Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/l4SmMC4WrntsesAnUBcOpssd4-Q.roa
File: l4SmMC4WrntsesAnUBcOpssd4-Q.roa (raw, json)
Hash identifier: F7UEGs7Z46yx3sXuHGHF/U9h/OdSkLrIEpj4mACBCcw=
Subject key identifier: 97:84:A6:30:2E:16:AE:7B:6C:7A:C0:27:50:17:0E:A6:CB:1D:E3:E4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFA9EA71EC996245293508136A9350938
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/l4SmMC4WrntsesAnUBcOpssd4-Q.roa
Signing time: Thu 13 Aug 2026 10:15:29 +0000
ROA not before: Thu 13 Aug 2026 10:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149513
IP address blocks: 87.83.216.0/23 maxlen: 24
87.83.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Aug 2026 13:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:9e:a7:1e:c9:96:24:52:93:50:81:36:a9:35:09:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 10:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9784a6302e16ae7b6c7ac02750170ea6cb1de3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:22:92:85:78:c4:6b:b1:6a:d0:f6:0e:d6:
18:ab:d6:81:67:9b:e0:59:28:fe:f9:00:17:5b:e5:
f2:fa:55:62:f5:99:37:8c:f8:2c:cf:57:fd:61:b4:
27:47:07:ef:05:0e:bf:c9:53:03:0b:83:fc:6e:a9:
11:37:99:c4:6f:e1:c7:17:27:01:ea:51:d9:3e:e2:
a5:37:88:15:b6:00:56:5a:da:5e:cc:d3:ef:97:4a:
5d:4e:f1:fd:65:40:10:9a:53:91:ed:aa:da:c2:5b:
70:a1:16:75:9e:7a:a9:ce:8d:de:29:f6:ea:9b:7f:
9d:30:40:56:4a:bc:48:ca:de:50:b9:71:ac:2a:a0:
23:87:06:21:07:e3:32:f3:03:0b:26:47:e3:38:a9:
f9:84:ad:8d:65:32:9b:d9:52:09:20:7c:96:ae:08:
a7:94:c4:97:e3:f7:13:9d:6d:c8:fa:16:d2:59:ad:
e0:d6:43:ff:ed:c2:91:0c:42:7d:13:20:eb:90:88:
60:d2:5c:aa:78:12:6d:88:40:d1:60:89:3c:98:a0:
0c:dd:ad:55:08:c0:d9:90:b9:5c:c3:ec:ab:b6:7c:
3a:4c:a2:4c:70:cb:85:96:b8:13:2f:cc:1d:2e:4f:
40:51:c8:ab:8c:4a:6c:c8:45:31:63:2d:1a:f0:6b:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:84:A6:30:2E:16:AE:7B:6C:7A:C0:27:50:17:0E:A6:CB:1D:E3:E4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/l4SmMC4WrntsesAnUBcOpssd4-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
87.83.234.0/23
Signature Algorithm: sha256WithRSAEncryption
46:fa:b3:2d:54:fd:ac:24:b7:b6:0f:67:bf:6f:4b:05:62:d4:
08:72:72:5e:a0:0b:de:37:43:92:38:54:6b:fc:2b:e2:4d:7c:
47:4f:e7:05:77:29:aa:31:75:51:de:0f:38:ba:55:24:b7:19:
cd:e0:38:65:17:5f:8e:79:61:d4:27:08:b5:bc:3a:fa:39:44:
b6:f5:42:bb:7d:ee:68:21:ac:e6:36:b2:cc:12:c2:21:80:2e:
2e:09:b3:bf:ec:56:9b:4b:4b:41:38:e0:41:85:a3:2f:a7:3a:
3e:01:8a:a3:78:95:d7:83:84:70:d9:de:4a:ea:a2:14:41:ae:
cb:81:74:07:47:02:e4:22:e8:2f:7b:19:fe:7e:f9:3f:9f:8c:
ff:97:4d:c2:b2:e7:46:aa:89:9c:35:8c:37:3e:89:0e:70:d8:
fc:a8:87:8d:ae:ab:72:ba:3e:80:22:38:c7:23:2d:cc:6d:a8:
b1:4f:66:27:fa:59:f3:9f:3b:a5:17:c3:60:82:43:76:10:65:
8c:3b:60:57:5a:b6:8d:d2:f5:e3:fe:a6:d8:a7:d5:26:38:39:
95:ac:72:a5:62:e3:97:19:7b:14:21:99:a9:6b:89:fb:ac:8a:
ed:7d:91:3a:ae:0c:c8:c1:86:d8:b2:4c:6a:05:40:53:99:d9:
f2:ca:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:45 2026 by rpki-client