:5f:66:c0:df:58:9d:
23:54:1b:37:c3:07:51:c2:94:74:c5:c1:b0:79:b5:
1e:40:21:2a:e6:3a:74:f9:b8:7d:1f:77:e3:38:11:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8A:D0:80:8E:F0:06:7F:6C:58:8A:F7:89:B7:6A:90:BF:1D:F4:FF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/rIrQgI7wBn9sWIr3ibdqkL8d9P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.80.0/24
Signature Algorithm: sha256WithRSAEncryption
24:63:d3:9b:3c:39:43:99:2c:e1:ef:f3:51:13:4b:52:c1:e9:
17:f3:47:fe:ce:24:b2:2d:eb:a4:70:66:38:1f:7d:3d:22:d6:
7c:af:c3:23:49:e2:2a:71:c0:b4:20:34:04:cc:91:0b:fe:7e:
80:33:2d:dc:ad:08:27:84:3f:87:f8:14:7f:0f:e8:a2:1b:1b:
0f:79:f1:a7:02:14:07:db:76:c8:27:55:69:a1:80:4a:e8:a0:
94:0c:25:b7:62:0d:e1:70:2e:a1:11:da:dc:f7:01:7e:48:25:
44:75:14:f8:f4:5c:50:c9:3a:81:34:d3:87:cf:42:40:12:29:
46:b7:73:47:c4:4e:ae:cf:1e:3e:7d:8f:ea:85:6e:09:0c:9c:
69:63:e8:7b:b8:b9:a8:e0:86:fa:13:c2:21:79:f2:66:e4:dc:
00:d0:2d:8c:17:2c:7a:c1:e3:76:3f:c1:70:15:16:d4:06:a1:
d0:8e:71:61:53:f1:cd:53:64:39:3e:5d:35:57:9a:6d:97:a9:
c6:d3:a4:fc:92:a2:5a:b1:67:36:81:8a:e5:8d:cb:82:fd:e1:
b6:a5:a2:99:24:3f:c0:c9:a4:8c:41:6c:0e:95:ae:4d:31:59:
c8:4e:44:ed:cb:21:a2:7f:f4:3a:32:b1:5e:ff:4a:29:a8:74:
f9:91:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:03 2026 by rpki-client