Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dQfv1-BZvSLqQSMz7K_bGhPyXdY.roa
File: dQfv1-BZvSLqQSMz7K_bGhPyXdY.roa (raw, json)
Hash identifier: WywpuyAPKDciJk352zOUbOYSIV+5oFohN/Zur6ax0IY=
Subject key identifier: 75:07:EF:D7:E0:59:BD:22:EA:41:23:33:EC:AF:DB:1A:13:F2:5D:D6
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F453F016797467C9356174631FE8167D0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dQfv1-BZvSLqQSMz7K_bGhPyXdY.roa
Signing time: Thu 09 Jul 2026 04:59:44 +0000
ROA not before: Thu 09 Jul 2026 04:59:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 87.82.192.0/24 maxlen: 24
87.83.60.0/24 maxlen: 24
87.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:3f:01:67:97:46:7c:93:56:17:46:31:fe:81:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 9 04:59:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7507efd7e059bd22ea412333ecafdb1a13f25dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:50:19:36:db:15:29:59:d3:16:d2:22:cc:
62:76:cd:80:8c:90:7a:d8:3d:ff:43:ea:97:cf:c4:
02:49:fa:e6:55:83:34:61:76:2e:c4:27:0a:99:c0:
e6:b0:49:f9:f7:d9:72:18:de:ab:2a:ea:ff:43:c7:
82:5c:40:53:9d:a0:31:b2:fc:69:2a:86:c7:d7:fa:
26:4a:39:9f:e9:4c:35:d3:b2:cc:fc:8e:2f:26:92:
0c:eb:a3:cf:50:ad:b0:89:f2:6d:2f:34:55:db:9d:
61:8a:1e:2f:f0:2e:01:68:bc:bb:e4:aa:c8:e0:4e:
e3:b6:83:18:f5:d9:9c:64:e6:91:38:e9:b9:10:3f:
77:72:aa:5c:f1:bd:47:eb:df:42:33:5f:33:39:3e:
fa:16:3f:83:1f:4d:e3:ba:ef:bf:26:d1:7d:c4:d0:
9a:8d:9b:e8:9a:5c:2e:b9:6a:5b:48:e6:df:c7:87:
15:57:a7:19:a8:55:b9:08:9f:84:df:0d:4e:5c:90:
1c:ac:46:c5:1d:db:74:c2:e8:51:2c:81:17:ac:df:
71:22:42:7c:ce:35:c8:2b:50:40:3a:82:48:7d:bf:
84:c0:0e:33:90:61:70:1c:d8:87:e8:65:c7:db:3e:
98:3e:18:dd:5e:1f:4a:80:8c:0d:f5:ff:1b:b9:8e:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:EF:D7:E0:59:BD:22:EA:41:23:33:EC:AF:DB:1A:13:F2:5D:D6
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dQfv1-BZvSLqQSMz7K_bGhPyXdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.192.0/24
87.83.60.0/24
87.83.195.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ed:b8:64:12:fc:c7:bd:85:6e:c9:95:a0:57:e4:00:71:0d:
34:e6:71:e7:e3:bc:57:03:c0:d2:87:4b:dc:36:26:62:5e:6b:
2a:2e:03:5b:15:21:58:b6:71:60:eb:5e:4b:71:c0:d4:53:b8:
41:4b:d9:9d:46:43:35:ef:f0:2a:8c:4f:b7:2f:30:64:fd:7d:
2b:01:20:7d:79:10:3c:3c:71:1e:6e:e2:6b:a2:f4:9e:5f:1d:
a1:cd:d6:bb:87:5f:a7:eb:3f:c7:4f:c8:0d:81:57:99:7a:e4:
9c:2e:12:b8:b6:ec:d2:27:2a:09:39:4f:bf:55:b8:9f:97:d3:
d7:d2:21:b7:b3:48:62:27:11:92:c2:1d:2f:a3:21:92:3c:fd:
63:2b:6f:b0:44:fa:2c:c0:05:e4:79:b2:c4:97:ff:08:c3:58:
39:b3:32:b6:9f:1c:43:68:fd:58:11:de:f8:62:6b:ae:06:06:
3f:7e:23:4c:75:1e:b3:d5:fa:89:4b:db:78:48:52:f0:1a:de:
9f:14:52:4a:35:f5:ee:83:e8:5b:2d:92:38:b3:84:cf:72:c6:
12:3a:b6:9d:4b:b6:b0:72:31:34:17:0e:2b:1b:e9:a5:92:38:
f8:0f:19:ad:06:d6:02:61:b5:5c:69:b8:88:bb:eb:15:9d:3d:
4b:ad:bb:37
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9FPwFnl0Z8k1YXRjH+gWfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzA5MDQ1OTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTA3ZWZkN2UwNTliZDIyZWE0MTIzMzNlY2FmZGIxYTEzZjI1ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzilQGTbbFSlZ0xbSIsxids2AjJB6
2D3/Q+qXz8QCSfrmVYM0YXYuxCcKmcDmsEn599lyGN6rKur/Q8eCXEBTnaAxsvxp
KobH1/omSjmf6Uw107LM/I4vJpIM66PPUK2wifJtLzRV251hih4v8C4BaLy75KrI
4E7jtoMY9dmcZOaROOm5ED93cqpc8b1H699CM18zOT76Fj+DH03juu+/JtF9xNCa
jZvomlwuuWpbSObfx4cVV6cZqFW5CJ+E3w1OXJAcrEbFHdt0wuhRLIEXrN9xIkJ8
zjXIK1BAOoJIfb+EwA4zkGFwHNiH6GXH2z6YPhjdXh9KgIwN9f8buY7vjQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHUH79fgWb0i6kEjM+yv2xoT8l3WMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvZFFmdjEtQlp2U0xxUVNNejdLX2JHaFB5WGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV1LAAwQA
V1M8AwQAV1PDMA0GCSqGSIb3DQEBCwUAA4IBAQCU7bhkEvzHvYVuyZWgV+QAcQ00
5nHn47xXA8DSh0vcNiZiXmsqLgNbFSFYtnFg615LccDUU7hBS9mdRkM17/AqjE+3
LzBk/X0rASB9eRA8PHEebuJrovSeXx2hzda7h1+n6z/HT8gNgVeZeuScLhK4tuzS
JyoJOU+/Vbifl9PX0iG3s0hiJxGSwh0voyGSPP1jK2+wRPoswAXkebLEl/8Iw1g5
szK2nxxDaP1YEd74YmuuBgY/fiNMdR6z1fqJS9t4SFLwGt6fFFJKNfXug+hbLZI4
s4TPcsYSOradS7awcjE0Fw4rG+mlkjj4DxmtBtYCYbVcabiIu+sVnT1Lrbs3
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client