Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/va4Q3Vg6wJ3l3NT41v6jCh26PzQ.roa
File: va4Q3Vg6wJ3l3NT41v6jCh26PzQ.roa (raw, json)
Hash identifier: S7uPUPcNDaFca3ab8VqT4T3AGT+vvQ4SA3YiBMBq77w=
Subject key identifier: BD:AE:10:DD:58:3A:C0:9D:E5:DC:D4:F8:D6:FE:A3:0A:1D:BA:3F:34
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FF0742762FC98F3E561C6EBFECC15ABA7
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/va4Q3Vg6wJ3l3NT41v6jCh26PzQ.roa
Signing time: Tue 11 Aug 2026 10:52:51 +0000
ROA not before: Tue 11 Aug 2026 10:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11421
IP address blocks: 87.86.22.0/24 maxlen: 24
87.86.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:74:27:62:fc:98:f3:e5:61:c6:eb:fe:cc:15:ab:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 11 10:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdae10dd583ac09de5dcd4f8d6fea30a1dba3f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:99:c3:c1:bc:f3:cb:0e:bb:6a:15:ad:11:36:
ce:6b:c4:db:e7:59:26:b8:44:17:f8:01:1e:02:bc:
50:c4:fa:b7:43:92:bf:44:c7:19:9e:cb:4a:68:5d:
0f:cf:77:e3:c9:c5:db:b5:e2:bb:71:cb:43:87:fa:
87:d4:17:03:52:d5:7b:63:99:b2:8e:0b:fb:4c:67:
b9:17:d3:d3:19:86:b8:f2:8e:78:f1:4e:9c:bc:43:
76:24:ca:db:2c:99:24:93:bf:84:34:bb:23:fa:93:
1f:62:cd:8d:b7:52:1f:76:fb:89:94:14:b0:ab:90:
c0:d1:53:3d:aa:73:fd:6d:7d:d4:ef:6f:c0:dd:4f:
9a:08:7a:ef:73:8f:55:75:f7:2f:26:f9:e4:bf:6f:
38:ec:0d:32:e6:e2:0c:e5:e2:68:3c:ed:f3:d9:be:
0f:35:5c:24:e4:0f:7f:f7:d4:59:ff:51:c7:f6:1c:
33:13:0c:d2:e0:53:66:d0:58:23:4c:f6:42:34:3c:
9f:ad:5b:db:60:bf:e0:8d:b6:0d:b2:8e:50:71:4f:
ce:2d:5f:3f:e5:36:9f:51:e5:72:cc:48:31:fc:ed:
67:b0:f9:69:db:ab:80:52:45:06:c2:c4:2b:f8:f8:
7b:9a:ec:59:34:eb:0e:8e:59:9d:74:b5:af:a7:cd:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AE:10:DD:58:3A:C0:9D:E5:DC:D4:F8:D6:FE:A3:0A:1D:BA:3F:34
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/va4Q3Vg6wJ3l3NT41v6jCh26PzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.22.0/24
87.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
42:02:06:bd:66:ab:c2:0e:9f:77:10:d4:fe:9e:1b:93:0e:d0:
b2:44:be:7d:58:79:ae:54:a8:a7:60:15:91:c0:a0:73:53:64:
8e:e8:07:28:ad:6d:25:2b:f2:36:c7:0b:a6:f0:31:a1:59:c7:
b3:49:99:e6:0e:2f:a3:53:c4:45:d6:9b:8c:5d:33:95:97:eb:
67:a3:b2:ed:d7:08:eb:eb:12:69:a5:19:f3:aa:af:a1:33:90:
f5:0b:a5:8c:c5:c3:00:bf:ff:7a:b0:25:30:b1:9c:87:41:68:
4a:04:81:fe:ea:7b:dd:44:57:c1:21:20:1a:e5:5b:38:c0:d6:
a3:f8:38:80:d4:9a:59:4a:50:99:7e:91:f3:99:34:1d:a0:8e:
8d:32:76:dd:2d:47:6a:6f:2e:ef:dd:76:3f:a5:1f:f6:54:fe:
2c:ef:47:26:9a:6e:4f:a2:23:79:d4:bb:11:bc:06:44:20:c6:
e0:0d:8a:73:31:eb:df:aa:44:3c:8b:d1:f9:88:35:60:c6:23:
6e:42:f0:52:89:86:38:5d:bf:58:8b:4f:20:d2:77:b2:99:12:
7b:cf:f5:5d:eb:a5:39:d7:27:40:a5:b1:52:fa:aa:c5:d8:cd:
c9:63:01:af:c7:54:73:c0:2c:1d:1e:79:cf:f0:51:9c:ad:80:
02:82:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:33 2026 by rpki-client