Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fBx95NdLhHAgIv0ipCr-V0Y9FrE.roa
File: fBx95NdLhHAgIv0ipCr-V0Y9FrE.roa (raw, json)
Hash identifier: vATa1A0Gq8smD/Dwo9KB9U23Y2PjkPmjAAtlpiLGnFA=
Subject key identifier: 7C:1C:7D:E4:D7:4B:84:70:20:22:FD:22:A4:2A:FE:57:46:3D:16:B1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A137BC5424330A106FB47C44B82BD07ABA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fBx95NdLhHAgIv0ipCr-V0Y9FrE.roa
Signing time: Wed 14 Oct 2026 00:07:31 +0000
ROA not before: Wed 14 Oct 2026 00:07:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 87.83.3.0/24 maxlen: 24
87.84.235.0/24 maxlen: 24
87.85.70.0/24 maxlen: 24
195.40.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:bc:54:24:33:0a:10:6f:b4:7c:44:b8:2b:d0:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 14 00:07:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c1c7de4d74b84702022fd22a42afe57463d16b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:74:4c:7c:8c:42:59:79:d5:81:6c:89:f3:
19:09:57:31:c6:5d:e3:c1:16:c5:65:b7:1f:49:64:
1a:d1:0f:17:86:ac:e8:61:e7:80:47:c1:8d:e7:2b:
07:01:c4:67:e0:04:47:fd:50:ef:ed:18:de:82:66:
c2:d1:ec:8b:d4:92:15:eb:a3:06:45:8e:da:94:f5:
27:25:9a:12:6a:20:45:fa:9d:0d:ef:81:67:f3:e5:
42:3b:05:7f:e2:e8:c2:ad:5a:98:a9:4b:e8:c2:b9:
8e:72:e3:ff:2f:93:1b:1a:89:cc:ed:44:65:dc:86:
7a:9c:6e:f7:37:80:57:ac:d3:db:f7:9b:b9:d7:78:
2b:e6:60:6b:41:c3:b9:5a:c8:8f:a2:95:bc:6a:dd:
9f:eb:d4:48:c5:23:e3:05:00:24:12:f1:ec:46:73:
32:29:80:63:c7:e2:88:1c:3d:6a:a4:b7:2e:ef:76:
e2:ac:c3:4f:1b:a6:9a:6a:8f:e3:0c:74:3b:de:87:
8b:5d:8f:41:5b:9a:55:cb:6d:9f:b3:7b:ee:7d:82:
78:da:7b:39:7c:2d:76:8b:f1:69:0b:86:05:ba:fb:
fb:70:b9:d2:32:87:7e:2c:a2:4a:51:ee:f2:a0:91:
43:1c:af:db:ae:50:8c:b4:c3:47:79:39:8e:27:35:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1C:7D:E4:D7:4B:84:70:20:22:FD:22:A4:2A:FE:57:46:3D:16:B1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fBx95NdLhHAgIv0ipCr-V0Y9FrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.3.0/24
87.84.235.0/24
87.85.70.0/24
195.40.159.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5f:62:c3:e8:81:59:97:e1:5f:da:0b:7f:ac:da:5b:e8:2c:
43:72:5e:2c:c6:9e:1f:4e:85:95:98:9c:08:c8:59:98:1f:0f:
c0:b1:c2:d9:a7:14:8f:e1:70:e7:c7:cd:65:37:a2:2a:76:92:
55:72:80:a9:21:aa:2e:c9:0e:10:f5:c5:b7:b6:58:61:f7:81:
67:16:27:4d:f5:aa:93:4a:06:d2:3e:62:eb:24:b5:31:9b:18:
60:6d:f5:28:04:59:41:b8:3a:c3:de:c0:35:58:3f:56:c6:7a:
45:36:ba:c7:3f:a2:41:cc:27:b8:82:b1:95:08:f2:0b:e3:f7:
87:03:cc:97:c9:9d:5c:e9:9d:4a:3f:7b:6e:a2:30:23:f6:0f:
1e:a5:2b:29:d4:25:fe:76:15:75:26:f3:e4:92:31:d3:63:0a:
89:7b:3e:04:c2:67:cb:2c:c3:bb:67:a2:4f:56:6d:37:d6:83:
69:ec:3d:ec:52:38:ab:a6:f4:1f:a1:c4:ae:a2:85:9d:6f:80:
aa:32:e7:22:2c:5e:5f:a7:14:89:17:9e:e1:c6:f7:34:73:6c:
59:84:fd:cf:08:73:98:f8:bf:1d:e2:6b:d2:7c:4a:c0:cf:7b:
73:90:cd:68:85:f7:d1:92:cc:25:4f:2b:b0:ae:79:fc:5b:26:
df:93:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:15:18 2026 by rpki-client