Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2urrKhmHKAeS5By8Kcz8bh-9sEw.roa
File: 2urrKhmHKAeS5By8Kcz8bh-9sEw.roa (raw, json)
Hash identifier: Q2rOUW9RCUjDBszDJ5wC6KbfjWrX3uP3fMK7q2VToU8=
Subject key identifier: DA:EA:EB:2A:19:87:28:07:92:E4:1C:BC:29:CC:FC:6E:1F:BD:B0:4C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F0F404175DD70032DE71DCED44B63EC90
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2urrKhmHKAeS5By8Kcz8bh-9sEw.roa
Signing time: Sun 28 Jun 2026 17:21:37 +0000
ROA not before: Sun 28 Jun 2026 17:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 87.83.64.0/24 maxlen: 24
87.83.65.0/24 maxlen: 24
87.83.120.0/24 maxlen: 24
87.83.124.0/24 maxlen: 24
87.83.166.0/24 maxlen: 24
87.83.199.0/24 maxlen: 24
87.83.220.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0f:40:41:75:dd:70:03:2d:e7:1d:ce:d4:4b:63:ec:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 28 17:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daeaeb2a1987280792e41cbc29ccfc6e1fbdb04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:10:30:c9:c4:6a:65:8a:b8:da:8b:09:59:
47:2a:79:3b:15:29:bd:66:2e:e6:20:34:19:ae:1a:
a2:15:2e:68:95:98:a3:ed:13:2d:34:17:9c:7c:5a:
2a:9c:c4:1d:97:c1:d7:e6:9b:07:bc:8d:97:b8:26:
cb:40:d4:15:5f:7a:62:da:c9:7c:a2:95:c8:40:84:
f8:08:7c:67:35:c5:a5:b3:c7:6f:e4:5d:16:af:10:
19:06:7d:e7:36:9a:3b:ab:7f:67:51:1b:5e:1e:9e:
bd:c4:3f:4f:15:4a:ed:a6:82:89:b6:3d:40:f3:8b:
a8:52:d4:38:3a:e1:c6:cb:48:7b:74:c8:dc:57:e5:
e9:88:1f:f3:0f:44:1c:2b:59:cb:31:43:06:1f:ba:
e2:35:92:a6:01:f0:ed:7a:b3:fd:ce:75:a5:0d:aa:
e9:2c:76:aa:32:a5:6e:14:7f:2d:49:7d:54:6a:9c:
67:66:7a:9c:ce:f5:e9:ae:43:34:04:9e:24:9d:65:
13:59:19:91:f6:4a:9f:00:e8:bf:bd:ba:5c:b2:57:
36:c1:ed:c2:58:8d:9b:a7:39:07:03:7a:2b:da:3d:
fa:98:41:de:85:d4:23:05:70:a9:73:c6:72:a7:bc:
69:dc:50:25:e7:71:7e:66:44:f2:bf:ea:fa:97:7b:
ed:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EA:EB:2A:19:87:28:07:92:E4:1C:BC:29:CC:FC:6E:1F:BD:B0:4C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2urrKhmHKAeS5By8Kcz8bh-9sEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.64.0/23
87.83.120.0/24
87.83.124.0/24
87.83.166.0/24
87.83.199.0/24
87.83.220.0/24
87.84.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7b:06:f6:0d:7c:c2:4f:1e:c4:d6:7b:5a:a0:b5:68:9b:2d:
12:75:63:d0:27:1d:9d:12:f0:04:31:90:15:bc:db:53:55:dd:
7c:4b:a6:af:96:ac:ba:1f:05:76:ea:36:75:51:20:5f:48:a3:
64:c0:d6:9c:fd:d3:04:82:84:77:da:27:47:ad:b3:db:9e:e9:
13:ec:20:18:90:73:21:07:18:1f:cb:69:89:fd:fa:3a:76:fc:
e3:b9:41:85:f3:9e:92:c0:58:5f:07:d1:89:94:81:6d:2b:5c:
7e:e4:e5:e8:48:ba:1c:b3:0c:4f:11:1f:18:f8:bc:11:cd:3f:
19:84:db:a1:bb:16:7b:6d:6d:e0:19:da:4b:b8:a6:7b:72:13:
42:74:a2:90:d8:92:d5:fd:4f:36:ef:8d:db:e1:8c:a7:e7:f5:
01:1c:a5:4c:1f:77:9f:21:ae:6e:e4:8f:f6:e8:e4:bb:a9:cd:
72:5c:66:db:ed:74:c8:57:c9:82:2a:d7:c6:0d:97:91:d6:d6:
a2:61:e4:e2:09:ba:3d:b2:c8:c9:3c:80:ee:1f:6e:55:f3:82:
7b:41:a5:54:a3:71:a7:3f:74:85:83:9c:33:ac:36:d4:7e:8a:
4a:b0:a7:cf:4b:b6:1a:92:3f:60:65:3a:bc:5f:bd:4b:92:c8:
74:95:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:46 2026 by rpki-client