Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OOpbx0Iq_j5-l9zY5TiGkuW2piQ.roa
File: OOpbx0Iq_j5-l9zY5TiGkuW2piQ.roa (raw, json)
Hash identifier: UJWwW9PqVg43yn79slu5MaCpyFMBimznxlHhtYdgsGk=
Subject key identifier: 38:EA:5B:C7:42:2A:FE:3E:7E:97:DC:D8:E5:38:86:92:E5:B6:A6:24
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA7A0B7820E9FB390C5EEEC0F07F2A96A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OOpbx0Iq_j5-l9zY5TiGkuW2piQ.roa
Signing time: Tue 28 Jul 2026 07:29:15 +0000
ROA not before: Tue 28 Jul 2026 07:29:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 87.85.64.0/24 maxlen: 24
87.86.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a0:b7:82:0e:9f:b3:90:c5:ee:ec:0f:07:f2:a9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 07:29:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38ea5bc7422afe3e7e97dcd8e5388692e5b6a624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:78:c0:35:93:cc:e2:53:e6:2f:b5:3d:92:
d1:5b:30:79:4e:c6:87:5a:49:39:1c:f0:7c:29:2a:
5d:ac:1c:7e:9c:0d:80:db:0a:5a:95:e9:42:11:38:
3b:49:b9:40:5f:26:ab:1e:bc:ea:cd:41:b5:52:c6:
41:57:e9:66:02:b9:e6:cd:bd:99:45:29:bb:95:99:
9b:50:33:a3:6b:8d:88:73:6d:78:14:94:d3:5b:ee:
72:e4:f5:72:4f:1b:74:4e:cb:ac:8f:20:bb:95:75:
16:4a:1c:72:bd:56:53:59:35:70:1a:76:97:85:9f:
25:3b:39:19:7e:b7:e0:d1:7f:a9:46:f0:db:98:42:
98:89:a6:28:7d:fa:64:4e:5b:15:72:0e:38:54:19:
5e:88:5f:83:49:3e:db:96:73:90:9f:da:fe:66:f3:
30:a8:40:13:80:30:6f:cc:60:22:d5:aa:5e:20:b6:
20:78:e1:c1:22:cc:02:4e:7c:8d:ac:85:b7:09:aa:
58:8e:b7:5c:07:8d:5a:b3:0d:a0:54:c9:e7:f5:b6:
92:37:15:17:9d:bf:03:d7:98:bf:9f:f3:46:a4:ad:
54:3a:a8:9c:ab:ca:95:10:37:cd:29:7b:85:5d:5f:
4d:23:5e:ef:c9:73:e5:4f:95:54:b5:2e:ec:26:40:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EA:5B:C7:42:2A:FE:3E:7E:97:DC:D8:E5:38:86:92:E5:B6:A6:24
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/OOpbx0Iq_j5-l9zY5TiGkuW2piQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.64.0/24
87.86.174.0/24
Signature Algorithm: sha256WithRSAEncryption
38:da:71:e7:74:69:b3:68:75:3d:84:87:6f:6f:59:10:01:44:
39:31:ec:a0:94:6f:e9:5e:f5:f1:d2:a8:30:ae:1f:ec:7c:be:
b6:c6:ca:bb:38:6e:45:b3:02:1b:f5:0b:e8:67:ba:c6:87:cd:
ee:f6:88:69:d6:a3:44:18:ae:be:50:6b:dd:c7:8e:4f:c8:98:
ff:f8:08:18:1e:cd:04:1c:a5:b2:21:a9:d8:bc:58:e0:d8:e4:
90:6f:53:87:77:35:25:d7:4a:94:41:66:a9:60:8d:4b:6e:16:
fc:f3:a5:5e:ac:12:d6:b2:4d:11:f6:11:dd:6e:a3:0f:3b:2d:
e2:b0:4e:92:84:09:67:fc:8c:67:05:6b:26:88:b2:04:f2:e6:
cb:ad:ea:94:d7:69:53:19:ea:8a:c0:3e:57:d0:c9:9d:2e:08:
e1:53:b0:97:08:ec:a4:7d:a2:c0:0a:c4:5d:2b:e6:7a:31:a7:
33:f3:d5:72:3f:89:bf:b6:6f:08:2d:e4:f2:0f:3c:2c:e0:ea:
75:55:78:9f:da:68:6a:32:ce:65:10:95:00:76:e5:f4:b1:f2:
d9:4e:a4:3b:03:5a:ef:77:b3:ef:dc:1d:cd:b1:06:90:0a:5c:
db:59:16:92:e4:3f:48:1b:e0:d5:4e:fe:ec:ad:4c:4e:5a:30:
9d:9e:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:46:36 2026 by rpki-client