Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qqVjK9jAvvwb3NGl8xIMete9Sgg.roa
File: qqVjK9jAvvwb3NGl8xIMete9Sgg.roa (raw, json)
Hash identifier: Sm4UC5sHi91MVXEziCVinALVqqLf/jsz79SjILso4Tg=
Subject key identifier: AA:A5:63:2B:D8:C0:BE:FC:1B:DC:D1:A5:F3:12:0C:7A:D7:BD:4A:08
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FC7EC8E8BBE96C8D9CD363E4759BD1D9A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qqVjK9jAvvwb3NGl8xIMete9Sgg.roa
Signing time: Mon 03 Aug 2026 13:59:56 +0000
ROA not before: Mon 03 Aug 2026 13:59:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 87.86.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:ec:8e:8b:be:96:c8:d9:cd:36:3e:47:59:bd:1d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 3 13:59:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaa5632bd8c0befc1bdcd1a5f3120c7ad7bd4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:69:be:6a:cd:61:b7:40:d3:ef:35:a0:82:
0f:9b:fa:14:3e:aa:3f:25:ad:13:ed:af:20:89:06:
44:6f:04:09:7c:50:38:b8:b4:ab:80:d6:34:20:4f:
85:d6:4f:c0:0f:33:fa:98:12:21:7e:46:b4:7c:8a:
1a:28:55:c1:51:c6:80:82:13:d8:a5:1c:53:b3:4b:
12:8a:b9:d9:9f:73:6c:98:df:5d:43:79:11:65:00:
94:53:2c:21:dd:79:cf:22:2f:ac:bb:27:5e:d5:c7:
2c:47:62:2a:50:9a:b8:3f:d9:38:9d:be:d7:36:40:
c3:18:34:62:a2:00:cc:26:94:c0:be:e7:0a:32:92:
91:35:09:78:8b:49:3e:b4:77:2b:d9:94:3d:a5:86:
27:44:66:fe:10:e0:86:27:df:20:a1:d9:7b:36:ed:
b6:ea:b6:cc:56:ed:5e:88:f6:a6:2f:a8:04:50:b0:
00:22:45:93:16:90:11:b6:9e:3d:b3:d2:a4:cc:55:
d5:23:b0:2f:a2:80:c2:bd:0a:74:91:1e:61:3d:8c:
35:f8:a8:c7:8f:b6:38:4e:8c:2a:ac:4a:b2:9d:16:
05:d6:46:68:e6:63:e2:d1:b8:2c:97:9e:fc:52:06:
f9:b3:2e:4d:94:a0:9f:24:76:8e:30:ae:94:d1:c8:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:63:2B:D8:C0:BE:FC:1B:DC:D1:A5:F3:12:0C:7A:D7:BD:4A:08
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qqVjK9jAvvwb3NGl8xIMete9Sgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:46:5e:ad:87:10:31:94:95:f4:8a:b3:4c:4c:92:80:ca:31:
b1:d9:e6:f3:60:9f:3e:1e:b1:c5:ae:2f:4d:1a:db:81:b9:58:
65:02:b9:33:29:31:54:4f:cf:23:29:ae:92:13:92:34:ac:55:
78:30:5d:50:57:53:a6:39:18:f8:75:d6:c0:80:8d:18:16:5f:
05:bf:e3:7a:5e:97:0f:66:9e:1b:2c:93:77:04:4c:63:c9:35:
ec:e1:16:86:11:4a:9b:88:8f:8a:d7:36:04:e1:19:af:48:3e:
da:4f:f6:de:53:9e:5e:08:38:7c:f4:ce:19:ef:56:d1:11:ef:
93:d8:fe:82:88:87:de:2c:6d:b1:1d:5d:1b:bb:fe:4c:d6:ab:
af:ce:09:0a:59:31:5f:30:10:c2:f3:f0:6c:93:9f:4a:26:94:
46:ce:b3:52:14:f0:6b:e4:bc:84:1e:f8:64:0c:ff:bb:f6:bc:
7b:2b:91:c6:6a:68:46:15:e4:ec:d2:c7:1b:cc:33:0b:18:7d:
2e:f9:a9:a6:91:22:c9:a6:32:05:e2:f8:19:ed:8a:b7:0d:51:
16:62:20:84:2a:a0:ec:51:36:c8:d8:63:5b:aa:d7:01:cb:82:
17:d6:90:4a:25:07:c8:92:c8:c0:c9:b8:bf:f3:16:8c:8f:9b:
1a:0c:f9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 13:59:10 2026 by rpki-client