Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u_spbNVnLSrIrX8_-6_NdD41OrI.roa
File: u_spbNVnLSrIrX8_-6_NdD41OrI.roa (raw, json)
Hash identifier: HP0ZnxeK/EclflDvRL4BDoR7KsM1QY/OOTaXz9bNYXA=
Subject key identifier: BB:FB:29:6C:D5:67:2D:2A:C8:AD:7F:3F:FB:AF:CD:74:3E:35:3A:B2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FEFD7466ACF36F65743C333425D2E69AF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u_spbNVnLSrIrX8_-6_NdD41OrI.roa
Signing time: Tue 11 Aug 2026 08:01:30 +0000
ROA not before: Tue 11 Aug 2026 08:01:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 87.83.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:d7:46:6a:cf:36:f6:57:43:c3:33:42:5d:2e:69:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 11 08:01:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbfb296cd5672d2ac8ad7f3ffbafcd743e353ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:57:cb:15:4d:9a:77:80:0c:6d:16:55:9b:8a:
0c:08:47:7c:3e:42:10:4a:e5:95:a6:8e:7e:55:7f:
c5:32:a0:f8:b6:c5:1c:86:07:b8:b9:f4:bc:ad:20:
ce:97:de:08:fe:cb:7e:69:b1:57:02:e5:70:7f:6f:
65:72:37:24:2b:fd:ad:84:69:0f:5d:9d:fe:82:fb:
1d:a8:2f:7f:ae:fd:d5:b0:e8:19:f9:c6:e5:5e:4b:
93:b5:5a:5a:dc:c0:13:0d:6e:60:e4:cd:0c:69:6b:
2a:d8:ad:88:b0:59:b8:96:38:ad:18:99:32:29:f4:
45:ef:1c:3d:2b:d3:7f:bb:05:1c:d5:2f:bf:f4:ee:
72:a9:51:df:6b:9d:02:b7:e5:b1:63:26:10:2f:00:
02:7e:cc:e2:6f:79:7d:06:c1:e1:16:3c:e0:9b:9c:
64:d1:9b:a6:9b:1f:c0:08:ed:cc:f3:73:1b:ce:50:
3f:5c:af:12:38:ac:de:08:b6:08:1b:06:b9:02:f6:
62:84:ee:41:66:f8:59:0f:8c:ac:c4:8c:a8:ba:ea:
15:49:90:8f:45:47:4c:c1:58:88:81:08:42:a7:b7:
70:0c:73:88:50:1b:a7:0f:ac:18:6b:38:f8:33:5b:
8a:db:ef:c8:d6:ff:b5:c1:5f:7e:07:36:31:ea:05:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FB:29:6C:D5:67:2D:2A:C8:AD:7F:3F:FB:AF:CD:74:3E:35:3A:B2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/u_spbNVnLSrIrX8_-6_NdD41OrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.221.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ef:c8:68:13:06:54:9d:37:7a:90:62:8a:dd:54:f8:46:1e:
a4:4e:d2:1a:3c:35:66:a8:7a:1f:83:48:5f:df:19:f0:76:7b:
db:1b:b8:5d:b6:3a:19:a7:8b:26:57:7c:05:6a:99:22:e4:27:
bf:a7:bb:77:6a:46:dd:fb:9d:e5:ac:30:01:2d:8b:18:81:43:
7e:64:69:5c:4c:a0:f2:5b:14:74:bf:10:45:84:05:a6:a5:31:
fb:39:89:29:61:2d:7c:0d:27:b4:78:35:9f:70:99:20:da:26:
48:95:77:aa:8e:2e:39:59:e4:92:51:f4:e9:9d:b7:70:bd:5f:
29:dd:c5:5b:b6:9b:83:32:da:9a:87:94:d3:ac:e8:d6:18:32:
ee:17:95:1d:ef:0f:49:00:f1:f2:89:65:a2:44:99:d0:47:ce:
7e:80:90:50:b4:6d:fc:fb:7d:2f:62:ef:af:fc:49:fb:23:6d:
2e:4a:ed:6e:74:3e:3d:08:99:22:42:96:1e:62:e3:b7:b6:cb:
5c:14:c3:6c:ca:19:ce:24:14:65:51:3b:cc:e5:c4:75:91:f2:
94:5f:78:64:7d:e5:32:e0:c0:88:e4:bd:ca:68:a3:be:98:dd:
47:e0:b5:2e:0f:c0:00:15:78:01:bd:9b:63:74:5d:40:5b:71:
9d:99:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:26:33 2026 by rpki-client