Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/c9AaO1sptaV3_GHK762IkFyxT48.roa
File: c9AaO1sptaV3_GHK762IkFyxT48.roa (raw, json)
Hash identifier: C3oGRQ+APrla2DwBZ+3UTKh66s6C81qFlrjlnbvIqyM=
Subject key identifier: 73:D0:1A:3B:5B:29:B5:A5:77:FC:61:CA:EF:AD:88:90:5C:B1:4F:8F
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A186FFB5CE36881F3B6687BA38B904E380
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/c9AaO1sptaV3_GHK762IkFyxT48.roa
Signing time: Thu 29 Oct 2026 09:31:07 +0000
ROA not before: Thu 29 Oct 2026 09:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202736
IP address blocks: 87.192.86.0/24 maxlen: 24
87.192.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ff:b5:ce:36:88:1f:3b:66:87:ba:38:b9:04:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Oct 29 09:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73d01a3b5b29b5a577fc61caefad88905cb14f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:8a:9d:fa:e6:85:c4:c6:d5:18:95:dc:87:
1c:45:03:bc:e7:9c:7b:36:a2:b1:12:15:af:4c:d3:
55:e4:41:f1:bb:6a:f2:c4:6c:d4:fb:94:94:e4:41:
bd:55:f9:b8:ea:12:50:0a:42:bd:a7:13:ac:2c:4d:
91:cc:a3:08:a8:3f:8f:49:da:a4:fa:84:0c:4a:44:
24:07:fd:fd:f9:13:29:e8:27:a8:7c:6b:f3:7e:46:
67:4d:57:07:a8:21:08:f3:3f:45:08:05:00:76:57:
e5:47:3d:b4:19:ef:de:9b:9c:94:bb:da:75:27:db:
5b:7f:7e:83:4e:a9:53:c4:3e:cc:f8:26:18:0a:44:
51:a8:ca:20:38:23:61:c6:ba:36:4f:99:17:85:a5:
da:c5:d9:09:fd:90:7e:a5:95:b0:d1:f2:72:3e:6f:
f6:6c:d9:0c:35:2a:1c:d8:0e:6e:1a:4b:65:f2:3b:
5c:bd:54:83:b6:3f:fe:6f:67:5b:09:d6:96:0a:ce:
53:59:4a:de:b7:3c:b6:92:13:03:46:d5:5b:10:08:
51:ed:2d:28:56:74:d7:b1:b7:7f:94:1b:40:b8:32:
85:61:54:7f:75:87:13:e3:58:45:74:6d:45:65:bf:
79:44:98:6e:b8:9a:78:c6:34:d8:d6:d4:50:12:a3:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:1A:3B:5B:29:B5:A5:77:FC:61:CA:EF:AD:88:90:5C:B1:4F:8F
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/c9AaO1sptaV3_GHK762IkFyxT48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.86.0/24
87.192.219.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:65:03:74:93:f5:86:7d:14:28:de:3c:e5:3f:f3:5a:2d:18:
19:3d:14:c9:4b:d6:52:df:55:2c:5e:be:e7:bc:50:61:c8:17:
4f:e0:9d:35:07:35:94:78:eb:14:2e:e4:1c:1d:c5:46:92:44:
e7:cd:c1:6f:2e:26:dc:4d:73:75:be:f6:d7:57:7e:5f:e6:77:
04:5f:4a:1e:19:9f:e3:e0:b0:3e:01:2b:b6:b8:2f:b4:e0:34:
68:4b:99:21:1d:59:41:4d:e6:f8:1e:4d:80:f8:49:55:cd:e6:
b7:d6:45:e7:52:75:85:c1:2f:9c:09:b0:be:65:95:33:b2:76:
b8:3e:58:85:ca:8c:5b:c2:06:7e:f7:0b:64:70:7a:fc:dd:bf:
cf:ff:c6:2d:9b:9b:90:b0:14:0f:fe:45:ff:f2:31:56:6e:f1:
b4:5b:15:17:1f:6d:7d:5f:8e:91:e5:20:c5:23:28:dc:60:43:
fb:8a:8e:4d:08:2c:81:86:3e:71:88:3e:e8:89:0f:36:f2:99:
a8:48:f9:fd:fd:82:6b:14:59:ae:ea:38:57:a2:3c:ba:4f:a2:
db:e4:75:d6:8f:5b:72:d5:2e:91:70:6b:42:20:af:36:b3:cf:
9b:65:b1:37:de:68:95:60:7d:5d:e8:be:d1:78:e4:df:52:45:
e3:7c:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:51:28 2026 by rpki-client