Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m_FYS1ikfC8D3E1QK_uBuWUFAcM.roa
File: m_FYS1ikfC8D3E1QK_uBuWUFAcM.roa (raw, json)
Hash identifier: hD+0BQv1tBvjzskmo4H2Hp5NzeN9z058++3YzJJz87c=
Subject key identifier: 9B:F1:58:4B:58:A4:7C:2F:03:DC:4D:50:2B:FB:81:B9:65:05:01:C3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EF3E2A0F3386BF70C63C2165F4FDEA53D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m_FYS1ikfC8D3E1QK_uBuWUFAcM.roa
Signing time: Tue 23 Jun 2026 09:49:36 +0000
ROA not before: Tue 23 Jun 2026 09:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 80.68.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f3:e2:a0:f3:38:6b:f7:0c:63:c2:16:5f:4f:de:a5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 23 09:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf1584b58a47c2f03dc4d502bfb81b9650501c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:d6:ef:01:ba:30:f7:3e:ee:93:5f:f1:87:
88:e4:d8:f4:d5:50:df:2d:f2:6d:b9:c7:9e:fe:fa:
34:5e:f2:e7:4d:0a:c6:44:56:13:1b:95:e4:08:7c:
74:f8:7e:5b:56:a1:91:ba:46:bc:66:d9:e5:7b:78:
ad:e2:54:af:01:b6:0f:63:81:15:f6:52:e7:c8:88:
58:13:65:8f:f0:56:10:b2:81:e8:aa:d1:7e:fb:dd:
72:62:4e:74:28:c1:dd:32:34:ee:8a:02:1a:04:33:
d0:a8:05:85:87:02:37:78:b3:68:d0:94:7e:dd:3f:
a7:50:d9:fa:84:bc:c7:d1:0c:ec:5e:8d:5e:be:1f:
35:a6:5f:37:d3:3e:1e:c3:a0:a3:3a:53:0c:70:1d:
25:f3:15:ab:b9:7f:f2:2c:c6:3a:c9:1c:94:59:da:
0a:12:11:85:06:49:e9:2b:15:b6:22:a5:0b:6e:4b:
b0:89:7f:96:cf:45:ce:24:cd:48:28:41:a8:ed:42:
ba:a7:86:99:61:b9:c0:7a:b4:47:93:13:40:40:d4:
46:6b:3e:e0:7f:36:86:72:6b:52:05:ab:d3:3a:a5:
6a:5e:78:f3:56:51:24:47:0c:79:0b:91:53:7b:cf:
c5:9a:44:71:95:4b:5f:4f:f8:75:86:32:52:d7:0a:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:58:4B:58:A4:7C:2F:03:DC:4D:50:2B:FB:81:B9:65:05:01:C3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/m_FYS1ikfC8D3E1QK_uBuWUFAcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:ec:8f:35:96:56:93:3d:a6:d9:a1:9b:0c:ff:d9:07:f8:42:
d3:d2:80:83:0b:46:38:90:a4:7b:77:0b:8a:d9:c1:3d:8b:0b:
1b:4c:4a:1c:c1:00:46:0c:9e:4b:68:a5:da:a4:23:4f:74:39:
9f:0f:1f:c2:8b:af:f2:ca:00:5d:fa:ee:69:f2:0d:17:50:60:
42:f1:e6:78:f9:ff:87:de:c0:b0:3c:fe:ae:66:41:93:ee:e5:
ca:50:7b:24:0e:72:6e:42:bd:0e:bc:07:a3:5f:26:57:66:a8:
18:69:7e:00:72:86:ef:82:b8:da:23:85:de:b0:30:37:f1:0c:
b6:bc:14:9c:af:76:66:90:50:2f:ff:67:26:aa:2b:8a:85:83:
34:63:1e:f1:68:96:51:70:ff:24:4b:69:bb:82:54:b2:97:2c:
44:75:ab:09:99:8c:f6:bb:70:67:59:05:9a:55:36:35:b6:d9:
2e:c2:8d:6a:35:4c:42:94:88:2f:a0:16:c3:35:cc:9b:cc:55:
bc:62:a9:bf:37:aa:80:64:49:56:51:ba:4f:b6:f3:0f:01:fe:
f5:cc:99:47:fd:b4:a6:7f:97:e6:ea:cb:f3:12:a9:57:82:0d:
30:c5:f1:10:27:bb:1f:a8:ac:e5:53:58:70:0f:81:45:a1:c4:
b0:1a:d5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client