Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RBgjdyEeL7aVI7mFsrWUd4-uAEU.roa
File: RBgjdyEeL7aVI7mFsrWUd4-uAEU.roa (raw, json)
Hash identifier: y/N+VYFk2xXIzaeJLoK1zcbJfQ3+l641foiy+TJ45u4=
Subject key identifier: 44:18:23:77:21:1E:2F:B6:95:23:B9:85:B2:B5:94:77:8F:AE:00:45
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0AA63E70BC87388E53D61334C673CF499
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RBgjdyEeL7aVI7mFsrWUd4-uAEU.roa
Signing time: Wed 16 Sep 2026 13:24:28 +0000
ROA not before: Wed 16 Sep 2026 13:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199415
IP address blocks: 87.85.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:63:e7:0b:c8:73:88:e5:3d:61:33:4c:67:3c:f4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 16 13:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44182377211e2fb69523b985b2b594778fae0045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:f5:f9:ac:90:5a:2e:d5:0d:5e:55:80:ec:
74:63:d5:88:f9:2c:f4:3f:b0:e2:8f:67:cf:40:22:
c8:ef:bc:0b:3c:f6:18:65:10:4e:a2:ce:9f:0b:13:
c7:bc:8e:d3:4b:64:d8:c3:ec:9b:bd:61:f4:8a:40:
d7:96:c7:14:07:f8:28:e7:fe:18:77:85:86:d1:93:
4c:58:00:85:b8:66:ce:0c:fd:30:8a:78:85:bd:f8:
99:c7:d5:c7:e5:55:ff:ef:53:78:81:6e:99:56:bc:
08:c1:7e:bf:85:3c:54:50:9a:77:02:20:a2:37:80:
b6:b2:35:9b:23:88:26:44:3f:aa:92:72:50:d8:e8:
e6:e2:5e:fe:cb:f8:8c:fe:7b:a8:87:e4:18:26:20:
ae:a9:80:32:c1:3e:0c:87:2b:63:3b:11:79:85:89:
2c:0e:4d:a1:17:9a:89:64:94:49:35:1d:82:5b:41:
2f:90:56:fd:e2:98:c7:32:79:8d:3f:bc:f4:c4:e6:
74:a0:e9:4e:79:0c:2c:6b:81:15:85:40:68:56:c7:
c7:34:ba:77:79:79:ea:60:6c:9c:58:23:96:89:e8:
d3:dc:cd:5e:24:28:99:f0:91:31:e3:ab:e6:ec:c0:
2e:4e:9f:b3:82:2f:d8:23:9b:3b:7e:19:b8:9a:0b:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:23:77:21:1E:2F:B6:95:23:B9:85:B2:B5:94:77:8F:AE:00:45
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RBgjdyEeL7aVI7mFsrWUd4-uAEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.85.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0c:13:40:6a:93:dd:f6:71:fb:94:85:99:28:e4:34:f7:02:
f2:22:0a:6e:3d:a3:13:34:0c:9b:80:46:0f:9d:87:fe:3a:32:
3f:3d:24:38:9f:a6:c6:59:e8:a9:54:bb:06:dc:d7:a6:40:9e:
6a:e1:70:9e:fa:53:16:d4:62:47:7f:74:7f:ab:d6:73:3b:6f:
66:06:fb:a9:33:5d:32:65:2b:ae:6d:1d:92:c4:b4:f3:9c:b6:
4d:25:c7:8a:18:89:1d:0a:fb:7c:bb:11:ae:1a:0a:fb:86:ec:
ac:9b:8c:92:1d:ac:ca:fb:e3:d1:5d:72:58:d0:b1:47:bb:9a:
68:a6:3b:ea:b8:9d:35:b3:9b:46:03:62:bd:92:68:ab:6b:a7:
c4:5b:e2:85:a2:28:3c:5f:eb:6b:01:b8:70:8c:f3:08:80:fc:
d9:f6:34:3d:ee:c8:50:92:04:f8:79:a0:b8:8e:a4:09:aa:7e:
e6:6f:16:0b:86:8e:f5:01:be:9f:60:59:2e:4d:65:4d:c0:03:
23:d6:ef:fa:eb:ef:60:17:5a:57:75:85:47:1b:ab:ee:2a:13:
8a:59:f2:45:75:81:8d:dd:c1:d7:7a:08:2e:da:f9:8c:61:5f:
a9:76:45:88:f7:af:4e:d4:cb:dc:99:83:34:d1:be:f6:4f:15:
df:0a:73:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCqY+cLyHOI5T1hM0xnPPSZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE2MTMyNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDE4MjM3NzIxMWUyZmI2OTUyM2I5ODViMmI1OTQ3NzhmYWUwMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o31+ayQWi7VDV5VgOx0Y9WI+Sz0
P7Dij2fPQCLI77wLPPYYZRBOos6fCxPHvI7TS2TYw+ybvWH0ikDXlscUB/go5/4Y
d4WG0ZNMWACFuGbODP0winiFvfiZx9XH5VX/71N4gW6ZVrwIwX6/hTxUUJp3AiCi
N4C2sjWbI4gmRD+qknJQ2Ojm4l7+y/iM/nuoh+QYJiCuqYAywT4MhytjOxF5hYks
Dk2hF5qJZJRJNR2CW0EvkFb94pjHMnmNP7z0xOZ0oOlOeQwsa4EVhUBoVsfHNLp3
eXnqYGycWCOWiejT3M1eJCiZ8JEx46vm7MAuTp+zgi/YI5s7fhm4mgvKkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQYI3chHi+2lSO5hbK1lHePrgBFMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvUkJnamR5RWVMN2FWSTdtRnNyV1VkNC11QUVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1X1MA0G
CSqGSIb3DQEBCwUAA4IBAQC8DBNAapPd9nH7lIWZKOQ09wLyIgpuPaMTNAybgEYP
nYf+OjI/PSQ4n6bGWeipVLsG3NemQJ5q4XCe+lMW1GJHf3R/q9ZzO29mBvupM10y
ZSuubR2SxLTznLZNJceKGIkdCvt8uxGuGgr7huysm4ySHazK++PRXXJY0LFHu5po
pjvquJ01s5tGA2K9kmira6fEW+KFoig8X+trAbhwjPMIgPzZ9jQ97shQkgT4eaC4
jqQJqn7mbxYLho71Ab6fYFkuTWVNwAMj1u/66+9gF1pXdYVHG6vuKhOKWfJFdYGN
3cHXeggu2vmMYV+pdkWI969O1MvcmYM00b72TxXfCnMY
-----END CERTIFICATE-----
Generated at Sat Sep 19 05:37:34 2026 by rpki-client