Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1YH1Veh2jQai8mnSJt4VUI9M-Cc.roa
File: 1YH1Veh2jQai8mnSJt4VUI9M-Cc.roa (raw, json)
Hash identifier: LtT3swR0tQw6ok55dBhpge/tu7OGPU9gGwQNXVC4mOA=
Subject key identifier: D5:81:F5:55:E8:76:8D:06:A2:F2:69:D2:26:DE:15:50:8F:4C:F8:27
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A084BFF7446E18778D6C3AA0EE11D395C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1YH1Veh2jQai8mnSJt4VUI9M-Cc.roa
Signing time: Wed 09 Sep 2026 05:59:28 +0000
ROA not before: Wed 09 Sep 2026 05:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 87.83.66.0/24 maxlen: 24
87.86.181.0/24 maxlen: 24
87.86.252.0/24 maxlen: 24
185.3.73.0/24 maxlen: 24
212.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:bf:f7:44:6e:18:77:8d:6c:3a:a0:ee:11:d3:95:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 9 05:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d581f555e8768d06a2f269d226de15508f4cf827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:52:b4:f4:59:a8:d4:c6:10:4e:05:a9:a2:
f0:17:aa:32:57:27:6a:92:3c:74:95:bc:8a:1f:44:
cf:e6:cc:c0:78:c2:8e:92:4a:0a:a0:5c:8f:3f:f7:
4d:83:9d:3a:2c:5b:91:94:09:2f:6f:6e:90:aa:db:
df:6f:0e:42:ca:2c:f9:44:32:c6:47:27:1c:c5:02:
d6:3b:24:44:1d:13:f0:d2:09:37:52:30:4d:ae:25:
e1:fd:6d:f3:79:3c:f3:ea:10:33:f2:1e:42:8b:3c:
cb:b5:b0:bd:47:e8:6f:74:de:2e:f7:ff:36:be:e2:
fc:e6:66:58:a1:17:62:34:b8:23:78:22:6f:e4:20:
a3:f3:7b:a4:02:95:dc:b3:1b:f1:0b:49:23:25:a9:
a4:96:e0:ce:59:e8:7c:3e:bd:43:5a:a9:c7:f3:08:
c0:c5:20:03:5e:21:35:d5:90:1b:44:94:0c:19:6b:
48:8e:9d:f9:35:7d:c9:cf:a9:30:1e:af:e2:f7:17:
c1:39:74:4f:07:3e:23:e3:5d:5b:55:50:8f:c3:3f:
68:77:35:42:5e:7d:a6:f2:cd:93:e7:49:85:0e:8c:
af:47:f2:89:6b:7d:a6:85:5c:7c:0c:67:6c:f5:94:
de:5f:f8:73:8b:c9:a3:cc:f2:f6:66:56:f2:ee:6f:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:F5:55:E8:76:8D:06:A2:F2:69:D2:26:DE:15:50:8F:4C:F8:27
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1YH1Veh2jQai8mnSJt4VUI9M-Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.66.0/24
87.86.181.0/24
87.86.252.0/24
185.3.73.0/24
212.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
26:81:45:6c:99:83:3c:b6:a1:f8:b5:69:b7:f4:ca:59:74:46:
5c:03:0e:65:b4:ac:04:a1:cf:e3:c6:fe:3c:1c:ac:c7:5d:c3:
56:80:53:1f:dc:a1:cc:4c:b5:c9:1e:93:4d:50:f2:74:3f:d1:
75:4e:27:a8:58:92:39:b2:42:1e:f3:4a:25:ee:52:0f:2f:12:
89:af:88:41:fc:df:b3:93:0c:5a:7f:c0:4d:ec:5f:88:9c:48:
8a:5f:2b:1e:76:b9:91:53:4d:d2:05:8a:05:ae:5b:3e:c3:13:
8b:70:00:3e:09:51:db:fc:c1:b4:10:98:12:85:40:8f:36:f3:
f8:d2:e3:fb:fe:f1:25:fd:40:c5:5f:d7:8e:86:7e:45:89:14:
3b:ad:c4:73:25:3a:22:7b:98:f3:58:08:15:2e:c1:16:3d:5f:
4b:22:c2:85:95:de:8b:b6:98:93:4e:9b:fe:e5:3b:1d:18:70:
4b:27:1a:95:86:9a:97:e9:84:7f:16:ac:34:03:2e:4d:ea:55:
ad:da:b9:c9:a5:35:f7:96:88:a2:99:c0:1c:8d:cb:1a:57:b1:
20:fb:ac:48:2c:03:9f:9d:55:2d:fa:31:e0:19:9c:11:4d:25:
9a:43:33:6f:78:ef:df:59:38:c4:5e:7a:8a:d9:31:c7:22:8e:
0d:86:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:30:23 2026 by rpki-client