Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9md1VoRjr0t3yD-oFAjLzYdnxdc.roa
File: 9md1VoRjr0t3yD-oFAjLzYdnxdc.roa (raw, json)
Hash identifier: +Djh5fhmsOTXKsegguC2QQQjzamzYG3oSY8LWqFdox8=
Subject key identifier: F6:67:75:56:84:63:AF:4B:77:C8:3F:A8:14:08:CB:CD:87:67:C5:D7
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EFB52E8C552A51919BAD529AE5DB73B13
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9md1VoRjr0t3yD-oFAjLzYdnxdc.roa
Signing time: Wed 24 Jun 2026 20:29:35 +0000
ROA not before: Wed 24 Jun 2026 20:29:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 87.85.168.0/22 maxlen: 24
87.85.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:52:e8:c5:52:a5:19:19:ba:d5:29:ae:5d:b7:3b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 24 20:29:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66775568463af4b77c83fa81408cbcd8767c5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:72:a5:79:8e:f7:bf:4a:01:da:70:4b:02:
75:1f:a3:36:19:c4:56:a9:f5:9f:04:f4:b6:28:44:
83:31:3b:4b:b6:dd:df:b1:34:13:67:35:d4:bd:f1:
fa:46:2d:8f:0f:a6:70:23:19:4e:16:51:22:da:1e:
e8:1c:df:f5:f5:a4:a1:fc:6c:a8:b1:64:8f:30:1f:
6c:e8:93:8e:d2:f3:c2:d4:be:41:b6:fe:33:d4:2c:
27:f9:45:11:68:84:e8:19:f6:e2:20:c0:26:d8:3c:
3b:bb:01:d9:71:15:66:a7:2d:c1:b0:1d:fa:75:9b:
ca:ae:b8:3f:fb:57:03:db:30:f6:e9:e7:d2:80:82:
5f:04:af:26:e1:a8:69:e8:7f:3a:b4:e5:93:8f:eb:
0e:e0:98:05:cf:83:f7:ef:a8:b9:8e:51:7f:33:63:
46:58:a6:20:32:35:be:7b:1b:d5:04:38:20:69:49:
06:3d:21:91:56:96:d5:45:c7:1d:23:76:d3:bf:f2:
d6:08:9d:f5:8c:54:67:1e:a7:37:d1:7e:42:4d:fa:
52:3d:2c:4d:43:d6:6e:c5:78:6e:00:74:56:c0:3b:
53:0f:67:be:c0:db:62:2f:51:e0:9f:a8:90:da:0a:
0d:0c:cf:45:72:1d:2b:ed:4c:10:43:87:43:c6:3e:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:75:56:84:63:AF:4B:77:C8:3F:A8:14:08:CB:CD:87:67:C5:D7
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9md1VoRjr0t3yD-oFAjLzYdnxdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.168.0-87.85.173.255
Signature Algorithm: sha256WithRSAEncryption
5e:86:f2:d3:1d:5b:5f:2e:ee:cd:4d:dc:db:88:d6:fe:8e:d8:
8f:6f:55:7f:61:a5:12:6e:2c:04:d9:7f:2e:5f:01:2b:84:a0:
61:42:31:a6:ce:4d:86:27:3d:26:0c:1c:38:c0:53:09:2f:8f:
c7:27:bc:ad:d7:9b:c2:5d:c5:19:16:34:11:5a:f2:a2:21:76:
9c:ad:d3:ab:8a:b1:91:ea:51:30:04:55:18:88:5d:37:49:e8:
93:1c:37:14:76:a0:c4:7b:ba:9a:17:6d:a5:03:0a:d2:dd:07:
1d:3e:9f:57:7c:7c:95:27:03:85:b8:d0:35:62:9a:18:31:d4:
78:e0:a3:23:4c:32:14:3b:69:bf:4f:35:5f:3e:ca:c3:80:f1:
8b:b0:3d:f3:3e:1c:60:fd:6d:c5:eb:a8:b7:d3:14:7a:a7:0f:
d4:45:fb:aa:ab:f9:06:01:e2:83:77:16:b2:f1:98:81:ef:2d:
4e:91:1f:00:32:ad:91:a9:bb:74:66:1f:89:5b:a0:d3:20:af:
55:a5:d2:10:75:6e:54:ce:bc:b3:25:53:8e:48:88:72:6f:bb:
b7:7c:ea:75:9f:b0:0e:f6:1c:fa:ce:dd:ae:a7:c9:d9:69:44:
6a:7f:95:db:52:b5:ca:fa:7f:70:68:8d:9a:7e:dc:db:73:7d:
ae:7e:a7:2f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ77UujFUqUZGbrVKa5dtzsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjI0MjAyOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY3NzU1Njg0NjNhZjRiNzdjODNmYTgxNDA4Y2JjZDg3NjdjNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MlypXmO979KAdpwSwJ1H6M2GcRW
qfWfBPS2KESDMTtLtt3fsTQTZzXUvfH6Ri2PD6ZwIxlOFlEi2h7oHN/19aSh/Gyo
sWSPMB9s6JOO0vPC1L5Btv4z1Cwn+UURaIToGfbiIMAm2Dw7uwHZcRVmpy3BsB36
dZvKrrg/+1cD2zD26efSgIJfBK8m4ahp6H86tOWTj+sO4JgFz4P376i5jlF/M2NG
WKYgMjW+exvVBDggaUkGPSGRVpbVRccdI3bTv/LWCJ31jFRnHqc30X5CTfpSPSxN
Q9ZuxXhuAHRWwDtTD2e+wNtiL1Hgn6iQ2goNDM9Fch0r7UwQQ4dDxj5BcwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPZndVaEY69Ld8g/qBQIy82HZ8XXMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOW1kMVZvUmpyMHQzeUQtb0ZBakx6WWRueGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANXVagD
BAFXVawwDQYJKoZIhvcNAQELBQADggEBAF6G8tMdW18u7s1N3NuI1v6O2I9vVX9h
pRJuLATZfy5fASuEoGFCMabOTYYnPSYMHDjAUwkvj8cnvK3Xm8JdxRkWNBFa8qIh
dpyt06uKsZHqUTAEVRiIXTdJ6JMcNxR2oMR7upoXbaUDCtLdBx0+n1d8fJUnA4W4
0DVimhgx1HjgoyNMMhQ7ab9PNV8+ysOA8YuwPfM+HGD9bcXrqLfTFHqnD9RF+6qr
+QYB4oN3FrLxmIHvLU6RHwAyrZGpu3RmH4lboNMgr1Wl0hB1blTOvLMlU45IiHJv
u7d86nWfsA72HPrO3a6nydlpRGp/ldtStcr6f3BojZp+3Ntzfa5+py8=
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client