Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CRpBjYVYzXFpQq_8rZzRH8X1II4.roa
File: CRpBjYVYzXFpQq_8rZzRH8X1II4.roa (raw, json)
Hash identifier: enR4tdNhh9XM8HfC+/LPL7u2nGaXJfvBUp0LVAMRCMM=
Subject key identifier: 09:1A:41:8D:85:58:CD:71:69:42:AF:FC:AD:9C:D1:1F:C5:F5:20:8E
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019EB57D0CC227E637ED255FB52F5CD6CF4D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CRpBjYVYzXFpQq_8rZzRH8X1II4.roa
Signing time: Thu 11 Jun 2026 07:02:11 +0000
ROA not before: Thu 11 Jun 2026 07:02:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 87.232.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:7d:0c:c2:27:e6:37:ed:25:5f:b5:2f:5c:d6:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 11 07:02:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=091a418d8558cd716942affcad9cd11fc5f5208e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:60:21:e6:71:31:cc:7e:f9:04:42:b3:a7:
11:16:1b:68:37:ba:57:c3:b8:93:bf:1f:7e:17:e3:
ef:45:64:aa:39:07:77:fc:e1:c5:45:17:bb:a7:86:
da:4f:dd:55:ae:05:c3:60:cd:fc:36:eb:57:76:77:
af:aa:e7:d3:61:77:c4:10:21:72:7f:da:12:0f:b3:
e2:ff:c6:e1:aa:95:a0:c8:02:2d:33:50:47:0f:65:
f8:2b:6e:68:f6:50:74:c4:e6:7a:64:d3:08:79:42:
af:78:d6:21:cd:fd:b7:1e:ae:4d:d3:77:ce:74:b9:
59:8f:da:b9:59:9a:51:8e:99:e0:c9:02:c6:92:4c:
33:2c:92:4e:49:27:7f:c2:27:ae:58:f2:d1:66:cd:
70:14:ba:05:02:4e:4d:3e:ec:80:05:24:69:d5:a7:
79:d3:5c:8b:4a:b1:56:b3:2e:91:1d:f9:5e:a4:6c:
b0:86:29:03:b9:a1:9c:5e:5c:d0:a3:49:76:c5:5b:
3f:2b:62:ec:6a:d7:4c:af:0a:6a:c3:22:03:a9:40:
6e:ee:bf:b2:75:f6:fc:00:38:1f:c0:a3:61:7e:f9:
70:ea:ab:b9:83:36:c3:da:ce:57:83:28:04:c4:42:
3d:a7:36:71:3c:74:4b:c1:4e:7b:b3:b0:a5:28:8c:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1A:41:8D:85:58:CD:71:69:42:AF:FC:AD:9C:D1:1F:C5:F5:20:8E
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/CRpBjYVYzXFpQq_8rZzRH8X1II4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:88:b0:7c:ba:ca:18:45:5a:18:07:d0:8c:33:62:ba:15:33:
f9:31:13:3c:28:f7:c2:18:a8:d9:1a:8d:24:58:d0:a7:93:9b:
1f:c1:91:d6:5d:10:25:38:db:72:22:1f:2f:06:7a:51:08:37:
ca:9d:e0:63:69:41:98:e5:cd:42:62:e1:2d:81:79:fb:bb:37:
2d:3e:06:24:8a:2a:8d:5b:62:71:55:36:ca:1f:4e:b0:ec:cd:
45:56:44:80:97:ff:e4:8e:7f:d7:b8:e9:24:e7:cb:9e:a8:cf:
4b:b0:06:12:d2:67:57:23:e0:de:cd:ed:2b:64:43:de:99:60:
25:65:5b:ea:24:42:59:7b:88:7f:9c:d0:b9:ee:f6:58:05:52:
f0:c8:b9:58:f8:75:bf:da:25:2f:75:34:e5:a6:69:c0:ed:50:
e7:79:0d:99:e8:20:aa:ef:bb:03:f7:d2:bb:67:e4:00:96:10:
ec:d2:b1:d0:da:09:5d:a5:8c:d2:7e:0c:ae:37:ce:51:52:67:
f4:fc:92:aa:20:c9:55:0c:ea:1f:51:da:39:29:5c:ff:00:ab:
9c:7a:63:ff:84:e9:10:87:e4:22:76:c4:4c:a9:29:1b:7e:0f:
a2:ff:83:96:e4:3c:a2:60:10:c7:61:fe:59:50:0b:54:fe:7f:
0f:dc:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:52:02 2026 by rpki-client