Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0AFMHyR7d2iFZA53kglijH0p0aQ.roa
File: 0AFMHyR7d2iFZA53kglijH0p0aQ.roa (raw, json)
Hash identifier: /eqzIJIWAoMot0DaJ3zWRETuiNxdnVg+wcbq6RFJIg0=
Subject key identifier: D0:01:4C:1F:24:7B:77:68:85:64:0E:77:92:09:62:8C:7D:29:D1:A4
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A0BE7841652EA4C7B72B3FEC9E44F25864
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0AFMHyR7d2iFZA53kglijH0p0aQ.roa
Signing time: Sun 20 Sep 2026 10:59:07 +0000
ROA not before: Sun 20 Sep 2026 10:59:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.232.99.0/24 maxlen: 24
87.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:78:41:65:2e:a4:c7:b7:2b:3f:ec:9e:44:f2:58:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Sep 20 10:59:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0014c1f247b776885640e779209628c7d29d1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:68:a0:bd:dc:ca:d6:64:4a:e1:0e:dd:3a:
d6:de:9a:f9:1a:9a:90:c6:17:9b:ca:7d:18:cb:b0:
92:d4:8a:ea:95:5d:26:ea:c7:ca:de:70:c2:d1:29:
e1:cc:c5:35:10:e4:5c:22:4c:ba:3d:ee:ff:77:bb:
2c:51:cb:13:6b:fc:0c:c2:a6:a6:e7:0a:33:c9:bb:
78:ee:46:36:ce:ef:95:96:f9:95:0b:e6:7b:d4:9b:
52:ef:9f:08:d3:5a:3e:2f:b9:f4:c2:42:da:e9:4e:
2e:36:d9:c4:89:ce:e1:e2:d6:fe:1e:37:0e:a1:ff:
1c:05:7a:34:b8:56:bc:8d:f0:44:77:fe:e9:ee:f8:
5f:76:51:5a:48:95:e5:18:20:be:a6:a9:65:09:6f:
da:22:3d:97:dd:5d:79:32:fc:72:13:57:a0:91:9f:
a7:11:f1:26:98:31:0a:7d:8b:ef:82:39:e0:f3:9f:
71:ae:7e:87:88:74:dd:70:22:a3:34:14:53:bd:22:
b7:fa:ab:f6:4b:ee:e0:bf:f3:ab:c7:a3:fc:c2:0a:
0a:08:7f:b5:64:21:38:5a:52:05:13:8b:e6:81:be:
01:d8:59:64:00:5f:c8:ab:ef:8a:e4:6c:9a:56:30:
4a:f6:85:75:c8:4d:1e:9e:9f:82:2c:df:e5:1c:78:
8b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:4C:1F:24:7B:77:68:85:64:0E:77:92:09:62:8C:7D:29:D1:A4
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/0AFMHyR7d2iFZA53kglijH0p0aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.99.0/24
87.232.101.0/24
Signature Algorithm: sha256WithRSAEncryption
83:f2:92:4f:ce:c3:9f:8c:7c:da:b4:35:a1:b2:79:ac:01:62:
bb:e2:9e:ed:7c:92:34:ce:4d:54:03:18:38:bf:dc:48:ba:0e:
c9:62:06:fa:15:2b:30:e6:9f:2e:58:e0:cd:3a:62:ad:79:a3:
d5:18:25:df:9a:a6:e4:67:df:30:df:35:80:04:f9:80:a2:3b:
79:ac:a6:c9:c9:23:66:97:6d:e3:ae:37:7f:82:66:3a:d7:3b:
7e:a0:3c:40:f7:49:ab:f1:31:ce:0b:ae:74:14:78:64:6e:62:
96:3c:6a:de:34:9c:53:ea:a4:49:e5:7b:0d:41:30:2c:fa:08:
7a:6c:4f:f8:00:05:19:c0:9c:6b:9e:f8:d3:aa:74:de:82:00:
3d:52:81:51:5b:6c:2d:f3:29:c2:6c:98:5e:d3:1b:0c:d2:88:
3e:59:87:91:04:9e:77:fa:63:40:6d:89:6a:7d:c6:bb:ce:a0:
65:eb:3c:09:45:93:a6:13:d4:dc:27:d3:09:39:e8:cb:f5:0e:
9a:63:35:3a:85:e9:dc:4e:33:f6:72:db:45:92:35:f3:25:aa:
04:4b:9b:9c:11:f2:82:9f:a7:3b:0c:c5:6f:df:34:35:8e:05:
62:48:5b:d4:df:08:86:5b:dc:f5:40:84:6a:80:b0:f0:6e:1c:
c3:d1:31:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:43 2026 by rpki-client