Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dm-fHu3tn57YXjb8badgVMmIGe4.roa
File: dm-fHu3tn57YXjb8badgVMmIGe4.roa (raw, json)
Hash identifier: JjhKPWc0arBF1658iiDTOY1iR7bx9EUh6zkR1X/bw0Q=
Subject key identifier: 76:6F:9F:1E:ED:ED:9F:9E:D8:5E:36:FC:6D:A7:60:54:C9:88:19:EE
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EFF7C99E5733844CFF9EE6A4057AB1B22
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dm-fHu3tn57YXjb8badgVMmIGe4.roa
Signing time: Thu 25 Jun 2026 15:53:36 +0000
ROA not before: Thu 25 Jun 2026 15:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50049
IP address blocks: 87.232.102.0/24 maxlen: 24
87.232.104.0/24 maxlen: 24
87.232.105.0/24 maxlen: 24
87.232.110.0/24 maxlen: 24
87.232.117.0/24 maxlen: 24
87.232.122.0/24 maxlen: 24
87.232.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:7c:99:e5:73:38:44:cf:f9:ee:6a:40:57:ab:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 25 15:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=766f9f1eeded9f9ed85e36fc6da76054c98819ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:78:75:14:55:c1:e0:21:bb:e8:db:8d:3e:
ad:5e:3c:0a:75:c5:55:41:4e:d4:cc:74:99:72:08:
e0:b6:fd:e6:2a:e7:35:d2:6d:bb:3b:82:bb:05:06:
8b:91:1c:14:17:fa:fc:b7:28:91:7d:36:e6:e8:98:
dd:b0:1c:89:dd:ad:ba:69:4d:6d:1b:55:c6:e5:09:
d9:8f:46:ca:28:2c:e4:e3:29:c7:3b:b9:dd:7e:7d:
e0:a1:e6:95:43:91:88:fb:68:14:3f:46:49:13:a8:
12:00:5b:90:d0:3e:c0:65:d4:0e:9b:f0:9d:3a:a4:
2b:44:27:82:51:25:5a:3e:16:08:53:82:34:35:2c:
e0:f1:61:55:7e:4d:d1:2f:6f:b8:dc:8f:0f:28:2a:
f2:1d:5c:32:cb:72:95:31:4c:29:78:35:ad:0a:f4:
92:2d:29:d7:da:ab:9b:97:b0:b3:f5:1a:cd:6e:ec:
85:7f:71:ae:f8:d5:23:bf:21:b4:1d:d0:bc:85:73:
3e:81:5b:03:0a:33:b1:76:0b:ee:ec:69:eb:3b:fb:
7f:7a:36:34:71:ff:35:67:cb:18:c0:3f:30:49:35:
b6:c9:da:07:e5:d6:c3:43:03:1b:ae:e0:3c:a0:24:
dd:c1:db:aa:f2:dc:4d:58:d0:b3:40:f0:9d:41:1d:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:9F:1E:ED:ED:9F:9E:D8:5E:36:FC:6D:A7:60:54:C9:88:19:EE
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/dm-fHu3tn57YXjb8badgVMmIGe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.102.0/24
87.232.104.0/23
87.232.110.0/24
87.232.117.0/24
87.232.122.0/24
87.232.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:6e:be:ef:58:a6:dc:e7:fa:33:96:2c:e8:ea:f0:cb:03:f1:
5d:ed:a6:a1:0f:36:30:62:c8:32:50:99:80:e6:82:5e:fe:30:
bc:02:bb:c8:f1:6d:5b:e1:d1:e7:df:52:d9:4c:5b:01:43:f3:
a0:21:78:31:6d:44:bc:0e:55:d1:e9:c5:07:78:59:23:17:03:
9c:3e:c2:48:59:d9:4b:7f:aa:6e:59:77:49:c5:b5:44:0e:6c:
b5:29:bc:6f:fa:9a:c5:61:d8:d0:f3:9e:f6:9c:fa:bd:ca:1b:
fc:d3:a2:c0:2e:88:09:bf:56:28:5d:a8:32:41:7a:1b:93:52:
25:52:dd:fa:95:89:16:23:93:5e:c2:95:8b:ba:6d:79:57:b3:
9b:e2:e1:e6:0a:b2:4b:ae:07:0a:41:25:e0:bb:6b:1c:6f:d6:
d4:05:32:9f:bd:8c:7d:27:26:3a:26:49:5c:9d:6e:14:2b:3e:
d7:a5:2f:a4:b8:e7:18:2e:04:5c:7d:30:87:77:ce:0a:b0:c3:
21:91:b6:13:28:6a:30:a2:dc:3e:0a:52:d4:66:77:6c:c4:4d:
e1:b8:c6:19:4e:f5:18:67:55:3d:44:58:0e:d2:27:bd:90:4a:
b8:3e:87:52:67:45:51:f2:32:5d:ec:89:0d:f9:2f:29:46:bb:
ec:3c:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:24 2026 by rpki-client