Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dN-_PbaAVEJCwbcQjg33pTiEevg.roa
File: dN-_PbaAVEJCwbcQjg33pTiEevg.roa (raw, json)
Hash identifier: l3VZv/xPOMm3YFSpNUPC+LPavxH0sZuo23reY4Qj8wU=
Subject key identifier: 74:DF:BF:3D:B6:80:54:42:42:C1:B7:10:8E:0D:F7:A5:38:84:7A:F8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019E49A2F847BFE780FEF904E0C5BB57DD7C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dN-_PbaAVEJCwbcQjg33pTiEevg.roa
Signing time: Thu 21 May 2026 08:24:37 +0000
ROA not before: Thu 21 May 2026 08:24:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215428
IP address blocks: 87.120.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:49:a2:f8:47:bf:e7:80:fe:f9:04:e0:c5:bb:57:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 21 08:24:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74dfbf3db680544242c1b7108e0df7a538847af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:4d:aa:ad:f5:e7:99:26:fe:42:c5:ef:d2:
ba:f0:31:a0:7b:e7:f3:78:33:3e:a5:6e:85:63:6e:
7c:6a:7e:e9:a7:e9:0b:e0:26:ed:79:c2:dc:17:0d:
ba:da:15:33:3d:fc:b1:73:b5:4e:5e:2d:b0:78:76:
ca:d7:b2:30:f5:b8:25:64:ac:18:85:fa:93:54:d7:
e2:dc:20:4a:29:e9:8b:00:a5:aa:d4:56:0a:29:fe:
3d:ec:b8:78:ec:c4:da:5a:d6:d4:36:72:b1:01:d6:
58:75:9e:f5:ee:fc:10:0e:a0:51:c0:24:68:6d:8b:
0e:0d:6a:93:b1:e1:f9:a8:65:49:4a:65:32:1e:25:
05:66:8c:2e:82:95:01:f8:08:b3:e5:e9:70:47:6d:
a1:c1:af:17:9b:fc:7c:16:c9:9e:fa:17:55:55:13:
bb:ab:da:11:cf:4a:5c:4e:48:59:a3:fb:7e:61:be:
b1:a3:03:a3:f8:c9:d1:4d:fb:78:86:4e:e5:83:46:
54:b1:e4:92:ac:7b:fe:88:a7:c7:0b:c6:23:65:dd:
0d:d8:dc:c6:d6:af:a8:2b:55:85:3d:d8:32:5a:15:
8f:10:e5:a2:f0:2b:47:8a:8e:f5:cd:69:76:2a:2d:
f0:95:32:15:d5:e5:39:e4:09:9e:09:96:85:29:88:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DF:BF:3D:B6:80:54:42:42:C1:B7:10:8E:0D:F7:A5:38:84:7A:F8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dN-_PbaAVEJCwbcQjg33pTiEevg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.107.0/24
Signature Algorithm: sha256WithRSAEncryption
00:52:18:43:b3:69:3c:d4:08:d8:bf:6b:59:32:da:83:f1:55:
42:54:2c:cf:aa:00:91:57:47:97:a6:73:b3:a8:9e:9d:69:ae:
a8:27:54:c9:53:94:f3:01:38:8b:af:c1:50:96:97:10:c3:7b:
e7:f5:c4:d6:b5:1a:d3:d5:cf:b1:ca:6f:9a:d3:17:b2:f6:36:
db:54:a6:d2:09:85:71:0b:00:15:1f:81:09:76:19:05:3e:dc:
dc:24:e2:d7:41:24:d8:76:ae:80:ac:39:8f:29:e6:15:4e:0f:
32:75:40:e4:84:85:e7:59:cb:95:65:86:d1:3f:40:3a:10:8a:
9f:7b:ab:c6:de:7d:9f:6e:c5:eb:13:98:ba:34:ed:34:d0:41:
39:fa:0e:64:d3:ad:88:fd:2f:61:4d:17:e3:01:9a:2a:3a:36:
d9:b3:f1:0d:d1:7a:15:e2:d4:03:25:bf:5e:90:61:71:77:95:
3d:a5:7b:50:42:7b:13:88:06:b2:98:59:94:f5:7e:d2:c0:51:
2a:ab:ca:ba:84:e6:ce:f9:6f:92:9b:43:64:e5:8d:c9:f9:e0:
ad:8b:ef:08:12:f6:a5:ac:a2:bf:e5:e2:57:76:aa:12:79:10:
92:b2:91:b1:93:65:80:b7:0c:b0:e9:78:6b:59:10:13:a8:a9:
d0:8c:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:19:54 2026 by rpki-client