Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TIpyuz5Tj7LFtaHWAnDd-ug6J68.roa
File: TIpyuz5Tj7LFtaHWAnDd-ug6J68.roa (raw, json)
Hash identifier: rdajaIwgc3FHJAhMfLc6Uw4BEO7VS1/x5mxXdf/GK2Y=
Subject key identifier: 4C:8A:72:BB:3E:53:8F:B2:C5:B5:A1:D6:02:70:DD:FA:E8:3A:27:AF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF63B3532EB79A642A7BA19FC74D45F4F
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TIpyuz5Tj7LFtaHWAnDd-ug6J68.roa
Signing time: Tue 23 Jun 2026 20:45:35 +0000
ROA not before: Tue 23 Jun 2026 20:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 87.84.202.0/24 maxlen: 24
87.85.232.0/24 maxlen: 24
194.242.133.0/24 maxlen: 24
212.134.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:3b:35:32:eb:79:a6:42:a7:ba:19:fc:74:d4:5f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 23 20:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c8a72bb3e538fb2c5b5a1d60270ddfae83a27af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:5a:67:25:10:5e:f9:d0:8c:f1:8f:ed:15:
75:c2:e7:50:a7:ba:8a:64:1b:a4:ea:99:2b:8f:f0:
0e:2e:ed:01:d6:c7:91:f9:3d:48:af:3e:7f:d7:f4:
d6:aa:c5:ac:ec:d3:56:d6:e2:a7:2f:4f:ea:ca:01:
dc:d9:77:ad:13:71:a5:29:8f:c3:f5:07:11:b1:d6:
51:68:79:8d:65:b3:a5:63:f2:eb:64:b9:99:f9:ae:
b3:29:2a:69:11:e4:9d:5c:12:a2:11:36:a5:e6:31:
6a:e6:5c:32:77:78:61:7e:6a:61:c6:d9:f2:62:32:
b2:6f:35:ea:2e:2d:f0:e9:a4:3d:26:1f:a9:57:67:
0d:87:7f:fc:87:d8:8e:a4:7a:96:51:a7:b5:91:a4:
f2:0e:b2:8e:3d:9e:46:5e:fd:18:9c:8f:e4:4d:d7:
34:c5:e4:e1:10:3c:bd:04:3c:c2:09:50:a6:a4:c6:
d9:c6:b0:e6:da:fc:66:d9:87:c1:92:44:60:74:26:
98:d0:2c:8d:34:bf:bf:56:30:84:2f:cb:9c:99:20:
61:ba:8f:2c:ab:d7:c5:b7:91:20:c8:f4:91:e9:cb:
18:aa:d8:11:55:cf:d9:86:bc:a8:a2:a1:98:3f:8a:
c5:6f:ff:0d:08:ea:bc:17:77:1a:4a:8f:7c:74:8f:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:72:BB:3E:53:8F:B2:C5:B5:A1:D6:02:70:DD:FA:E8:3A:27:AF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TIpyuz5Tj7LFtaHWAnDd-ug6J68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.202.0/24
87.85.232.0/24
194.242.133.0/24
212.134.131.0/24
Signature Algorithm: sha256WithRSAEncryption
21:10:4f:b4:cf:92:70:ff:89:20:6b:57:dd:11:7f:af:07:0d:
94:e9:bd:10:2c:8a:89:16:12:d5:bd:60:b8:f5:a8:f1:9a:8e:
b7:91:fc:b9:50:40:0e:85:06:29:9c:4d:9b:e6:9a:41:23:ea:
84:1c:a3:15:84:c4:af:a0:66:75:04:6b:1b:83:a8:33:99:ca:
a6:dd:48:87:2d:fc:2d:d3:33:4c:e1:f4:1f:de:1a:ec:02:0d:
cc:8e:d4:62:17:a7:12:b8:30:ef:cf:5b:ca:83:e2:5f:14:09:
14:5c:86:4d:72:e5:d5:99:87:e1:b7:b5:4c:38:32:83:ee:7e:
b8:b2:5f:22:23:cd:89:4c:1b:20:91:04:f7:7b:f6:64:44:33:
7d:51:88:c3:2c:5e:83:c2:54:89:12:2f:da:0c:4d:93:c9:64:
40:02:5b:c7:e1:5d:03:7f:da:1d:72:31:8e:b6:23:1f:da:32:
ae:8e:03:6f:17:5d:b4:bd:92:18:80:6d:f6:b4:f7:10:5d:97:
2a:ec:bb:3b:ea:8d:c0:bb:db:67:7f:33:61:3c:bc:a3:69:08:
54:95:55:5c:8b:c5:3a:11:c9:97:4f:5a:63:81:38:0b:b9:79:
67:ed:17:58:e3:85:ff:6a:33:ea:85:48:c1:8b:c4:22:93:c8:
43:28:67:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ72OzUy63mmQqe6Gfx01F9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNjIzMjA0NTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzhhNzJiYjNlNTM4ZmIyYzViNWExZDYwMjcwZGRmYWU4M2EyN2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OhaZyUQXvnQjPGP7RV1wudQp7qK
ZBuk6pkrj/AOLu0B1seR+T1Irz5/1/TWqsWs7NNW1uKnL0/qygHc2XetE3GlKY/D
9QcRsdZRaHmNZbOlY/LrZLmZ+a6zKSppEeSdXBKiETal5jFq5lwyd3hhfmphxtny
YjKybzXqLi3w6aQ9Jh+pV2cNh3/8h9iOpHqWUae1kaTyDrKOPZ5GXv0YnI/kTdc0
xeThEDy9BDzCCVCmpMbZxrDm2vxm2YfBkkRgdCaY0CyNNL+/VjCEL8ucmSBhuo8s
q9fFt5EgyPSR6csYqtgRVc/ZhryooqGYP4rFb/8NCOq8F3caSo98dI88rQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEyKcrs+U4+yxbWh1gJw3froOievMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVElweXV6NVRqN0xGdGFIV0FuRGQtdWc2SjY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV1TKAwQA
V1XoAwQAwvKFAwQA1IaDMA0GCSqGSIb3DQEBCwUAA4IBAQAhEE+0z5Jw/4kga1fd
EX+vBw2U6b0QLIqJFhLVvWC49ajxmo63kfy5UEAOhQYpnE2b5ppBI+qEHKMVhMSv
oGZ1BGsbg6gzmcqm3UiHLfwt0zNM4fQf3hrsAg3MjtRiF6cSuDDvz1vKg+JfFAkU
XIZNcuXVmYfht7VMODKD7n64sl8iI82JTBsgkQT3e/ZkRDN9UYjDLF6DwlSJEi/a
DE2TyWRAAlvH4V0Df9odcjGOtiMf2jKujgNvF120vZIYgG32tPcQXZcq7Ls76o3A
u9tnfzNhPLyjaQhUlVVci8U6EcmXT1pjgTgLuXln7RdY44X/ajPqhUjBi8Qik8hD
KGeg
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:01:54 2026 by rpki-client