Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mns9W7CtlSKhisx-OnBQQiVk4UE.roa
File: mns9W7CtlSKhisx-OnBQQiVk4UE.roa (raw, json)
Hash identifier: kmlVoeUOkHBUeP3AXtOxFhsRm7TdwoKgmW1cA89HTNw=
Subject key identifier: 9A:7B:3D:5B:B0:AD:95:22:A1:8A:CC:7E:3A:70:50:42:25:64:E1:41
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A056EB41DFCE7CB842E07B0F7BA0B6DC90
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mns9W7CtlSKhisx-OnBQQiVk4UE.roa
Signing time: Mon 31 Aug 2026 08:24:13 +0000
ROA not before: Mon 31 Aug 2026 08:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402866
IP address blocks: 87.83.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:eb:41:df:ce:7c:b8:42:e0:7b:0f:7b:a0:b6:dc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 31 08:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a7b3d5bb0ad9522a18acc7e3a7050422564e141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:7b:aa:8e:75:58:fd:d8:4c:ea:35:f3:40:
51:5e:1e:ed:b2:20:f6:af:47:ab:18:6a:80:30:1a:
99:e0:16:29:9f:23:89:a1:43:6a:6f:70:4b:b3:f5:
16:0b:97:c2:b9:dc:09:78:8a:5b:33:39:54:2d:d4:
b5:30:49:d8:57:28:01:a2:cc:f4:37:27:cd:17:9b:
ab:ec:6a:d6:18:bc:da:9d:4a:6d:1d:10:1f:6b:19:
c0:2a:7b:33:ce:30:ff:31:71:ff:b6:dc:21:56:a0:
cc:19:b6:52:f9:30:04:4a:43:44:42:3a:ae:be:54:
b3:c5:7f:60:2f:03:a5:d8:28:db:43:6e:54:64:8c:
2a:55:c9:86:e2:ec:33:1e:44:4e:24:26:b0:fd:9d:
6f:c2:a2:43:6b:5d:dc:f4:3c:df:39:bb:e0:56:55:
39:f4:5f:2f:73:37:ac:2f:78:c1:c9:ef:00:2c:a0:
2a:91:dd:e1:67:ef:4d:4d:e1:16:48:c7:9a:7f:5e:
99:88:e6:83:ef:c6:9e:16:9c:1e:b6:c3:38:01:b5:
46:8d:64:01:16:31:5d:14:04:54:82:5b:91:22:66:
78:16:e2:82:1c:53:2f:62:78:ae:b6:01:ea:38:30:
08:36:9e:89:8c:4e:5a:8f:4b:22:bc:af:37:55:d4:
94:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7B:3D:5B:B0:AD:95:22:A1:8A:CC:7E:3A:70:50:42:25:64:E1:41
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/mns9W7CtlSKhisx-OnBQQiVk4UE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.172.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ab:ed:16:3c:b3:92:3b:7b:03:05:10:ca:21:ea:4a:58:f2:
06:6f:2a:50:d3:8c:b8:a4:ef:d5:c8:1a:43:3d:cb:ad:ab:1d:
ad:7f:67:fa:63:93:70:5b:75:e6:34:a2:fb:1e:bb:c5:e3:b0:
c7:41:ea:7b:de:10:16:d4:68:01:06:ae:e1:5f:27:77:bd:b8:
bc:35:ff:d8:c0:a0:2e:dc:3a:d1:f3:26:e3:2f:4a:df:d4:c5:
30:86:a4:ee:e7:31:f9:fc:ee:ea:f9:40:b4:0b:32:6a:30:3a:
81:b4:82:12:4d:57:1e:47:fd:8b:21:04:0f:de:14:d4:dc:ae:
d6:2b:a4:50:7b:c3:9c:07:82:88:d4:5f:8b:1a:98:cc:f8:25:
50:44:6e:e1:77:4f:78:e7:80:f4:d8:36:fc:09:e1:89:55:84:
fa:18:b2:bf:a3:95:ad:be:5d:54:7e:b8:9c:e1:20:fa:19:ba:
1c:21:11:39:ae:05:d0:d9:40:8e:9a:90:7a:7c:4f:c2:12:71:
2f:55:cf:03:88:96:2f:aa:c8:80:f4:f7:9c:53:6f:db:e6:9e:
14:62:7b:d3:d3:45:42:91:4d:a6:1d:4e:5e:37:56:0e:22:38:
e4:1b:58:78:49:5d:dd:3e:08:84:b1:27:53:a4:ce:d5:95:88:
b9:0e:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:20 2026 by rpki-client