Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/81Kzqhh8m2M0wLJ7Ks7oAplJkCE.roa
File: 81Kzqhh8m2M0wLJ7Ks7oAplJkCE.roa (raw, json)
Hash identifier: 9dlff9omtLUqhKSE7ECAe0S8Lj1BVb6AVK7TL/5PR1w=
Subject key identifier: F3:52:B3:AA:18:7C:9B:63:34:C0:B2:7B:2A:CE:E8:02:99:49:90:21
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A04F530175D0FEF0DC6622A774FB2E735A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/81Kzqhh8m2M0wLJ7Ks7oAplJkCE.roa
Signing time: Sat 29 Aug 2026 21:00:34 +0000
ROA not before: Sat 29 Aug 2026 21:00:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214762
IP address blocks: 87.232.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:53:01:75:d0:fe:f0:dc:66:22:a7:74:fb:2e:73:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 29 21:00:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f352b3aa187c9b6334c0b27b2acee80299499021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:78:cf:42:52:a6:8c:af:df:9d:27:63:51:
e4:96:ff:bc:8f:70:e9:18:6f:ac:0e:c8:40:d4:4e:
c4:41:13:b8:da:4e:93:cc:9e:4d:92:17:98:c1:2c:
c1:2a:b2:29:18:cb:3e:05:ec:25:05:ec:b5:f0:79:
85:2b:95:a1:e9:70:aa:e8:b2:7b:65:5f:2a:f9:e9:
05:35:82:21:d2:12:66:90:5f:1d:74:e6:81:e4:70:
87:ac:52:9b:9e:5a:a6:40:8a:b2:d9:f0:8c:96:97:
3a:38:b6:82:6a:f9:22:21:ef:6d:21:3d:87:8b:df:
8a:50:6f:71:e1:7c:da:ca:53:de:61:01:1d:e8:ed:
ef:4a:b1:da:15:dd:e0:0f:54:b4:91:23:51:b0:b6:
97:da:df:e7:b2:fd:b7:dd:22:20:43:ce:b5:21:d7:
21:f3:75:f8:da:0f:5b:57:98:1c:91:78:e3:5d:b7:
c3:68:b0:82:29:46:37:d1:20:f3:d1:bd:c7:a8:41:
e1:13:fd:a2:23:7b:f0:bf:14:9b:20:64:08:c0:bb:
d4:75:52:5e:4f:af:ef:24:8b:35:d9:b7:e4:c8:73:
b1:da:e1:52:b8:7e:d0:ed:68:60:08:2c:ff:7d:89:
4d:5c:11:ca:49:b4:b7:9b:cd:a5:19:4c:81:05:c5:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:52:B3:AA:18:7C:9B:63:34:C0:B2:7B:2A:CE:E8:02:99:49:90:21
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/81Kzqhh8m2M0wLJ7Ks7oAplJkCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a0:d8:6d:fd:dd:f7:33:1b:2a:ab:0f:82:0c:3d:88:b5:aa:
b0:47:43:88:f5:b8:53:f2:b6:03:b0:42:70:f3:59:8c:a4:a9:
74:60:47:f1:ef:9b:26:1a:36:f8:68:7b:a7:28:c5:31:c6:d1:
49:07:55:c5:74:71:6d:64:dc:ab:71:ae:dc:2a:0f:b9:c7:96:
4b:83:d2:d5:80:31:c7:c0:6f:e5:6b:85:97:31:0f:a1:4a:cc:
3e:dd:d9:b8:8e:e9:81:b0:11:04:21:8d:7f:53:8b:89:20:16:
9f:5f:52:8f:f1:3e:01:a1:a1:75:58:06:f2:80:c8:1a:dc:03:
2f:1e:f4:1e:d0:1a:4d:7f:1c:82:9e:a3:4d:fd:88:e9:4c:46:
a3:c6:ae:c3:0c:e8:2b:ff:59:f3:a1:2d:32:3f:c0:59:2a:72:
fe:2c:e3:7f:f3:37:6d:3c:24:bb:37:c5:0e:66:33:46:57:e8:
6d:87:d1:ce:6c:87:6b:44:54:b4:0d:28:27:77:75:fa:87:32:
ef:f2:c8:16:b5:60:64:33:41:7b:d2:19:c5:5f:41:88:82:08:
2a:29:19:38:b7:03:d8:58:5e:f3:7c:ee:ba:01:55:52:3b:53:
e0:be:f9:d0:45:46:85:24:21:2b:c9:df:b0:e7:2e:1e:b6:66:
1a:5e:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:52 2026 by rpki-client