Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q0QNMI2Y3c9fkcp62Rv-gBO_ryw.roa
File: Q0QNMI2Y3c9fkcp62Rv-gBO_ryw.roa (raw, json)
Hash identifier: upx1oRewT3B/OmJaZR1ji+xDA9dJGALdIQ64fJTiHGQ=
Subject key identifier: 43:44:0D:30:8D:98:DD:CF:5F:91:CA:7A:D9:1B:FE:80:13:BF:AF:2C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05D0C77BF99865C9CF5AB4F9C6398971A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q0QNMI2Y3c9fkcp62Rv-gBO_ryw.roa
Signing time: Tue 01 Sep 2026 12:58:13 +0000
ROA not before: Tue 01 Sep 2026 12:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219182
IP address blocks: 87.83.127.0/24 maxlen: 24
87.83.196.0/24 maxlen: 24
87.84.135.0/24 maxlen: 24
87.84.157.0/24 maxlen: 24
87.84.159.0/24 maxlen: 24
87.85.230.0/24 maxlen: 24
87.85.242.0/24 maxlen: 24
87.85.244.0/24 maxlen: 24
87.86.214.0/24 maxlen: 24
212.134.105.0/24 maxlen: 24
212.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:0c:77:bf:99:86:5c:9c:f5:ab:4f:9c:63:98:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 1 12:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43440d308d98ddcf5f91ca7ad91bfe8013bfaf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:7b:df:6d:4e:8c:09:85:a7:9e:4a:fd:29:
cc:07:fb:f4:9f:86:dd:6f:82:af:c3:54:b5:37:4b:
02:ec:35:27:dd:1a:d5:f2:5c:87:e4:15:a5:60:06:
85:01:78:e4:a9:5c:66:46:63:fd:68:90:60:51:8b:
0b:6e:50:28:58:23:0f:70:8b:d1:2c:91:6c:0b:19:
de:30:69:b5:b3:06:60:8c:ea:9a:57:68:76:ca:a3:
45:b0:b8:2f:27:c8:24:a4:fd:6a:c3:0e:f9:c8:c0:
9a:5f:a3:51:04:b4:ed:92:4f:e4:04:3b:ef:d7:4e:
20:bc:c7:2d:9e:69:6c:64:97:16:4a:c5:be:cd:16:
28:6f:60:3c:77:4e:97:d0:5e:98:77:98:94:8a:c1:
fc:f4:84:b7:93:75:57:03:09:a0:97:6b:4a:a1:0f:
e9:15:55:ce:20:8d:35:86:7c:ca:44:38:53:45:e7:
1d:cc:46:80:0f:9e:4f:75:d2:4a:fd:be:39:3a:8a:
26:7c:e9:51:2b:70:b6:18:0f:6a:43:60:84:5a:ad:
ac:6e:6f:83:29:00:b3:95:0c:d9:50:00:18:a9:95:
b2:c0:01:f0:9f:1c:ba:8c:b8:ec:0f:63:e1:2a:51:
7e:96:56:42:da:93:9d:02:54:36:61:98:93:37:f7:
81:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:44:0D:30:8D:98:DD:CF:5F:91:CA:7A:D9:1B:FE:80:13:BF:AF:2C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Q0QNMI2Y3c9fkcp62Rv-gBO_ryw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.127.0/24
87.83.196.0/24
87.84.135.0/24
87.84.157.0/24
87.84.159.0/24
87.85.230.0/24
87.85.242.0/24
87.85.244.0/24
87.86.214.0/24
212.134.105.0/24
212.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
02:9a:08:c6:4b:30:2f:a0:1f:57:09:b9:d1:81:02:51:fb:70:
af:3a:66:58:aa:21:38:cc:c3:ae:de:9b:5a:ac:9f:ab:44:96:
af:e0:2e:a3:3b:dd:35:1a:2c:55:d1:ee:fa:34:6d:a8:d6:73:
d9:bb:06:15:b7:bd:df:b8:c1:fd:d3:94:28:1c:fb:bb:b4:fb:
4f:72:e1:d9:9a:39:6e:4a:c4:23:93:2c:1b:49:7a:31:31:f6:
cf:21:58:b0:36:cd:1a:70:4b:f6:46:bc:6b:03:dc:4a:7c:89:
be:37:b6:06:d4:e5:e7:31:ec:d4:d8:27:20:04:5b:d6:fe:a4:
e5:4c:70:40:1c:1c:6c:c4:29:22:03:40:27:8c:8f:d0:a5:25:
fb:fc:10:3f:79:39:b6:bd:7d:ea:5f:7e:cb:79:a9:c4:66:57:
b3:d5:6b:45:3e:0a:89:b9:fa:5d:35:aa:33:e8:7a:ae:02:77:
01:a9:51:6a:f7:19:5b:96:f7:b9:53:3a:b9:d2:a0:88:35:ff:
b7:32:9a:eb:26:55:b4:b1:23:01:92:db:d8:6a:53:4a:73:84:
86:fe:83:17:f5:c3:ec:53:ba:4d:4c:cd:49:59:ba:44:2e:37:
6a:f1:86:43:d5:a7:21:9a:71:6e:c9:9b:40:6e:a9:84:8a:6a:
2b:b9:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:03:55 2026 by rpki-client