Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/_CXCyeMnJtUiSqVx5IT_kZaP1uU.roa
File: _CXCyeMnJtUiSqVx5IT_kZaP1uU.roa (raw, json)
Hash identifier: qLYdSwnACT46V5B9jzvAqJGjph1sko0ABQcmLfDqZPs=
Subject key identifier: FC:25:C2:C9:E3:27:26:D5:22:4A:A5:71:E4:84:FF:91:96:8F:D6:E5
Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Certificate serial: 019F3BF1B3B90423BF4023FDB6818BBF6DF4
Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/_CXCyeMnJtUiSqVx5IT_kZaP1uU.roa
Signing time: Tue 07 Jul 2026 09:38:43 +0000
ROA not before: Tue 07 Jul 2026 09:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 87.192.81.0/24 maxlen: 24
87.192.82.0/23 maxlen: 23
87.192.84.0/22 maxlen: 22
87.192.216.0/22 maxlen: 22
87.192.222.0/23 maxlen: 23
87.232.192.0/24 maxlen: 24
87.232.194.0/23 maxlen: 23
87.232.196.0/22 maxlen: 22
87.232.225.0/24 maxlen: 24
87.232.228.0/22 maxlen: 22
89.124.1.0/24 maxlen: 24
89.124.2.0/23 maxlen: 23
89.124.4.0/22 maxlen: 22
89.124.240.0/23 maxlen: 23
89.124.245.0/24 maxlen: 24
89.127.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:f1:b3:b9:04:23:bf:40:23:fd:b6:81:8b:bf:6d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642
Validity
Not Before: Jul 7 09:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc25c2c9e32726d5224aa571e484ff91968fd6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:8a:67:90:55:66:48:f7:be:01:0d:ca:29:
61:62:08:f3:e0:f7:4c:d6:5d:e8:e0:7f:87:51:a3:
2a:d5:7c:cc:3b:27:53:a5:46:e4:93:28:ce:23:7f:
35:63:80:c4:2d:ec:6f:0d:b2:24:91:45:4f:15:a1:
e8:a0:1e:fc:e1:a9:1b:d7:fc:14:e2:a9:26:2d:e5:
76:49:98:2a:75:ce:a7:a0:c6:d4:97:44:f4:d5:ab:
60:9e:f1:2d:39:dc:b4:08:80:71:34:06:92:ef:0e:
df:5b:a6:66:55:53:13:d6:95:46:5f:e4:d6:8d:49:
c4:b4:61:f8:70:88:b2:60:c2:20:bf:9a:a2:88:5e:
19:36:53:6d:a9:8e:8d:83:7f:f5:9f:45:01:f1:a1:
f8:54:f4:df:92:13:e7:60:4f:a7:4f:81:c6:13:6d:
d3:c9:d6:ce:c2:b6:2a:cb:e0:17:6e:29:57:06:d2:
a2:ad:58:7b:5f:b6:6d:6f:b9:37:7a:21:04:80:ab:
9d:cc:1f:e7:b6:5a:ca:02:d8:12:b4:d3:d4:7f:58:
59:f2:19:76:d7:16:13:30:99:9d:2f:88:a5:7f:a4:
1a:82:ce:53:4b:4f:1d:63:ca:10:53:55:46:73:af:
42:76:54:f3:d1:a6:a4:80:5d:f2:24:22:af:7d:3e:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:25:C2:C9:E3:27:26:D5:22:4A:A5:71:E4:84:FF:91:96:8F:D6:E5
X509v3 Authority Key Identifier:
keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/_CXCyeMnJtUiSqVx5IT_kZaP1uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.192.81.0-87.192.87.255
87.192.216.0/22
87.192.222.0/23
87.232.192.0/24
87.232.194.0-87.232.199.255
87.232.225.0/24
87.232.228.0/22
89.124.1.0-89.124.7.255
89.124.240.0/23
89.124.245.0/24
89.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d0:ff:fd:0c:51:e5:8b:6d:4a:2d:b5:4d:91:20:d9:1a:1b:
9b:2c:73:a1:42:1a:da:23:5e:2e:84:0d:bc:52:c1:e3:3a:eb:
5d:37:10:d2:05:0c:a2:3a:06:62:ae:84:3e:93:f6:a5:27:3e:
38:f1:06:63:a0:d2:35:d4:0d:65:3a:e3:2c:61:b2:8a:c0:40:
94:01:59:f2:40:0d:13:f9:d6:d1:4d:c2:b5:4b:58:d9:28:3a:
7b:1e:69:56:aa:c0:a4:fa:fc:79:34:63:31:a4:b6:4c:f3:4d:
eb:52:2e:24:34:3a:73:69:26:2f:54:7a:6e:27:fc:90:24:2b:
13:76:a5:69:56:8c:18:c1:92:a3:6d:b4:f9:83:34:74:b1:2c:
7a:90:f4:ef:71:19:98:96:3a:aa:a0:1b:b6:8b:2b:1e:86:d4:
c3:25:67:38:fb:96:a7:9b:57:2d:1b:2d:9b:6c:9b:5e:33:18:
2d:26:2a:a8:d9:e0:fd:6f:a0:d6:98:79:07:6b:72:9c:b5:4d:
40:35:90:82:41:bb:64:ff:e0:c6:bc:a7:24:90:4e:bc:e4:d2:
68:a3:3d:35:e0:08:57:44:2a:89:29:ea:59:3c:e3:da:71:94:
9f:c4:94:dc:1c:29:4b:bf:7b:f7:19:27:50:99:69:e6:e6:8d:
77:87:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 13:47:53 2026 by rpki-client