Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Tak7Lk5Jb12V6ZiZbB95l6vdEmk.roa
File: Tak7Lk5Jb12V6ZiZbB95l6vdEmk.roa (raw, json)
Hash identifier: l3cX8dMvFMSRSv05nFaoh392F8WbS5dBer12LbGC5+c=
Subject key identifier: 4D:A9:3B:2E:4E:49:6F:5D:95:E9:98:99:6C:1F:79:97:AB:DD:12:69
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A136BEB8CE6AF174074B0C3368C654E828
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Tak7Lk5Jb12V6ZiZbB95l6vdEmk.roa
Signing time: Tue 13 Oct 2026 19:30:31 +0000
ROA not before: Tue 13 Oct 2026 19:30:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207083
IP address blocks: 87.232.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:be:b8:ce:6a:f1:74:07:4b:0c:33:68:c6:54:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 13 19:30:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4da93b2e4e496f5d95e998996c1f7997abdd1269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:03:de:01:c1:dc:93:d3:57:d2:8a:34:7d:
86:42:5e:8a:ba:1c:5f:26:c5:c8:a0:fc:5b:c3:90:
f6:28:ae:b0:26:3c:47:3b:0f:8a:78:59:f8:60:93:
9b:e2:4b:e8:a7:05:5a:3c:40:71:12:54:1e:6c:c4:
b7:fb:89:ab:9c:9c:df:12:a8:c8:25:09:56:4d:e9:
5d:b3:6e:ca:3d:46:11:af:c5:22:b9:c5:9d:6e:13:
16:63:08:b3:41:0d:07:9c:75:b3:84:c1:9f:c9:42:
f9:a6:e5:82:08:c0:54:9c:cc:75:f7:8a:33:af:f6:
a1:d8:3d:f3:14:79:55:e1:68:cf:c3:ef:ed:3a:1a:
6f:5e:21:92:1d:59:5e:2a:a2:8b:10:8c:21:34:4f:
49:f3:b3:c3:87:40:1a:8a:20:de:e4:03:b8:e9:9c:
d7:e9:43:cf:aa:d9:b9:31:78:e9:f3:16:fd:56:73:
6b:d8:42:d6:00:a9:3c:48:b1:68:8b:49:39:72:df:
6c:4a:73:56:72:78:98:d9:95:71:2e:a5:ea:65:8b:
d5:e0:a2:f1:55:56:ab:e9:9a:54:e6:04:f8:d2:d2:
3f:e1:04:68:c6:40:f2:21:bd:b4:b5:17:69:37:81:
bc:3f:36:07:5c:36:cc:28:42:b7:4c:d7:c8:c7:9b:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:3B:2E:4E:49:6F:5D:95:E9:98:99:6C:1F:79:97:AB:DD:12:69
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Tak7Lk5Jb12V6ZiZbB95l6vdEmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.113.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f0:ff:aa:2c:6c:9d:8b:88:7f:cd:ae:ad:14:73:13:05:d5:
ee:b3:0c:91:f7:40:7d:ad:cc:f4:01:2f:e0:10:47:c2:fe:1d:
71:b5:9a:5b:ff:a0:bf:ed:ae:a5:4d:a4:46:3a:01:78:97:a4:
c8:3b:ad:c0:c5:76:cf:ba:a1:d4:89:61:f5:df:ec:b1:84:72:
14:31:73:6b:76:0a:73:ea:5c:8e:31:d4:30:ff:dc:fd:44:3c:
ca:f8:04:05:bf:20:38:1f:5d:7a:61:11:f0:37:89:db:90:2f:
cf:60:3d:b6:91:08:62:c7:4f:aa:b5:46:1d:3f:e7:0f:44:a9:
f6:34:bb:cf:29:d6:84:7c:4e:45:30:ce:5b:94:2c:35:7e:6c:
41:a6:5d:96:b2:51:21:f4:35:1c:a4:2d:8a:85:69:8b:39:3a:
7e:ed:c4:12:66:e4:35:f4:ee:24:5e:fa:ed:71:70:36:8c:eb:
26:5c:ff:81:85:ab:65:1d:f5:8f:74:de:d9:13:c1:03:c4:6f:
82:13:ee:5e:59:68:e6:86:a5:58:ce:7c:2c:5b:ac:8c:ab:71:
42:ba:bd:e4:d6:39:65:f0:81:bb:83:d3:ef:ee:6f:5a:cf:54:
74:d3:a3:d4:30:bc:5c:a2:c0:82:ac:45:1a:6c:6e:29:a1:e7:
80:57:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:28 2026 by rpki-client