Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TvII7TFCCsHguxP37PtlEmhVSWk.roa
File: TvII7TFCCsHguxP37PtlEmhVSWk.roa (raw, json)
Hash identifier: vhiCi+6SIur5IbnSa4BPnL0vDnYMivzYW8S45c02dUs=
Subject key identifier: 4E:F2:08:ED:31:42:0A:C1:E0:BB:13:F7:EC:FB:65:12:68:55:49:69
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0518DF82CAA6683FBD73ABFE47F838D83
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TvII7TFCCsHguxP37PtlEmhVSWk.roa
Signing time: Sun 30 Aug 2026 07:24:13 +0000
ROA not before: Sun 30 Aug 2026 07:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 87.83.121.0/24 maxlen: 24
87.83.233.0/24 maxlen: 24
87.85.240.0/24 maxlen: 24
195.72.172.0/24 maxlen: 24
212.135.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:8d:f8:2c:aa:66:83:fb:d7:3a:bf:e4:7f:83:8d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 30 07:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ef208ed31420ac1e0bb13f7ecfb651268554969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:82:90:49:1e:ac:cd:72:89:61:9d:cf:d1:
12:18:a7:fd:71:21:65:3f:3c:e6:e5:24:8d:51:5a:
42:7e:e1:75:79:25:7f:e5:9d:46:ba:1e:07:61:4c:
e7:e0:a7:1a:45:3e:4f:8d:8d:9b:e7:79:25:20:85:
6f:39:21:b4:fd:bd:51:cc:a5:cd:1c:bc:25:4c:33:
8c:29:77:82:7f:67:fe:37:cb:40:64:b2:2d:e0:24:
79:ef:5b:13:7a:a1:15:f6:16:a6:b9:77:d9:9b:65:
df:61:02:1b:f8:d8:72:7e:50:45:f2:38:d9:6f:7d:
82:29:2a:0d:1a:f7:27:3d:2a:e4:3f:ca:b0:47:6c:
cd:b0:ef:60:7a:48:ca:98:5b:38:72:21:73:db:01:
94:65:11:23:9c:41:5a:6a:79:6c:5e:3e:b0:f6:7d:
e0:e8:a0:01:fc:72:f3:ee:82:0f:10:03:b2:6b:57:
45:fb:d8:ca:a3:79:ec:18:21:8c:fb:5b:c9:2d:83:
94:bc:f3:9a:94:70:bb:20:e3:e5:6a:2b:3c:4e:96:
02:69:be:f9:e0:6b:e9:48:f2:39:76:01:25:5a:30:
ca:af:c5:b7:9d:df:4c:fe:46:1e:6a:fb:08:88:82:
86:fa:a6:8d:56:88:3e:dd:7f:11:3b:91:64:91:5f:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:08:ED:31:42:0A:C1:E0:BB:13:F7:EC:FB:65:12:68:55:49:69
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/TvII7TFCCsHguxP37PtlEmhVSWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.121.0/24
87.83.233.0/24
87.85.240.0/24
195.72.172.0/24
212.135.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:99:2a:9a:30:25:3c:6f:0b:f9:0e:c2:59:00:47:cf:58:61:
1f:82:f8:ac:f6:2c:d1:cb:59:5a:10:d1:91:09:d5:85:73:97:
bf:f4:5f:85:45:0d:54:61:b7:64:d5:82:32:f8:56:13:d6:1a:
89:0f:6f:8e:7f:13:44:58:2b:b7:b7:11:b2:62:9f:b1:12:0f:
15:29:a2:60:25:5a:b3:98:6b:59:2d:c7:95:f3:c9:11:2f:57:
8e:3f:a1:0d:e9:c8:62:71:48:b9:26:33:9b:2d:fc:96:eb:5c:
02:e4:79:33:9b:46:d9:51:0e:20:a3:b0:39:31:a1:e2:ab:4f:
ad:5e:7d:33:7c:a5:e2:51:26:80:cf:d4:99:47:25:af:56:da:
bf:bc:ff:73:f6:01:05:7d:58:09:55:ca:ec:0f:56:20:f3:3a:
91:b2:d5:6d:2e:e1:2c:e5:d4:f7:a9:0a:a1:d7:b6:0a:d1:e1:
d6:3c:df:f3:f6:76:02:28:d8:80:91:4d:15:22:37:1d:f1:c7:
94:88:1c:fa:48:6b:5b:bc:4b:c6:ce:ed:07:59:0d:ef:3b:b2:
78:9a:1f:fe:ba:15:26:40:14:e7:f4:92:57:b0:aa:23:b0:81:
bc:0d:75:e2:af:c2:28:5b:01:bd:51:13:d0:e6:40:b9:a4:28:
db:da:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 16:53:12 2026 by rpki-client