Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VfQn-mw2PbyjGsMk53q9MKqPX_s.roa
File: VfQn-mw2PbyjGsMk53q9MKqPX_s.roa (raw, json)
Hash identifier: OynUoqJAUkURPSunEIRN22tXp+whkuHckmoSJg2WDHY=
Subject key identifier: 55:F4:27:FA:6C:36:3D:BC:A3:1A:C3:24:E7:7A:BD:30:AA:8F:5F:FB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E97E076E4EF906E0F2A0CF9C641DBB9E7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VfQn-mw2PbyjGsMk53q9MKqPX_s.roa
Signing time: Fri 05 Jun 2026 13:02:10 +0000
ROA not before: Fri 05 Jun 2026 13:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 87.86.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:e0:76:e4:ef:90:6e:0f:2a:0c:f9:c6:41:db:b9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 5 13:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55f427fa6c363dbca31ac324e77abd30aa8f5ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:ac:01:98:c7:c1:84:ac:3e:15:ee:6e:50:
ea:77:28:19:27:5b:7c:14:c6:b0:50:21:7c:c1:6a:
fd:07:ba:66:d4:95:b3:e8:19:55:b7:54:34:d6:73:
fd:da:a0:9f:1c:13:1e:de:28:ff:a9:12:57:70:d9:
a7:8a:c4:ba:ab:68:20:0d:47:7e:f2:d3:a8:6b:5c:
0b:cd:72:5e:3c:4d:13:56:94:8b:89:b7:91:e4:23:
34:c0:85:50:66:5a:dd:a6:78:3a:23:d8:9b:a3:b4:
86:3f:86:8b:1d:d7:4e:c8:c1:be:f3:06:ae:cd:7e:
56:0e:76:ba:ba:c1:3c:73:f5:c1:56:a7:e1:ab:e3:
d1:5e:99:13:7c:4a:8c:a7:31:bb:b3:8f:e1:2a:e2:
6f:59:3c:76:da:fa:ee:ac:8a:ca:b8:9f:fd:7a:70:
5a:ec:f4:22:78:ba:b7:8d:de:a9:10:36:4c:9f:8b:
ed:e6:53:89:e5:84:44:50:ed:4a:ea:5e:ea:fd:f2:
29:87:01:c1:1c:35:1b:da:99:c6:99:a7:0a:92:5f:
7c:7e:9c:4d:e1:f7:40:26:7f:9d:69:6c:a4:75:c6:
69:c1:c1:66:2d:16:f8:41:6f:9c:7f:59:31:de:f8:
a1:35:a3:ee:3a:61:ea:39:07:5a:c7:d0:79:71:02:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F4:27:FA:6C:36:3D:BC:A3:1A:C3:24:E7:7A:BD:30:AA:8F:5F:FB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VfQn-mw2PbyjGsMk53q9MKqPX_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.181.0/24
Signature Algorithm: sha256WithRSAEncryption
07:86:d9:6f:e5:ef:7e:b2:07:22:c1:0d:b2:fb:31:e7:06:92:
57:e2:02:e5:1e:84:c1:29:5f:8d:47:28:21:77:51:1a:4a:d4:
a0:07:7f:d3:46:d9:eb:8a:5c:d3:39:bf:35:b0:d1:bd:fc:6e:
4b:62:2a:e6:bd:d3:9b:1d:43:bf:4f:f9:ea:65:c2:3d:fa:40:
31:87:d7:21:80:1c:23:3a:63:eb:65:12:f5:5d:79:35:50:e9:
31:9e:0b:87:ab:0e:99:49:09:ae:fa:4c:41:47:13:c7:4e:80:
88:9b:bb:5a:e9:b6:7d:a9:1e:2d:a0:51:d3:8f:a3:a5:4e:5a:
95:34:8a:5d:1d:c6:57:c3:40:ab:65:23:00:3a:4c:dc:87:ca:
0f:a6:aa:f6:87:1a:f2:f6:fb:ee:60:c1:6b:4b:1f:7d:6b:12:
81:51:3a:51:53:e2:84:95:40:2c:69:83:93:18:70:a5:dd:6b:
e3:e0:b9:29:07:72:34:77:04:d5:c7:42:fd:4f:9b:e2:06:81:
b4:d7:b3:62:7a:ca:47:7e:d6:32:0d:5b:f7:32:f4:ec:3d:fe:
93:49:15:19:3b:71:6f:5d:47:6d:fe:73:f3:99:50:01:5a:01:
c9:23:3a:3a:9b:48:fe:58:22:25:d6:ff:e8:fc:30:d7:ad:ce:
ab:ad:71:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:41 2026 by rpki-client