Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ajnM59px1xKoCjsoHkz4yj0zdCg.roa
File: ajnM59px1xKoCjsoHkz4yj0zdCg.roa (raw, json)
Hash identifier: LaFf0UBmRIhnf9sFUyPd11i/YEvjyasZgZpz2CnVrrk=
Subject key identifier: 6A:39:CC:E7:DA:71:D7:12:A8:0A:3B:28:1E:4C:F8:CA:3D:33:74:28
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A10B036E84353BDD963EF27B17F5558BFD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ajnM59px1xKoCjsoHkz4yj0zdCg.roa
Signing time: Mon 05 Oct 2026 07:42:16 +0000
ROA not before: Mon 05 Oct 2026 07:42:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 87.86.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:03:6e:84:35:3b:dd:96:3e:f2:7b:17:f5:55:8b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 5 07:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a39cce7da71d712a80a3b281e4cf8ca3d337428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:67:83:8e:fa:95:ca:42:b2:13:8d:98:e2:
a5:72:67:7d:fd:2c:67:0a:21:38:ed:dc:db:3e:a2:
9f:20:f5:94:f5:6d:67:55:f0:96:24:59:30:81:fd:
f8:b6:ab:d9:3e:f5:9e:c9:7a:99:42:3b:a2:46:71:
73:1c:76:af:e9:a2:65:86:c6:a4:0c:88:61:8e:0e:
f2:08:e7:b5:76:4a:24:80:ac:d4:e3:1b:30:03:5d:
7f:21:70:2a:62:47:bc:ea:5b:e7:62:c9:ce:be:14:
0c:c4:f2:69:63:85:26:5d:31:b7:b4:7b:e9:9e:0e:
5c:0f:c3:4a:ef:ce:ce:c6:1e:e0:b9:c7:4f:28:37:
5e:5b:ae:5a:0b:0f:95:99:e3:b6:83:95:16:13:ab:
92:4b:3d:36:45:c2:a7:b1:ec:8a:48:8c:81:d4:84:
93:da:6b:6d:a0:41:22:97:f4:57:a5:9c:bf:57:c6:
26:3b:ba:41:12:33:17:54:37:9e:e6:cd:4e:25:fd:
98:1d:ee:98:73:f7:1d:e6:0b:e7:c5:63:24:b9:44:
65:1e:6b:fe:93:69:a0:e2:dd:47:ff:a2:70:e2:e7:
ee:4b:09:23:93:94:d9:c8:bb:d5:6f:6f:7f:4c:1b:
e7:77:dc:85:fe:2d:73:91:b7:e9:0f:ab:2a:10:8e:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:CC:E7:DA:71:D7:12:A8:0A:3B:28:1E:4C:F8:CA:3D:33:74:28
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ajnM59px1xKoCjsoHkz4yj0zdCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.37.0/24
Signature Algorithm: sha256WithRSAEncryption
75:39:17:c4:bd:da:5f:49:82:2b:f2:af:2f:10:2b:32:99:89:
95:06:d1:37:4a:8a:8f:b1:fb:ed:b3:3a:fe:bd:40:fb:5d:cc:
3d:9f:57:76:ed:cd:78:47:a9:5d:48:07:54:bf:35:cb:d2:78:
8d:30:ce:33:4f:f2:55:20:dd:95:11:2c:52:9c:51:2c:5f:f1:
1c:5c:ee:e9:2e:56:69:2a:d8:b3:71:38:ce:d9:d2:f4:77:34:
ec:ef:d5:3b:e2:8e:88:5e:79:8e:6d:fd:7d:eb:42:e3:c7:5f:
a4:ce:03:3a:0d:0d:9c:a0:38:18:f6:a1:4f:80:c5:8c:d2:ea:
4f:77:a9:1a:18:24:8b:7b:af:7a:5d:e5:64:26:88:d1:b6:de:
22:0a:f3:32:88:aa:89:82:e5:7b:2c:7d:2e:10:ba:72:07:67:
90:d8:1a:bb:9a:98:77:38:51:62:6f:67:3f:85:b4:d5:aa:75:
66:cc:f1:5f:fb:5f:5a:0d:7d:32:3d:ee:ae:3d:c0:8d:be:f5:
a8:e2:b7:fe:ac:79:06:e2:e4:ab:e9:a1:7b:a6:a4:b1:0c:13:
ed:dd:e8:df:9e:78:de:50:40:f7:72:9a:04:c4:d7:05:f5:e3:
39:a0:46:6e:07:59:f0:92:3b:75:95:49:ff:9a:87:fe:05:2a:
f0:d3:d8:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaELA26ENTvdlj7yexf1VYv9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA1MDc0MjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTM5Y2NlN2RhNzFkNzEyYTgwYTNiMjgxZTRjZjhjYTNkMzM3NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWZng476lcpCshONmOKlcmd9/Sxn
CiE47dzbPqKfIPWU9W1nVfCWJFkwgf34tqvZPvWeyXqZQjuiRnFzHHav6aJlhsak
DIhhjg7yCOe1dkokgKzU4xswA11/IXAqYke86lvnYsnOvhQMxPJpY4UmXTG3tHvp
ng5cD8NK787Oxh7gucdPKDdeW65aCw+VmeO2g5UWE6uSSz02RcKnseyKSIyB1IST
2mttoEEil/RXpZy/V8YmO7pBEjMXVDee5s1OJf2YHe6Yc/cd5gvnxWMkuURlHmv+
k2mg4t1H/6Jw4ufuSwkjk5TZyLvVb29/TBvnd9yF/i1zkbfpD6sqEI7I4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGo5zOfacdcSqAo7KB5M+Mo9M3QoMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvYWpuTTU5cHgxeEtvQ2pzb0hrejR5ajB6ZENnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1YlMA0G
CSqGSIb3DQEBCwUAA4IBAQB1ORfEvdpfSYIr8q8vECsymYmVBtE3SoqPsfvtszr+
vUD7Xcw9n1d27c14R6ldSAdUvzXL0niNMM4zT/JVIN2VESxSnFEsX/EcXO7pLlZp
KtizcTjO2dL0dzTs79U74o6IXnmObf1960Ljx1+kzgM6DQ2coDgY9qFPgMWM0upP
d6kaGCSLe696XeVkJojRtt4iCvMyiKqJguV7LH0uELpyB2eQ2Bq7mph3OFFib2c/
hbTVqnVmzPFf+19aDX0yPe6uPcCNvvWo4rf+rHkG4uSr6aF7pqSxDBPt3ejfnnje
UED3cpoExNcF9eM5oEZuB1nwkjt1lUn/mof+BSrw09hl
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:37 2026 by rpki-client