Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/nG_YcU41HPzNv8RcFC7GdKmlWFY.roa
File: nG_YcU41HPzNv8RcFC7GdKmlWFY.roa (raw, json)
Hash identifier: 8+89o8wXwlhvftsrz6Rm5xuEAzrVa+zpjJmw1Jq2lbw=
Subject key identifier: 9C:6F:D8:71:4E:35:1C:FC:CD:BF:C4:5C:14:2E:C6:74:A9:A5:58:56
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019F99DEA9F7B51C02DB14F400A0F0DAE4D1
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/nG_YcU41HPzNv8RcFC7GdKmlWFY.roa
Signing time: Sat 25 Jul 2026 15:22:14 +0000
ROA not before: Sat 25 Jul 2026 15:22:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 87.56.0.0/20 maxlen: 20
87.56.16.0/23 maxlen: 23
87.56.18.0/23 maxlen: 23
87.56.20.0/23 maxlen: 23
87.56.22.0/23 maxlen: 23
87.56.24.0/23 maxlen: 23
87.56.26.0/23 maxlen: 23
87.56.28.0/23 maxlen: 23
87.56.30.0/23 maxlen: 23
176.20.192.0/20 maxlen: 20
176.20.208.0/23 maxlen: 23
176.20.210.0/23 maxlen: 23
176.20.212.0/23 maxlen: 23
176.20.214.0/23 maxlen: 23
176.20.216.0/23 maxlen: 23
176.20.218.0/23 maxlen: 23
176.20.220.0/23 maxlen: 23
176.20.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:de:a9:f7:b5:1c:02:db:14:f4:00:a0:f0:da:e4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Jul 25 15:22:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c6fd8714e351cfccdbfc45c142ec674a9a55856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:11:57:e3:aa:c2:3d:f2:d2:b6:43:68:27:d8:
ac:89:a9:5f:ca:d3:bd:89:c1:aa:bc:c7:4a:93:61:
1c:74:58:89:9e:d0:61:b2:19:06:8c:ed:a4:4d:8e:
b8:05:ae:7c:49:a4:95:82:9e:00:30:b9:7c:15:79:
c3:be:4f:a4:e6:07:21:54:b3:56:ce:bc:87:ca:e5:
d2:19:90:78:da:7f:37:49:0b:7c:00:ce:4f:39:27:
6c:bf:af:93:0c:85:94:19:23:3b:40:d4:83:6f:13:
c4:7d:44:f0:18:d4:77:01:da:17:f2:9a:1f:0e:82:
6a:16:1c:a6:73:58:43:52:1f:40:d6:c8:ae:1f:9e:
ad:1f:13:ff:80:da:a5:ec:86:de:1c:94:6f:fd:8c:
95:18:06:92:5c:28:95:51:04:cd:8f:6f:d6:20:89:
6a:2e:78:b8:0f:2a:92:1c:64:3b:71:22:ce:6d:52:
1f:ad:73:d4:63:03:0b:0f:63:55:56:de:7c:6c:c8:
f3:9e:02:b5:21:da:d4:e4:60:51:66:60:1b:51:19:
30:31:79:aa:6b:aa:69:01:b8:79:d9:84:33:73:f7:
82:57:26:41:e5:f3:25:97:97:b0:11:1e:3c:0d:17:
4f:ff:bd:54:76:5d:b4:89:a0:c0:72:07:05:cb:a1:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:D8:71:4E:35:1C:FC:CD:BF:C4:5C:14:2E:C6:74:A9:A5:58:56
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/nG_YcU41HPzNv8RcFC7GdKmlWFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.56.0.0/19
176.20.192.0/19
Signature Algorithm: sha256WithRSAEncryption
98:5e:2a:06:8a:e6:a9:cf:4e:d8:de:14:c8:8b:ee:ba:3f:3d:
8d:ee:18:46:8b:0f:cb:72:cb:ee:a8:0d:9a:a5:55:ae:0a:ea:
b7:56:79:96:9d:ed:af:ec:89:ec:3f:2a:af:69:6c:31:6f:17:
5f:1a:82:3a:34:fb:8e:bc:b9:96:cd:d6:c3:d1:e5:83:4f:f9:
4e:c6:06:e2:15:27:ec:84:2e:6d:d9:7d:56:a8:9e:a2:8a:78:
a1:a2:4a:3c:b8:03:1c:8e:69:de:47:a8:92:b5:89:a1:a2:31:
0a:d6:10:9e:97:34:2f:4e:4d:ab:63:80:41:f9:23:77:a3:7b:
a5:9d:38:b9:19:a1:85:82:68:b6:97:14:09:25:24:3d:d0:00:
2b:3d:10:28:d5:70:0e:11:37:c5:22:0c:ce:5c:5c:33:dd:c0:
fc:69:d8:0b:4b:4c:4a:b5:66:7c:2a:fe:0f:52:00:0c:bc:18:
19:6b:e6:49:fb:a6:58:b6:94:3b:f9:45:dc:02:fb:67:43:42:
0a:2a:4b:d6:b6:c7:52:1b:e1:72:53:c0:6c:2a:b0:30:31:70:
b2:8c:51:7a:61:a1:29:42:dd:1a:b2:6a:5f:5e:7b:96:07:00:
3d:5f:38:87:f1:ed:0c:13:07:4e:11:1a:0d:f9:da:09:3b:c4:
cb:5d:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:06:24 2026 by rpki-client