Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r9MYwZdGfQ070Y-PH7WnhbIMfbA.roa
File: r9MYwZdGfQ070Y-PH7WnhbIMfbA.roa (raw, json)
Hash identifier: T8e1tYFxoz6204iKIVdNNHnKREt+8qeNVZTQ4adwn+8=
Subject key identifier: AF:D3:18:C1:97:46:7D:0D:3B:D1:8F:8F:1F:B5:A7:85:B2:0C:7D:B0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F418E2FEAC7EAE264455AB485F37EC622
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r9MYwZdGfQ070Y-PH7WnhbIMfbA.roa
Signing time: Wed 08 Jul 2026 11:47:45 +0000
ROA not before: Wed 08 Jul 2026 11:47:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 87.83.58.0/24 maxlen: 24
87.83.62.0/24 maxlen: 24
87.83.63.0/24 maxlen: 24
87.83.67.0/24 maxlen: 24
87.83.68.0/24 maxlen: 24
87.83.69.0/24 maxlen: 24
87.83.70.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.162.0/24 maxlen: 24
87.83.165.0/24 maxlen: 24
87.83.194.0/24 maxlen: 24
87.83.218.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:8e:2f:ea:c7:ea:e2:64:45:5a:b4:85:f3:7e:c6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 8 11:47:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd318c197467d0d3bd18f8f1fb5a785b20c7db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:da:cd:75:c6:07:d0:9c:63:37:5c:fc:07:
8c:74:0d:2a:20:0d:a4:7c:25:55:f8:85:9f:e5:8e:
c8:85:e0:d6:f1:0c:78:68:25:36:99:f5:92:0c:4c:
e4:7b:1a:88:2c:8e:ba:6d:d2:c9:05:34:9d:93:24:
24:63:bb:51:7a:a4:3a:91:90:de:9f:4e:f5:35:8a:
74:e2:07:a9:50:7a:79:67:38:61:f9:e6:fb:18:af:
4e:98:66:76:e3:1b:dc:33:e6:37:2e:8d:db:e4:c3:
05:e7:d4:39:6e:3f:f2:61:f7:49:cd:da:e6:bc:0a:
82:98:d9:69:9b:31:09:66:39:53:64:ac:90:93:d8:
53:62:6e:e1:e5:9c:d8:ee:b8:8d:42:32:33:43:b9:
5c:ef:8b:b6:66:01:2e:11:6b:2e:0e:29:16:e4:26:
cd:06:c8:fb:42:56:88:fb:7c:da:46:80:6d:bb:02:
73:65:46:84:72:c5:21:aa:c9:7c:72:18:e7:0c:e7:
5e:38:67:e4:94:fc:63:78:22:42:67:02:40:7f:06:
a0:6f:c3:33:b1:55:1c:b8:2d:ca:af:40:77:b6:9d:
18:7f:71:10:2d:25:95:be:b0:40:fc:ae:6b:56:4e:
db:a5:f7:19:b8:aa:b7:28:e9:ea:31:7b:13:7f:a8:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:18:C1:97:46:7D:0D:3B:D1:8F:8F:1F:B5:A7:85:B2:0C:7D:B0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/r9MYwZdGfQ070Y-PH7WnhbIMfbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.58.0/24
87.83.62.0/23
87.83.67.0-87.83.71.255
87.83.162.0/24
87.83.165.0/24
87.83.194.0/24
87.83.218.0/24
87.83.222.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5e:43:22:18:56:50:b0:f5:02:a5:86:bc:69:a0:58:70:0e:
fb:51:76:b2:50:fe:61:fe:ee:66:c3:f6:b5:08:67:bb:2a:f7:
ce:c2:a6:61:3e:1a:cc:6b:af:8c:9a:88:8a:b3:86:8e:97:23:
81:e0:e6:21:4c:0b:1a:75:e9:6d:2e:ce:fe:b4:f3:7c:ae:24:
58:61:28:1c:c4:05:d7:62:7b:09:b0:76:7f:7a:47:4f:51:14:
f4:38:6f:cc:3f:6e:d0:b3:b6:f2:e1:9b:eb:71:da:4b:ca:98:
8a:e0:91:a6:cc:17:5b:e6:00:30:c0:3b:96:ac:df:8e:c1:b2:
d5:78:46:b1:c4:bf:68:db:29:1e:1a:39:76:31:eb:09:19:9e:
54:1d:7b:b7:b4:ad:45:ee:b5:61:f0:1d:75:f6:4b:29:a0:b9:
80:a2:ef:bd:9d:ff:92:c6:3f:97:82:00:bc:07:a1:92:b0:89:
f5:de:f7:35:56:71:5d:0f:c6:80:74:f1:29:eb:63:c6:d2:b0:
2c:f4:a0:d0:4b:0b:2f:4b:ee:b3:df:22:b5:47:0b:50:e3:2d:
66:d6:85:2f:a3:27:5f:63:7c:bf:ad:c8:f0:78:94:26:54:dd:
63:1e:b7:3d:93:9b:77:dc:e7:15:87:b3:ca:87:dd:bf:17:37:
00:70:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:07:39 2026 by rpki-client