Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dppkNKatNsazWpOTYNm_z8A0p10.roa
File: dppkNKatNsazWpOTYNm_z8A0p10.roa (raw, json)
Hash identifier: rHWgUj5TsC1Cvi3A7krzzhU3yeCc3zEZtHXhqimrONc=
Subject key identifier: 76:9A:64:34:A6:AD:36:C6:B3:5A:93:93:60:D9:BF:CF:C0:34:A7:5D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FCBC02A238A6BCEF26D36B50E92E9B668
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dppkNKatNsazWpOTYNm_z8A0p10.roa
Signing time: Tue 04 Aug 2026 07:49:56 +0000
ROA not before: Tue 04 Aug 2026 07:49:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47447
IP address blocks: 87.83.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:c0:2a:23:8a:6b:ce:f2:6d:36:b5:0e:92:e9:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 4 07:49:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=769a6434a6ad36c6b35a939360d9bfcfc034a75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:13:0f:fd:5b:03:10:3e:3f:f0:32:76:a6:
83:b2:ac:ff:31:b1:c9:07:2b:bb:e3:b3:bd:56:1c:
5e:f7:1b:ae:8a:d2:7e:11:5a:d7:62:ea:5f:b5:6a:
8c:3b:2d:35:61:c3:41:17:b3:e5:2d:46:bf:b6:a3:
5c:6a:bd:32:c8:04:f6:72:e0:67:7a:fd:cf:9f:c3:
e9:58:60:bb:4d:3c:d1:98:35:e9:eb:f5:9c:67:47:
ca:4c:1d:c0:d2:90:0f:42:9c:3e:85:40:00:72:19:
f8:6d:d3:7f:20:58:31:5b:64:21:9f:26:55:76:db:
3c:38:92:e6:86:d2:12:06:40:5c:80:65:3c:71:8a:
77:ca:d0:b7:d2:0b:6b:bb:fb:44:30:b4:3d:14:d9:
31:df:b0:0f:90:55:e5:7a:57:f4:80:c2:4d:2b:53:
12:72:a3:92:54:f6:3a:32:1c:50:53:fe:8b:4b:9d:
a8:e3:24:b5:6f:c0:86:40:4b:c4:83:7b:aa:df:01:
58:ec:08:b0:92:3f:67:a0:62:5f:03:c1:d5:3a:ca:
5c:84:ec:ef:3b:26:68:47:e5:2e:54:6d:80:97:f8:
79:4b:1e:b6:08:d4:0e:6b:87:b9:8b:52:e2:f7:70:
9e:50:c1:d6:e2:10:db:b3:c3:0b:d4:e8:ba:a5:14:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:64:34:A6:AD:36:C6:B3:5A:93:93:60:D9:BF:CF:C0:34:A7:5D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/dppkNKatNsazWpOTYNm_z8A0p10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.14.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:7e:14:66:04:60:e9:2d:4d:33:10:af:74:d8:c4:8b:66:e9:
f8:3e:95:84:60:ea:42:8d:e5:2f:c3:97:9a:a4:6c:61:cf:83:
ad:c1:09:de:88:43:b2:43:68:0a:3e:eb:96:43:87:7d:ac:b7:
ce:3b:8d:c0:eb:a7:cb:55:cc:7a:83:38:f9:85:57:df:95:a9:
ed:ea:66:d5:bd:e3:0e:19:ea:da:67:02:33:6e:cf:4f:bc:f3:
96:d2:22:40:ed:49:78:46:63:59:20:8e:f9:a4:90:ac:b1:11:
21:8b:0c:6f:64:71:9c:65:b7:4c:1e:af:19:36:15:fc:a4:45:
37:2a:e6:9c:e2:3d:3d:f1:8a:a3:e4:67:fe:c7:32:62:c8:c6:
29:de:19:6b:dd:b3:40:6e:94:b2:99:29:16:a6:fc:fc:02:bc:
13:c6:ee:86:20:2a:05:8f:cb:04:06:c1:4c:6f:f3:af:71:71:
30:c8:b7:b4:3b:aa:8b:77:db:bf:e5:d5:c3:b7:ea:1e:9d:0d:
27:f1:b7:bf:37:ac:a9:ac:80:57:bb:16:58:1f:ed:d8:d1:b7:
cf:79:a3:27:1e:c1:41:e4:05:75:26:45:87:4c:64:9d:0a:38:
3b:9f:19:79:7a:df:29:96:8a:27:4a:08:5e:5a:2c:ab:2b:f6:
89:5a:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:37:58 2026 by rpki-client