Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1Dd7FBcHRRyqugLjOAX7TE1Urj0.roa
File: 1Dd7FBcHRRyqugLjOAX7TE1Urj0.roa (raw, json)
Hash identifier: Fif6iKbdUvUtBeaHh4trCPBWc+gEFKIh7rxWwZldXKQ=
Subject key identifier: D4:37:7B:14:17:07:45:1C:AA:BA:02:E3:38:05:FB:4C:4D:54:AE:3D
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A12F9C5CB3A7780FDDD8DF7AF530230E05
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1Dd7FBcHRRyqugLjOAX7TE1Urj0.roa
Signing time: Mon 12 Oct 2026 10:15:38 +0000
ROA not before: Mon 12 Oct 2026 10:15:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 87.232.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:9c:5c:b3:a7:78:0f:dd:d8:df:7a:f5:30:23:0e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 12 10:15:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4377b141707451caaba02e33805fb4c4d54ae3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:3e:01:b8:17:c3:b6:92:57:da:32:39:8f:
16:7a:a0:d3:89:ad:9d:dc:3f:99:66:f7:e6:00:31:
41:f8:17:6d:8b:51:24:aa:2d:7a:ce:1c:1b:4e:cb:
10:b7:13:a7:41:56:7a:82:73:4e:ce:59:d7:16:81:
12:7f:6a:78:d2:ba:10:71:ed:fc:4b:d3:48:53:39:
5c:00:ca:d8:c1:54:87:e8:28:28:80:d2:ad:bc:ff:
9d:95:d3:1a:90:93:b2:e6:93:55:58:ff:a3:b4:1c:
be:12:06:b5:f8:74:a8:17:01:01:2e:f0:ac:07:b1:
fd:9b:50:ea:47:12:82:fc:7e:00:5c:04:7e:5a:cf:
e9:e7:7a:ef:30:f4:38:bc:f7:2e:24:92:5b:e5:0a:
e0:d6:9a:3c:61:e1:23:59:99:7c:ad:0c:48:19:e1:
ef:c6:6a:fd:56:6d:c3:a5:1d:15:f0:f3:d7:35:3e:
20:67:f1:78:2b:8b:08:4d:64:98:79:06:df:f0:76:
b1:0d:c5:3b:aa:c1:d1:af:e4:50:ff:a7:f2:f4:7a:
05:d0:03:a4:9c:53:c5:ce:b7:3d:9b:a8:cc:d4:99:
b4:da:0f:80:00:38:5a:26:16:e7:92:9b:29:57:bd:
0d:ba:97:ad:25:4e:f9:de:2d:73:d7:eb:12:cb:f4:
01:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:7B:14:17:07:45:1C:AA:BA:02:E3:38:05:FB:4C:4D:54:AE:3D
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1Dd7FBcHRRyqugLjOAX7TE1Urj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:01:8f:fe:6d:f8:85:5f:e8:25:e4:27:29:9c:b7:95:04:1a:
2e:72:c5:26:04:cb:3f:e7:5d:f1:58:ee:5e:7f:3f:c5:dc:b8:
16:2d:ec:e4:26:ea:4e:a0:9d:19:84:9f:80:f3:f9:82:46:f5:
1c:86:fe:fc:35:53:7f:15:aa:14:35:f3:97:9a:d3:f0:d7:7c:
ee:5e:30:22:4f:27:61:30:49:2e:df:a7:66:b2:57:a9:10:f2:
f7:83:3d:8c:db:0e:b2:62:34:e7:bc:2b:ae:54:39:43:02:45:
66:9a:65:e6:97:b2:5f:31:23:f0:5a:85:65:39:53:6f:0c:a6:
fd:c4:36:8a:39:f0:d7:ef:2b:67:4b:16:31:e8:8b:71:37:8f:
2f:b8:74:b6:19:61:be:b1:b4:e1:93:f3:1a:89:94:d2:ea:29:
f7:69:c2:82:4a:c3:cc:46:eb:16:09:77:40:d3:d9:79:11:8d:
33:69:4b:fd:26:bd:ed:b6:64:bf:6b:ce:0e:dc:22:ee:d3:e8:
e6:33:a2:a6:9b:d1:33:81:1b:77:76:b0:54:15:52:c8:4b:2f:
25:18:a3:5f:03:e8:7f:da:de:47:a4:ce:26:64:76:87:aa:84:
fc:a9:c8:d3:e3:52:e9:74:78:72:ad:11:07:1e:21:bd:b9:89:
10:75:74:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:35 2026 by rpki-client