Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kj3GOOwUbRa3Yd4w9whwNXvSuGQ.roa
File: kj3GOOwUbRa3Yd4w9whwNXvSuGQ.roa (raw, json)
Hash identifier: EluwAIu5M4gsujM/ZejDJxD2uHI1umIaN1NsCsrQMfE=
Subject key identifier: 92:3D:C6:38:EC:14:6D:16:B7:61:DE:30:F7:08:70:35:7B:D2:B8:64
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1130216C89543E20FA79D32B4A2B697ED
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kj3GOOwUbRa3Yd4w9whwNXvSuGQ.roa
Signing time: Tue 06 Oct 2026 20:57:46 +0000
ROA not before: Tue 06 Oct 2026 20:57:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214467
IP address blocks: 87.83.84.0/24 maxlen: 24
87.86.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:02:16:c8:95:43:e2:0f:a7:9d:32:b4:a2:b6:97:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 6 20:57:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=923dc638ec146d16b761de30f70870357bd2b864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:ff:0f:bc:4b:c7:c8:50:eb:68:d2:b4:0f:
07:e3:6a:68:23:ed:c4:20:73:a3:c2:17:03:b7:f2:
80:0a:0c:a2:75:b3:b8:62:3c:d8:8f:f4:a9:38:32:
ea:0c:5e:b5:78:93:19:d2:fb:47:e2:6f:c8:db:ef:
4f:97:dc:4b:47:e0:ae:b8:89:08:9e:54:58:90:3f:
b7:11:1c:92:fa:74:85:b9:97:1c:23:00:0d:7e:a8:
8e:e1:3b:f9:48:31:02:95:8f:4b:2a:90:6a:b5:48:
e6:1b:1b:94:bc:0c:7f:02:44:73:eb:9b:e8:52:77:
b8:9b:ab:a5:e6:37:01:92:11:96:0f:19:61:e4:92:
ce:92:56:81:dc:11:54:a9:1e:a3:bc:52:54:8d:02:
9b:eb:2e:8d:94:b2:65:54:b7:a4:84:1b:d3:67:b4:
8d:93:71:f6:35:44:c6:49:fc:c8:43:3f:34:2c:aa:
53:73:b2:5e:70:53:dc:a1:21:2a:b6:4a:1e:b6:aa:
bd:95:9b:a0:72:81:95:19:c0:2a:42:fb:69:10:d7:
93:84:86:02:39:da:c5:14:ff:d0:41:c6:ae:3f:5e:
f6:93:45:be:04:26:01:99:05:5e:0e:5b:5a:cb:78:
aa:e1:67:c9:5d:7c:75:5d:13:01:92:3e:58:81:c6:
38:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:C6:38:EC:14:6D:16:B7:61:DE:30:F7:08:70:35:7B:D2:B8:64
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/kj3GOOwUbRa3Yd4w9whwNXvSuGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.84.0/24
87.86.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:81:71:c6:ad:ad:99:77:c6:7a:23:72:9b:b5:ed:40:51:e8:
ae:2a:4f:1a:93:90:33:9d:3f:01:55:2a:0f:87:86:24:af:ba:
2a:9e:da:e8:6d:f5:1c:50:d1:6a:b7:0f:75:11:8d:3e:77:9e:
81:ba:0a:5b:a9:f9:b2:94:e0:d2:88:3e:5d:7b:12:7b:cf:f9:
62:8c:66:c8:41:df:df:60:2c:fe:6e:bd:2b:da:39:08:1a:b5:
f6:9e:06:7e:e4:de:e7:e5:80:9e:86:96:4a:b8:02:0e:28:a0:
47:85:13:9e:5e:ff:7b:4b:1f:d2:dc:76:c5:5f:62:a6:a0:bc:
fc:84:4f:75:af:e6:6b:93:e1:b2:d8:12:07:fb:46:6d:80:62:
be:0d:fe:6e:68:47:73:38:4c:51:1b:27:29:0c:df:dd:65:6a:
22:9c:af:85:b6:44:b3:21:7b:b1:14:84:01:87:5e:0c:ca:1a:
08:dc:a5:2f:48:26:01:dd:a4:2c:68:42:6d:be:6c:de:91:32:
0a:4b:80:b0:49:73:ad:dd:11:3f:7c:c3:f4:fa:1f:75:33:9a:
d7:d4:e4:7c:a2:dd:ad:a8:6a:54:b2:ef:fe:94:6c:31:3c:5a:
90:0f:9a:f8:e5:a2:e8:b9:85:d2:e6:21:14:3f:3b:85:01:8e:
ec:d1:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:19:56 2026 by rpki-client