Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YfW1fXWhUzgIOWQhuyXw4hNPFVk.roa
File: YfW1fXWhUzgIOWQhuyXw4hNPFVk.roa (raw, json)
Hash identifier: TWJo9biGulZd7x2u2vKaIuG+T7q1/3+sYxYRgX2R8R0=
Subject key identifier: 61:F5:B5:7D:75:A1:53:38:08:39:64:21:BB:25:F0:E2:13:4F:15:59
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F24434E507C47914C3C41A9DDFF16B680
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YfW1fXWhUzgIOWQhuyXw4hNPFVk.roa
Signing time: Thu 02 Jul 2026 19:16:58 +0000
ROA not before: Thu 02 Jul 2026 19:16:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 87.84.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:43:4e:50:7c:47:91:4c:3c:41:a9:dd:ff:16:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 2 19:16:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61f5b57d75a1533808396421bb25f0e2134f1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:f1:56:ad:f8:db:e3:bf:26:8d:9b:3b:a6:
1b:91:e3:7b:70:4b:ad:b0:95:86:8d:d5:2b:24:d3:
62:9e:5d:35:45:83:3a:ae:71:c5:ab:11:d4:10:97:
57:05:62:df:7c:a4:c8:9d:9a:da:c9:1c:7a:48:cb:
23:18:c4:41:0a:12:02:d5:d4:41:40:0b:23:75:35:
4a:cd:16:20:1f:a3:ee:4c:3e:aa:47:9d:cd:a2:12:
e6:77:51:18:98:a4:99:0c:5e:82:b0:7a:1e:01:90:
46:db:d3:db:02:df:95:db:66:99:f0:a0:b5:36:ab:
ea:52:51:3c:04:b7:df:a6:63:56:6f:1f:2a:52:f6:
36:fd:0d:30:06:bb:c1:36:1e:04:92:1b:44:52:f9:
03:b1:ce:94:81:5c:87:72:07:18:f2:98:c0:5f:c2:
ea:a0:01:41:f3:99:b6:11:e5:6b:79:67:62:0f:34:
a0:d3:2c:87:21:23:86:63:c4:c6:5d:24:13:16:66:
51:1c:09:b8:bf:b7:46:83:10:6f:6f:d2:57:f3:d0:
77:26:13:a6:07:90:5d:2b:8d:a7:80:b3:7b:b3:7b:
c0:86:97:f1:2b:c5:18:3f:4c:a0:07:b5:05:62:d6:
d9:77:9b:c0:3d:d5:88:7e:34:17:ff:03:0c:53:37:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F5:B5:7D:75:A1:53:38:08:39:64:21:BB:25:F0:E2:13:4F:15:59
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/YfW1fXWhUzgIOWQhuyXw4hNPFVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.71.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:14:cd:48:37:15:1a:c4:31:ad:87:03:61:75:f2:f1:f0:df:
c3:96:45:fb:64:a5:15:34:a8:5d:c6:03:0a:36:41:4e:83:94:
49:04:ee:c4:db:fd:4e:37:9f:88:26:28:a4:99:dc:70:98:d3:
ab:f0:f9:38:da:7f:98:6a:7e:58:87:80:77:3a:73:27:2f:10:
2a:2a:43:0b:d8:9c:ba:a5:5d:25:15:9e:c6:9a:06:b9:1d:49:
51:7c:60:4f:e9:89:54:ba:26:da:92:66:4c:ba:a7:82:66:f7:
d5:23:44:84:c4:a3:d6:09:3c:c2:3a:e0:d6:64:9a:a9:3d:27:
b5:63:62:ea:1f:b2:b7:f1:8b:dd:78:b5:4a:09:7d:b3:f9:76:
91:65:04:5d:ae:d5:7a:01:2f:6a:08:61:8d:41:31:fb:62:3a:
bc:f2:a2:93:2b:37:bb:49:1b:28:42:1c:a4:11:33:b2:58:56:
69:bc:fd:eb:ab:09:84:d7:27:d8:e7:47:7e:dc:80:17:ca:59:
be:59:c3:02:7a:6d:e7:36:48:6a:25:ae:e6:d5:cc:13:17:49:
b2:d3:44:43:e6:b9:1c:9a:ca:47:fc:d6:a7:d0:f4:7c:e0:32:
be:78:a5:5d:60:17:1b:8d:7f:96:b3:34:56:93:13:13:3c:53:
87:ee:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:40 2026 by rpki-client