Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y5ierLDbposmff7FXN_O9MvgSI8.roa
File: y5ierLDbposmff7FXN_O9MvgSI8.roa (raw, json)
Hash identifier: RPYWEMrlVCZOee0H1HQGz+2sJGE4m4tk6RV175ncQOg=
Subject key identifier: CB:98:9E:AC:B0:DB:A6:8B:26:7D:FE:C5:5C:DF:CE:F4:CB:E0:48:8F
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019E6E2484574151E84312FEC76D0ADC985C
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y5ierLDbposmff7FXN_O9MvgSI8.roa
Signing time: Thu 28 May 2026 10:32:27 +0000
ROA not before: Thu 28 May 2026 10:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198805
IP address blocks: 87.84.220.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.84.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:24:84:57:41:51:e8:43:12:fe:c7:6d:0a:dc:98:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: May 28 10:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb989eacb0dba68b267dfec55cdfcef4cbe0488f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:bd:15:ee:68:8d:c1:d6:30:2f:d9:e1:8a:
65:f1:f9:25:0d:a2:f9:1b:ce:69:aa:88:fa:8f:56:
eb:82:fe:01:9c:ce:13:d9:a3:ba:a5:38:9e:55:ff:
db:91:7d:24:2e:58:a7:d9:17:e4:c2:8c:84:c6:7a:
fb:0d:fa:b4:39:45:52:33:3b:ae:7a:a6:47:0d:28:
1c:da:f6:61:d7:90:4c:04:af:49:01:f2:fe:53:c8:
d9:63:91:ea:53:da:fe:0f:b7:66:2e:a9:86:b9:40:
0a:23:ff:d4:6d:5c:6f:f0:3f:ad:d8:99:74:0e:7b:
b9:8d:86:31:c1:76:cc:65:34:b9:a6:88:56:70:4f:
f1:f9:2a:1c:2f:dc:45:b4:a4:42:47:f4:7b:63:dc:
82:1d:31:5c:3f:45:8d:02:8a:78:5b:f2:23:2e:85:
c6:6c:db:ed:f4:56:8f:98:37:47:e2:02:ed:da:0c:
fd:fb:2b:52:79:a5:b7:3b:e3:c3:c7:cc:b2:2b:7b:
88:83:91:c2:5c:3d:fe:7a:26:c4:f2:47:7c:3f:b2:
f6:45:02:85:fd:e6:15:e1:2b:2b:ee:5f:f7:4b:64:
1f:d7:1e:58:e0:e7:de:1d:12:95:6b:13:09:21:90:
bf:10:b5:18:9f:00:ef:df:1a:ac:ca:4d:c3:97:a1:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:9E:AC:B0:DB:A6:8B:26:7D:FE:C5:5C:DF:CE:F4:CB:E0:48:8F
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/y5ierLDbposmff7FXN_O9MvgSI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.220.0/24
87.84.232.0/24
87.84.235.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f9:23:84:6c:20:64:4c:59:22:c1:43:a3:14:d4:46:52:e0:
94:44:5a:82:55:cf:d0:00:14:de:60:c7:90:69:95:ea:1b:01:
f7:0b:b5:a6:dc:76:92:99:d9:dd:d9:1c:14:fa:fa:cc:1a:e4:
a3:33:51:1f:88:0a:c3:22:55:53:28:0f:c4:e2:8b:45:cd:0f:
78:da:a6:9b:65:83:06:b4:9a:cb:23:72:6f:00:c3:69:06:6a:
ae:9b:b2:30:5b:be:20:fb:9b:19:63:f3:20:bd:77:c6:65:71:
98:80:aa:d3:5e:3e:5e:7c:d5:ec:51:46:7d:b7:79:bd:fb:56:
d1:fd:1b:2c:01:60:03:72:83:01:2e:1e:9a:66:df:b7:e1:76:
06:cb:66:da:23:b7:90:93:95:f8:65:c8:1e:c1:93:df:a7:12:
2e:ce:3a:db:43:4e:e4:39:39:f7:c1:14:a3:58:66:fc:88:8a:
39:45:ce:5f:26:7b:e2:44:c8:42:e7:90:7a:1d:da:3d:d1:5d:
a2:74:f2:0d:c1:20:5f:52:46:c9:3a:62:da:5c:16:00:d7:78:
e6:ca:f1:75:3a:69:a9:bf:2f:8f:f8:7a:92:1d:05:c8:9a:8e:
83:8a:b5:90:7f:5a:18:9d:5c:5f:11:bd:dd:a0:99:f4:d0:de:
4e:17:37:93
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5uJIRXQVHoQxL+x20K3JhcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNTI4MTAzMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjk4OWVhY2IwZGJhNjhiMjY3ZGZlYzU1Y2RmY2VmNGNiZTA0ODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlO9Fe5ojcHWMC/Z4Ypl8fklDaL5
G85pqoj6j1brgv4BnM4T2aO6pTieVf/bkX0kLlin2RfkwoyExnr7Dfq0OUVSMzuu
eqZHDSgc2vZh15BMBK9JAfL+U8jZY5HqU9r+D7dmLqmGuUAKI//UbVxv8D+t2Jl0
Dnu5jYYxwXbMZTS5pohWcE/x+SocL9xFtKRCR/R7Y9yCHTFcP0WNAop4W/IjLoXG
bNvt9FaPmDdH4gLt2gz9+ytSeaW3O+PDx8yyK3uIg5HCXD3+eibE8kd8P7L2RQKF
/eYV4Ssr7l/3S2Qf1x5Y4OfeHRKVaxMJIZC/ELUYnwDv3xqsyk3Dl6HOLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMuYnqyw26aLJn3+xVzfzvTL4EiPMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEveTVpZXJMRGJwb3NtZmY3RlhOX085TXZnU0k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAV1TcAwQA
V1ToAwQAV1TrMA0GCSqGSIb3DQEBCwUAA4IBAQDQ+SOEbCBkTFkiwUOjFNRGUuCU
RFqCVc/QABTeYMeQaZXqGwH3C7Wm3HaSmdnd2RwU+vrMGuSjM1EfiArDIlVTKA/E
4otFzQ942qabZYMGtJrLI3JvAMNpBmqum7IwW74g+5sZY/MgvXfGZXGYgKrTXj5e
fNXsUUZ9t3m9+1bR/RssAWADcoMBLh6aZt+34XYGy2baI7eQk5X4ZcgewZPfpxIu
zjrbQ07kOTn3wRSjWGb8iIo5Rc5fJnviRMhC55B6Hdo90V2idPINwSBfUkbJOmLa
XBYA13jmyvF1Ommpvy+P+HqSHQXImo6DirWQf1oYnVxfEb3doJn00N5OFzeT
-----END CERTIFICATE-----
Generated at Thu Jun 4 01:16:17 2026 by rpki-client