Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-N5q6uQhIE9x6rbTzsU_IB4KycE.roa
File: 1-N5q6uQhIE9x6rbTzsU_IB4KycE.roa (raw, json)
Hash identifier: 80bczxFLkLwE/fJk7VlTjhwFjI99+k6QxHhQKPO/r1w=
Subject key identifier: F8:DE:6A:EA:E4:21:20:4F:71:EA:B6:D3:CE:C5:3F:20:1E:0A:C9:C1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F0FBF857256B59BF4A73A604369A31FF0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-N5q6uQhIE9x6rbTzsU_IB4KycE.roa
Signing time: Sun 28 Jun 2026 19:40:37 +0000
ROA not before: Sun 28 Jun 2026 19:40:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11421
IP address blocks: 87.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:bf:85:72:56:b5:9b:f4:a7:3a:60:43:69:a3:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 28 19:40:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8de6aeae421204f71eab6d3cec53f201e0ac9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:0f:cf:1e:ad:5f:18:c3:52:75:d1:20:03:
e9:66:07:0d:af:30:fd:aa:ee:d3:b7:41:b4:e4:ee:
ec:a8:78:fc:2e:ef:aa:f8:f8:d1:fb:2b:51:7d:29:
28:14:ee:0d:23:e5:8f:c6:13:a3:e8:fd:91:ec:d9:
8d:e6:9b:99:5d:62:88:4b:ed:9d:05:9f:40:65:24:
d5:02:30:88:dc:af:03:94:ac:d3:b5:8a:20:a3:00:
19:eb:52:fd:29:e5:6b:33:30:2c:52:24:71:6f:e9:
e2:04:4b:0d:3b:e7:e7:33:8a:39:7f:6c:80:26:cb:
87:d4:af:83:80:0a:64:d0:ac:d9:dc:af:01:07:48:
fb:39:75:9c:cb:98:4d:b8:9b:5c:cd:40:e1:81:5f:
0a:d2:55:9a:bc:25:14:df:bb:a7:d3:83:15:81:fb:
0d:f0:90:a5:33:d5:04:38:3c:3a:b2:3d:0f:be:3b:
30:13:f8:84:1f:a9:78:d4:08:0c:ec:18:d8:32:6e:
93:25:a6:32:f8:ee:9a:2d:22:d7:49:07:88:53:9e:
97:fe:dc:7d:3b:86:34:da:a1:54:f0:dd:f5:e1:44:
25:2a:aa:20:97:89:5d:24:3d:cb:5f:65:06:ce:7d:
ca:54:b4:e0:dc:df:6d:e1:27:47:69:6d:cd:fe:f4:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:6A:EA:E4:21:20:4F:71:EA:B6:D3:CE:C5:3F:20:1E:0A:C9:C1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-N5q6uQhIE9x6rbTzsU_IB4KycE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:b9:1c:1a:e6:ec:14:58:b3:26:00:20:79:7e:7e:42:c6:64:
01:1f:c1:10:cf:1f:37:ef:fd:69:7b:eb:4f:a0:2d:38:36:65:
b8:57:4b:80:0f:30:ba:a0:4c:5b:49:27:fe:b0:69:03:ee:46:
d0:20:4c:ec:89:90:05:fc:be:04:01:2d:18:76:8e:0e:c1:eb:
61:6b:73:b7:7e:99:0f:3e:8a:2e:3b:f6:4b:ba:a7:99:76:40:
34:23:41:fa:0c:3e:b4:7a:9e:63:df:71:d2:d9:3d:e8:74:d5:
f4:f0:ec:39:35:77:52:74:00:fa:5b:37:7a:80:dc:77:64:6e:
f2:44:17:06:37:09:e2:1d:c4:dc:3d:2f:39:cb:9f:21:91:ec:
15:4a:81:df:96:56:3b:6b:a4:33:18:10:02:ae:3a:e5:fb:b8:
c4:a0:bd:10:fa:65:92:5d:06:eb:70:66:ad:f0:6b:9d:8e:86:
32:72:36:92:9b:a9:07:91:02:99:bb:31:e5:0a:aa:40:fc:c4:
8c:f9:b2:f4:eb:e9:40:26:c6:6e:27:b4:05:cf:5d:8f:b6:f0:
53:df:6f:91:0b:28:3c:14:67:7e:26:2b:b8:74:c6:69:8b:3d:
a5:68:1c:a6:69:23:5b:30:b5:4a:43:12:a6:99:00:b8:05:16:
12:42:f3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:28 2026 by rpki-client