Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4UqdCuKDzBGjMJ5aZ8WRGBd-WWk.roa
File: 4UqdCuKDzBGjMJ5aZ8WRGBd-WWk.roa (raw, json)
Hash identifier: BZXXQRJfANKXO9Wd68ZaN+uVBE0ci+8R7rri3/p0BQU=
Subject key identifier: E1:4A:9D:0A:E2:83:CC:11:A3:30:9E:5A:67:C5:91:18:17:7E:59:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E87FEAACC7CF0C1B7062B853C1183B31D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4UqdCuKDzBGjMJ5aZ8WRGBd-WWk.roa
Signing time: Tue 02 Jun 2026 11:01:14 +0000
ROA not before: Tue 02 Jun 2026 11:01:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154383
IP address blocks: 87.82.217.0/24 maxlen: 24
87.83.175.0/24 maxlen: 24
87.84.224.0/24 maxlen: 24
87.86.37.0/24 maxlen: 24
91.143.180.0/24 maxlen: 24
212.134.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:fe:aa:cc:7c:f0:c1:b7:06:2b:85:3c:11:83:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 2 11:01:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e14a9d0ae283cc11a3309e5a67c59118177e5969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7e:20:66:d8:f0:92:8a:91:a3:fa:15:e2:8f:
22:d2:21:44:82:0b:99:1d:f2:04:51:75:09:3d:6c:
47:dc:b8:f0:29:10:10:4b:8d:ab:f1:58:40:ab:6e:
67:e8:a6:4f:46:50:07:26:66:b0:60:df:d3:90:49:
9b:eb:5a:29:b6:0e:a3:e8:77:ce:93:52:9d:fd:e7:
09:e6:1c:f9:6a:d3:02:c5:ba:78:a1:b3:52:d9:10:
f0:42:56:45:bd:c9:af:b6:4c:13:af:2b:0d:6f:d4:
7a:94:2b:6b:57:bf:5f:aa:f4:f1:85:c3:4a:bd:31:
29:5e:15:84:8b:f0:fe:eb:d7:49:8f:ef:5c:56:83:
15:ce:50:9a:23:71:33:89:45:be:ab:bc:f0:99:c8:
5d:61:5f:72:1e:04:f3:3d:0b:19:26:64:04:67:17:
58:e5:bb:16:ed:5d:73:28:3e:1c:cb:5c:7e:7d:3f:
a1:53:e7:17:a2:fe:38:af:c4:f7:80:7a:68:8b:3d:
d8:11:cf:09:9b:8d:46:f8:a5:52:20:95:10:9a:e3:
87:7d:92:2b:de:53:b7:53:d2:c3:a7:c6:af:6d:22:
ac:94:bc:5a:26:ac:b3:d4:68:ad:be:a3:ff:37:4a:
69:dc:cd:48:4e:a7:37:2d:ea:64:d1:e3:97:b3:d5:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:9D:0A:E2:83:CC:11:A3:30:9E:5A:67:C5:91:18:17:7E:59:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4UqdCuKDzBGjMJ5aZ8WRGBd-WWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.217.0/24
87.83.175.0/24
87.84.224.0/24
87.86.37.0/24
91.143.180.0/24
212.134.159.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b9:b0:dc:14:21:4f:c9:2a:e6:4b:9f:08:ee:31:7e:62:f2:
76:ac:cd:ac:a2:55:83:c2:e6:12:b7:fa:0c:51:92:5a:ef:65:
b3:64:41:d6:58:57:cd:ef:59:6d:94:eb:bd:d2:45:14:67:a0:
6f:58:90:b0:08:45:a2:eb:5d:9e:9f:9a:aa:97:34:43:03:79:
91:06:35:7d:da:c3:88:d7:8f:f9:55:2d:6f:59:52:8a:a4:6c:
36:ef:23:c7:ab:e4:8f:87:87:bf:d6:b4:aa:46:ae:09:a5:f2:
41:e8:f7:3b:a4:5d:a6:d8:56:9f:d7:e0:98:ac:54:83:27:a5:
c7:a2:52:34:df:2a:d8:da:71:e6:4b:34:fc:9a:81:63:ba:09:
44:b1:cf:f3:99:02:98:ad:96:28:ae:10:59:ca:cb:47:4e:42:
21:2a:c3:40:9c:73:4e:1b:6a:d0:f3:17:bc:2b:35:15:4c:0b:
7f:c6:9f:62:d7:47:f4:68:16:d9:1d:41:89:0f:62:db:d5:06:
87:da:4a:8d:a7:8a:b7:29:3b:b0:81:63:5d:d8:31:6e:a8:dd:
19:91:31:57:7f:f9:57:28:79:e2:96:3f:e1:bf:6f:75:d8:94:
db:f4:4c:c8:4c:b3:67:9d:8e:35:50:0f:f9:d4:fd:e8:c5:a1:
10:ee:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:15:39 2026 by rpki-client