Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VpXizxw8XqYqmm1UtwYzopXrJYM.roa
File: VpXizxw8XqYqmm1UtwYzopXrJYM.roa (raw, json)
Hash identifier: yJrp0sgkuc1Mv8XiivpG+NAu9+A/tRmAJLMP+DrM1FQ=
Subject key identifier: 56:95:E2:CF:1C:3C:5E:A6:2A:9A:6D:54:B7:06:33:A2:95:EB:25:83
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A03B074A98D0CB1B6ACE8706DC4486A5B5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VpXizxw8XqYqmm1UtwYzopXrJYM.roa
Signing time: Tue 25 Aug 2026 22:25:28 +0000
ROA not before: Tue 25 Aug 2026 22:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 87.84.76.0/24 maxlen: 24
212.135.16.0/24 maxlen: 24
212.135.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:07:4a:98:d0:cb:1b:6a:ce:87:06:dc:44:86:a5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 25 22:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5695e2cf1c3c5ea62a9a6d54b70633a295eb2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:6a:84:5e:fb:29:59:30:e7:4f:be:e8:b0:
66:6a:5f:ef:30:34:09:0f:c5:f2:8a:dc:d5:57:fd:
9e:2b:5b:9b:24:d0:84:46:d4:8b:fc:0e:ae:4b:dc:
f1:4f:5d:62:4f:c5:b1:36:c0:88:66:6f:0b:f7:b6:
d2:bb:c6:31:9a:e2:7c:ed:9a:6f:79:17:85:52:7a:
cf:33:40:c6:0b:74:e7:ef:c8:37:0c:53:03:aa:8a:
14:ac:67:50:b5:f2:9c:78:61:d6:e2:95:d4:ec:cf:
f9:11:77:83:54:49:4c:29:47:78:69:c4:7b:b5:f1:
55:50:bf:0b:8a:96:1b:d9:bb:7e:b5:7c:9c:d7:59:
f0:68:64:c5:b5:29:6b:99:c0:f7:c7:81:3d:10:ee:
f0:42:c2:57:97:94:14:bb:5e:fd:74:99:b9:f7:13:
aa:d8:7d:f4:e8:09:1a:03:4c:a9:00:eb:c2:12:6f:
55:b0:62:c2:08:9a:0e:a0:b5:a7:87:a7:c9:52:66:
d2:b8:c4:ca:68:1c:71:8b:81:49:8e:fa:a2:8d:f4:
48:f7:71:53:4f:83:b0:c4:c7:48:e4:58:ae:9a:ca:
5b:54:c2:b0:0e:d7:d7:ea:57:10:b4:00:fc:94:f6:
5b:49:44:37:bc:59:bf:c7:47:7d:66:27:e6:71:98:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:E2:CF:1C:3C:5E:A6:2A:9A:6D:54:B7:06:33:A2:95:EB:25:83
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VpXizxw8XqYqmm1UtwYzopXrJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.76.0/24
212.135.16.0/24
212.135.196.0/24
Signature Algorithm: sha256WithRSAEncryption
13:12:98:b4:ab:53:b1:76:d9:5d:15:d6:5a:3f:9e:9a:16:2f:
a0:bf:6e:fd:b3:4f:a1:0c:63:0d:9f:9f:19:09:f5:e6:d2:88:
e6:2d:73:55:8f:9d:42:4d:cf:e1:76:c4:fc:31:6a:7f:35:76:
b4:a7:1c:1f:46:d9:d7:3c:12:59:8c:3e:18:a6:bd:bc:4f:95:
10:ca:3e:67:08:02:57:c2:de:9b:f3:c3:9d:75:1d:6b:5f:b5:
a1:18:07:64:ff:c0:8e:32:35:b1:13:82:dc:68:8d:b5:47:2a:
da:a1:fb:b4:57:62:bc:17:72:cd:37:42:fb:f3:2f:99:cd:53:
8f:2c:16:e8:b6:e9:8e:86:e3:15:bc:68:87:46:f8:7c:b3:36:
45:81:ed:1b:2a:b1:2e:25:b9:c2:b4:94:6a:81:f1:10:7a:32:
3a:6e:fd:f7:99:df:ff:6b:20:d0:79:72:4a:52:54:f6:29:f9:
df:3a:97:ac:61:f8:a1:fb:03:42:df:45:3c:49:cc:1a:a1:e3:
c6:08:32:54:00:49:ad:2f:e1:ce:c1:e2:79:d3:38:28:24:b4:
0e:49:c6:41:f4:f8:44:00:a1:1a:80:47:31:3d:a4:27:72:68:
70:3e:09:5c:a5:f7:d7:cf:70:84:19:23:ab:fb:71:fa:e2:38:
c3:02:ce:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:42:01 2026 by rpki-client