Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-zplMfvm6w1gGoV-X1cbxmSQQpI.roa
File: 1-zplMfvm6w1gGoV-X1cbxmSQQpI.roa (raw, json)
Hash identifier: 97NJKCGUxVpkbKJ5SDTFWl2iwLMbUYBLuEdJPtHCtdo=
Subject key identifier: FB:3A:65:31:FB:E6:EB:0D:60:1A:85:7E:5F:57:1B:C6:64:90:42:92
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03DC4941C8F4AFE034F5BCFBC71B0BA73
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-zplMfvm6w1gGoV-X1cbxmSQQpI.roa
Signing time: Wed 26 Aug 2026 11:11:28 +0000
ROA not before: Wed 26 Aug 2026 11:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 87.83.216.0/23 maxlen: 24
87.83.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:c4:94:1c:8f:4a:fe:03:4f:5b:cf:bc:71:b0:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 26 11:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb3a6531fbe6eb0d601a857e5f571bc664904292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:af:3d:1c:48:46:78:e1:f1:de:5b:b1:66:
f5:6b:7a:3b:da:f9:41:af:1d:7c:cb:c4:73:3a:71:
c9:47:6b:8e:dd:ac:78:70:85:66:4d:9e:d8:53:25:
c2:1f:39:7b:2a:d0:f0:7c:0b:16:19:47:3c:26:9c:
d0:44:10:ae:54:16:04:0a:6f:e8:2a:ec:9f:0f:e1:
76:ca:37:d5:27:40:30:bf:e9:7d:3e:38:b1:c1:5f:
fb:23:3b:f2:6a:12:71:b7:ad:59:81:33:ee:a6:7b:
a1:ba:44:0e:50:fe:0b:98:fb:fd:dd:b4:a6:c4:b7:
0d:00:39:a8:e7:ee:37:5f:78:75:ae:6e:34:a4:ff:
bd:0f:77:1e:e5:54:fc:fc:be:8f:96:7b:3c:e4:7e:
8b:17:d8:99:78:cc:c4:ca:f1:86:10:f9:5b:c0:50:
c0:59:88:b9:79:bd:17:db:c0:0b:48:53:26:94:c8:
a5:5a:ca:65:5f:34:5a:93:fb:e1:35:3b:67:3a:bb:
2e:53:bc:31:e3:90:1d:b3:cf:15:b9:2a:dc:0e:89:
ef:85:a4:52:6c:e6:3f:b9:ed:06:90:b4:09:86:5a:
e4:3d:7a:d0:94:89:68:53:76:90:62:ad:f9:eb:ac:
cf:3c:6e:c5:de:dc:3e:b8:b3:f0:43:0b:f4:13:d4:
23:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:65:31:FB:E6:EB:0D:60:1A:85:7E:5F:57:1B:C6:64:90:42:92
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-zplMfvm6w1gGoV-X1cbxmSQQpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
87.83.234.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:fc:26:8e:cc:29:ec:97:cf:80:7e:e5:22:e1:10:09:e3:75:
89:a3:e8:5d:af:07:69:16:2d:54:cb:fe:fb:4a:ef:30:e1:18:
45:06:24:f8:d7:f3:79:20:62:86:40:d5:57:f2:89:fb:fb:1b:
50:48:c2:74:78:16:98:dc:f5:35:b5:1d:20:79:fb:a9:0a:91:
8d:c6:7b:f9:9b:b3:79:4d:a6:6a:67:c1:67:d8:de:95:9b:4a:
ff:c6:e9:ed:a2:37:f0:48:5d:c5:8d:7c:4b:c0:4c:b9:c1:b5:
2d:cb:f4:f0:52:b6:cc:1b:1a:78:25:ce:e4:c7:bc:b9:53:c2:
76:5b:a3:ba:80:32:fc:c9:b9:3f:6a:a2:8c:05:a6:6d:3f:d0:
91:cc:61:73:d9:8d:57:8f:c2:93:62:ee:bf:c4:c1:32:84:4c:
0b:25:59:25:be:da:19:3d:fd:ba:8b:f6:24:e3:c2:f7:8f:dc:
99:8c:1b:1a:06:7c:d5:26:e6:86:79:2c:f4:2c:ec:87:92:9b:
bc:a9:24:78:c1:6a:bd:1f:86:2e:2f:04:a5:66:43:45:34:4b:
08:b4:12:db:72:c2:9c:15:84:02:1a:0b:4c:e0:09:36:48:97:
36:9b:69:98:56:9b:06:ad:df:8b:27:2b:67:fa:c7:c2:a8:38:
7f:a0:a1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:35 2026 by rpki-client