Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8TJ4IzgrvFDUUuzaZCqFUud2WfM.roa
File: 8TJ4IzgrvFDUUuzaZCqFUud2WfM.roa (raw, json)
Hash identifier: cLxt2w9/0cRvjBtg7T/6BA4pcNLpwtUvBkvcAOeLZ2s=
Subject key identifier: F1:32:78:23:38:2B:BC:50:D4:52:EC:DA:64:2A:85:52:E7:76:59:F3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A13F44A920D4C87E350B7293A403FD07E3
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8TJ4IzgrvFDUUuzaZCqFUud2WfM.roa
Signing time: Thu 15 Oct 2026 11:13:46 +0000
ROA not before: Thu 15 Oct 2026 11:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402899
IP address blocks: 87.84.206.0/24 maxlen: 24
212.134.101.0/24 maxlen: 24
212.135.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:44:a9:20:d4:c8:7e:35:0b:72:93:a4:03:fd:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 15 11:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f1327823382bbc50d452ecda642a8552e77659f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:f0:d7:2e:44:8e:9d:3d:f6:66:37:07:98:
e6:f9:9d:d6:4a:10:88:36:64:fc:ac:60:53:5f:b9:
7b:7d:d2:b0:54:be:90:66:99:fc:4a:bd:bd:0f:c1:
65:81:37:c0:f0:00:4d:0c:7f:34:48:bb:e4:1b:42:
ba:5f:16:84:a6:2f:fa:af:a4:22:b9:b4:8c:18:0c:
fb:41:c9:bb:de:92:d2:15:52:0f:ff:c3:81:be:d8:
54:11:eb:dc:03:ae:fe:3d:39:48:1a:d2:da:da:f3:
1e:a4:1f:9a:07:d3:4b:39:d9:55:6f:cd:5b:da:36:
e6:b8:69:eb:00:50:1d:47:0c:2c:58:89:ac:3e:59:
68:0e:5f:11:44:46:ba:25:ba:e0:fb:3f:af:c6:d9:
55:8c:c9:ab:82:7b:ed:c3:e4:a2:8c:85:59:89:5d:
71:1a:5c:50:02:b2:b4:05:dd:fd:a6:c6:cf:61:df:
cb:4b:e0:04:dd:10:25:2e:f4:9d:d8:36:76:dc:81:
23:77:d7:6a:13:22:f9:35:08:8d:92:3d:93:b0:6d:
76:bf:ab:d1:6a:2b:8a:e9:19:8f:e5:42:dc:9d:b0:
0d:4a:5d:53:ab:26:51:14:ce:90:75:3d:56:b3:42:
79:66:24:19:71:a4:40:10:73:de:f1:d4:4c:4a:e7:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:78:23:38:2B:BC:50:D4:52:EC:DA:64:2A:85:52:E7:76:59:F3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/8TJ4IzgrvFDUUuzaZCqFUud2WfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.206.0/24
212.134.101.0/24
212.135.193.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a3:32:c5:42:98:f7:9b:27:6b:36:80:2b:5f:c7:78:29:72:
f6:6e:83:36:3c:fc:12:2c:3c:9d:d1:30:0d:ac:d3:ed:af:19:
1b:e5:d4:85:18:9b:60:17:8d:f1:2a:7e:af:d9:80:1b:01:bd:
f4:eb:98:79:2f:3b:c2:fa:a7:6c:1e:4a:ce:46:27:58:d6:8c:
ec:43:72:65:79:64:c9:98:8d:28:ad:78:43:9f:8a:99:7d:3a:
5b:6f:e0:f2:af:ac:39:a7:d3:79:8f:5b:d8:e4:b7:4e:09:37:
ac:78:e3:a4:08:5e:5f:ae:f9:1d:3f:d8:cf:0b:e7:ce:b9:9b:
9f:83:e9:d5:bc:38:bc:61:53:33:20:ae:21:84:83:fa:a1:eb:
4d:2e:64:7b:e5:db:ac:eb:a9:c5:d6:2f:56:9d:04:bb:e4:49:
22:48:3e:dd:43:ef:ef:96:2c:ea:e9:11:50:6f:7c:80:02:db:
69:54:fb:cd:10:cb:84:7e:1f:e4:d4:e6:6d:2c:0f:81:1f:9e:
ff:2f:24:91:12:e2:17:d5:2d:92:b1:db:07:86:98:00:2d:08:
96:b8:e3:02:a3:53:7d:20:d6:10:4b:d2:f4:e1:8e:6c:13:f4:
66:41:4b:9d:40:a3:8d:a8:e3:c1:8b:af:ba:d9:2b:51:4e:8d:
24:57:8b:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaE/RKkg1Mh+NQtyk6QD/QfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDE1MTExMzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTMyNzgyMzM4MmJiYzUwZDQ1MmVjZGE2NDJhODU1MmU3NzY1OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uTw1y5Ejp099mY3B5jm+Z3WShCI
NmT8rGBTX7l7fdKwVL6QZpn8Sr29D8FlgTfA8ABNDH80SLvkG0K6XxaEpi/6r6Qi
ubSMGAz7Qcm73pLSFVIP/8OBvthUEevcA67+PTlIGtLa2vMepB+aB9NLOdlVb81b
2jbmuGnrAFAdRwwsWImsPlloDl8RREa6Jbrg+z+vxtlVjMmrgnvtw+SijIVZiV1x
GlxQArK0Bd39psbPYd/LS+AE3RAlLvSd2DZ23IEjd9dqEyL5NQiNkj2TsG12v6vR
aiuK6RmP5ULcnbANSl1TqyZRFM6QdT1Ws0J5ZiQZcaRAEHPe8dRMSufw1QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPEyeCM4K7xQ1FLs2mQqhVLndlnzMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOFRKNEl6Z3J2RkRVVXV6YVpDcUZVdWQyV2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV1TOAwQA
1IZlAwQA1IfBMA0GCSqGSIb3DQEBCwUAA4IBAQA2ozLFQpj3mydrNoArX8d4KXL2
boM2PPwSLDyd0TANrNPtrxkb5dSFGJtgF43xKn6v2YAbAb3065h5LzvC+qdsHkrO
RidY1ozsQ3JleWTJmI0orXhDn4qZfTpbb+Dyr6w5p9N5j1vY5LdOCTeseOOkCF5f
rvkdP9jPC+fOuZufg+nVvDi8YVMzIK4hhIP6oetNLmR75dus66nF1i9WnQS75Eki
SD7dQ+/vlizq6RFQb3yAAttpVPvNEMuEfh/k1OZtLA+BH57/LySREuIX1S2SsdsH
hpgALQiWuOMCo1N9INYQS9L04Y5sE/RmQUudQKONqOPBi6+62StRTo0kV4uJ
-----END CERTIFICATE-----
Generated at Tue Oct 20 02:42:19 2026 by rpki-client