Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa
File: Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa (raw, json)
Hash identifier: clgOLfDosWYDvBNQpvRzT03uYQs9EulKVPuKsnJ+7Yg=
Subject key identifier: 49:FF:AC:19:99:84:C8:3A:1A:69:00:52:A2:50:DF:D1:3E:59:97:38
Certificate issuer: /CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Certificate serial: 019FCBBF3BD2E64E4D8A22A4E2A032EE0C82
Authority key identifier: 7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa
Signing time: Tue 04 Aug 2026 07:48:55 +0000
ROA not before: Tue 04 Aug 2026 07:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204030
IP address blocks: 87.101.84.0/22 maxlen: 22
87.101.86.0/24 maxlen: 24
185.116.80.0/22 maxlen: 22
2a06:7c80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:bf:3b:d2:e6:4e:4d:8a:22:a4:e2:a0:32:ee:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f33fc40d2e0333bbc7bdeab2bd859954301c0f1
Validity
Not Before: Aug 4 07:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49ffac199984c83a1a690052a250dfd13e599738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:10:a9:67:90:a5:d0:ef:74:03:d6:b6:e6:
06:03:d7:4e:fd:4b:1e:3b:d1:0f:0e:48:50:f1:58:
fe:da:80:63:01:ac:77:78:dc:4e:26:ac:df:53:0d:
75:8b:fd:b9:d5:9a:90:f6:5d:de:c7:b3:cb:ed:f7:
af:d9:12:e0:df:bb:0f:07:3a:49:36:11:09:a1:74:
dd:50:80:46:09:f9:61:ea:32:fe:65:5c:a8:6a:c1:
2c:4b:fd:e5:c3:82:90:c0:66:a4:ea:e7:48:58:80:
d0:1c:24:fe:5b:1f:53:9b:8d:6b:f2:48:08:bb:c3:
2d:cc:a9:b3:2d:aa:ae:21:b1:90:cc:8e:b0:05:1c:
fb:2a:bf:af:62:b0:a8:2f:9f:92:d7:aa:11:d3:4f:
16:96:13:40:92:1e:58:0f:6c:cc:5f:93:2e:03:8b:
5b:c5:6d:19:d0:97:8f:b1:ef:c5:34:ae:ca:10:dd:
58:21:40:fc:54:e2:2d:97:80:06:f7:e2:12:af:0a:
70:b4:e5:9f:7f:ed:49:41:30:41:fc:e2:92:1b:ae:
0c:7e:55:e6:a9:2a:5f:52:35:50:12:ae:6b:58:d5:
d6:10:b5:f4:70:12:fb:5d:39:89:45:66:4c:f7:4a:
19:c1:d6:5d:20:ed:7e:1c:69:fb:9b:66:24:ff:28:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FF:AC:19:99:84:C8:3A:1A:69:00:52:A2:50:DF:D1:3E:59:97:38
X509v3 Authority Key Identifier:
keyid:7F:33:FC:40:D2:E0:33:3B:BC:7B:DE:AB:2B:D8:59:95:43:01:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzP8QNLgMzu8e96rK9hZlUMBwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/Sf-sGZmEyDoaaQBSolDf0T5Zlzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bf1d-ec1d-40e6-849d-79790d66d7d3/1/fzP8QNLgMzu8e96rK9hZlUMBwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.84.0/22
185.116.80.0/22
IPv6:
2a06:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
67:4d:d2:39:4e:bb:68:54:25:f0:55:ba:bb:47:25:f6:65:2b:
da:a1:84:9f:53:16:e8:f1:61:49:81:19:4c:52:b5:59:2c:d4:
02:66:98:b7:88:9c:90:0b:34:ec:5f:d5:f6:c7:84:cf:8d:f6:
fa:43:e5:09:fd:e1:90:91:42:e7:b8:a1:ff:28:12:f7:d6:20:
24:7d:50:d2:fc:c5:fa:eb:c8:cf:e6:69:97:06:c6:d2:4b:fe:
af:91:f4:d9:07:82:e7:41:bd:cb:95:ff:e6:75:a9:25:a6:d2:
95:77:0d:cb:cf:e2:cf:97:43:40:b0:74:db:35:99:a6:6f:6c:
a3:d6:89:d4:41:cf:7c:a1:d7:8f:e1:5c:d8:5d:e2:d6:81:85:
63:71:2d:88:f3:12:c6:0b:8a:a4:5d:38:8c:ce:c7:8d:b5:48:
8a:e4:dc:20:bc:23:fc:53:ff:c4:2d:af:d9:20:42:fe:61:9e:
71:2e:2c:0e:ec:59:45:f9:d0:15:f3:c9:ec:9c:5c:c3:47:1a:
11:e0:dc:0e:35:08:e4:f8:b3:ce:dd:48:da:06:18:b9:e5:a4:
61:1a:90:4c:02:b8:7a:77:ab:f8:1c:0c:a1:40:f6:0e:38:6b:
c6:23:ed:bb:df:76:32:7e:37:be:2e:f4:5d:ea:d1:06:d0:25:
30:fe:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:45 2026 by rpki-client