Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ysFJ4hhWeNf3wSduk_-ozMCmuVM.roa
File: ysFJ4hhWeNf3wSduk_-ozMCmuVM.roa (raw, json)
Hash identifier: fF6UpiijC8wTxBoQVZhRBysHVCs/0zGajNQLl7O+iAY=
Subject key identifier: CA:C1:49:E2:18:56:78:D7:F7:C1:27:6E:93:FF:A8:CC:C0:A6:B9:53
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EDFE3309430E0E68BE55DD36C87C93C1D
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ysFJ4hhWeNf3wSduk_-ozMCmuVM.roa
Signing time: Fri 19 Jun 2026 12:37:48 +0000
ROA not before: Fri 19 Jun 2026 12:37:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 87.84.200.0/24 maxlen: 24
87.84.203.0/24 maxlen: 24
194.242.132.0/24 maxlen: 24
194.242.135.0/24 maxlen: 24
212.134.252.0/24 maxlen: 24
212.135.135.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
212.135.154.0/24 maxlen: 24
212.135.161.0/24 maxlen: 24
212.135.164.0/24 maxlen: 24
212.135.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:e3:30:94:30:e0:e6:8b:e5:5d:d3:6c:87:c9:3c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 19 12:37:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cac149e2185678d7f7c1276e93ffa8ccc0a6b953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:0b:14:fa:9b:5c:0e:f9:0e:3f:74:64:26:
fc:05:0c:b3:18:e8:bb:e6:8c:c7:23:2b:e5:33:20:
23:84:cd:51:2a:11:58:7f:db:d9:83:3e:5e:de:5f:
34:04:8a:1f:3f:a4:1c:43:af:e1:b8:e8:08:21:70:
77:e7:5f:4d:fe:bb:97:2b:36:9c:42:18:79:1f:eb:
f7:ea:2b:fb:a1:9c:f3:40:46:61:b7:91:85:60:c8:
d5:99:ac:ba:31:04:89:2c:98:69:ce:77:e3:35:75:
8c:58:d3:e3:60:1d:46:5d:60:0d:55:99:86:55:0b:
05:a6:0e:29:07:34:4f:37:8a:32:c0:b1:70:2b:e5:
77:1c:bc:c4:65:49:8e:bd:b5:3c:da:71:1d:6b:e0:
d9:6c:95:10:f3:ca:34:d2:9e:1f:ad:72:fe:57:0f:
ab:61:08:02:77:79:2b:fa:83:5e:15:90:8e:a2:71:
8d:63:ab:d0:18:f2:ad:5b:dd:e3:9b:a0:7e:19:f3:
81:de:19:02:ac:4c:ce:71:d7:21:1b:03:94:15:ee:
a6:8d:cb:07:0a:c3:51:8f:0d:9c:0b:d3:b7:e4:b0:
2c:ec:44:43:c8:1e:6a:6a:e6:6d:a5:22:8b:89:0d:
21:81:90:be:c0:75:72:e0:ec:f2:4c:f3:fe:1e:7a:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C1:49:E2:18:56:78:D7:F7:C1:27:6E:93:FF:A8:CC:C0:A6:B9:53
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ysFJ4hhWeNf3wSduk_-ozMCmuVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.200.0/24
87.84.203.0/24
194.242.132.0/24
194.242.135.0/24
212.134.252.0/24
212.135.135.0/24
212.135.143.0/24
212.135.154.0/24
212.135.161.0/24
212.135.164.0/24
212.135.167.0/24
Signature Algorithm: sha256WithRSAEncryption
45:67:f4:f6:98:e2:6f:2a:c2:04:29:0a:ab:65:c9:ae:08:1b:
95:dc:45:e5:b6:06:2a:16:48:48:1e:26:76:04:40:8b:b9:cb:
77:42:b1:cd:ce:d9:d4:81:27:e6:b8:2d:77:94:b1:2c:1f:fc:
94:79:12:58:90:00:b7:7d:ce:84:f7:98:58:5f:66:04:0a:21:
b9:76:59:2d:db:3d:0b:1b:7d:09:39:a3:19:80:89:04:10:e5:
ef:7b:39:53:e5:f0:4e:26:60:0f:3c:35:48:6a:a5:9e:51:2a:
d7:1f:97:74:3c:e0:da:9a:91:fa:0b:6a:53:28:90:d2:29:16:
62:a1:20:95:f4:92:f2:21:66:89:97:94:dc:fc:fc:c8:50:9d:
37:43:1c:a2:a0:7f:eb:b2:57:8e:9f:91:ba:13:de:ac:69:f3:
04:f6:11:cc:49:4b:87:ed:14:28:94:df:37:7d:4d:6a:2b:3a:
d5:16:d6:03:95:fe:53:db:9a:e8:e7:cf:20:8f:9d:a2:8b:ca:
00:41:69:ad:59:9a:dd:43:ee:fe:c9:55:bd:d4:a1:f8:f2:42:
64:8b:e4:fa:1d:df:81:2b:24:a7:5b:c2:3d:13:82:7a:bc:c1:
83:ab:5d:78:41:09:18:41:1e:ea:87:0e:d1:f6:78:1f:ba:c9:
9b:b8:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:27:42 2026 by rpki-client