Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/_rk1yyWn-XkusItR7PK6OEIyLqs.roa
File: _rk1yyWn-XkusItR7PK6OEIyLqs.roa (raw, json)
Hash identifier: N4P4MwEuBbJVEv+dERBWWv5Nvs/n5YSD+zBi/kW24Vg=
Subject key identifier: FE:B9:35:CB:25:A7:F9:79:2E:B0:8B:51:EC:F2:BA:38:42:32:2E:AB
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 019FA780A7BA6C00798300D690F5A5533D2B
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/_rk1yyWn-XkusItR7PK6OEIyLqs.roa
Signing time: Tue 28 Jul 2026 06:54:14 +0000
ROA not before: Tue 28 Jul 2026 06:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213269
IP address blocks: 86.111.212.0/24 maxlen: 24
109.204.128.0/21 maxlen: 21
109.204.132.0/22 maxlen: 22
109.204.136.0/21 maxlen: 21
109.204.144.0/20 maxlen: 20
2a04:7000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:80:a7:ba:6c:00:79:83:00:d6:90:f5:a5:53:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jul 28 06:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=feb935cb25a7f9792eb08b51ecf2ba3842322eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:eb:32:32:98:19:16:ae:70:17:0d:6f:cc:
4b:fa:ac:c6:ab:7c:9c:fb:0c:33:4e:bf:6e:5a:5f:
1d:47:f1:31:59:12:bf:37:33:8f:1b:d9:16:9d:b4:
28:7c:e1:b5:56:eb:4d:60:29:ab:03:ea:55:a5:b6:
f9:9d:28:b1:2a:66:95:6d:cb:9e:3f:1e:46:ae:de:
c7:49:37:fa:be:4a:57:a2:0f:a8:23:db:01:3e:20:
f3:51:93:4e:6d:56:d2:fd:b7:13:a5:7a:b5:a6:7c:
4c:75:f3:75:2b:9f:d4:70:23:63:43:60:97:62:29:
fe:81:01:00:53:70:9b:0a:c8:c3:0f:c9:e3:55:31:
ff:c0:f9:5b:2d:22:0b:45:60:1b:19:c8:ed:f7:f1:
ba:81:cb:6e:89:3e:a7:d0:01:04:da:1e:72:89:ac:
a4:0f:c2:b2:69:ec:10:3e:22:0e:0d:8f:5f:91:5f:
d7:b9:d7:17:7d:27:a0:06:99:5d:e2:69:a8:62:ef:
10:dc:6f:13:97:26:b7:67:8c:d0:09:03:1d:d2:fe:
be:fa:50:f1:59:a9:a3:16:05:ee:aa:82:48:82:62:
ce:75:5e:07:d0:e3:e7:a6:89:75:a5:52:a4:e9:1d:
e6:b1:07:e4:e2:79:4a:67:85:37:47:3e:76:b0:62:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:35:CB:25:A7:F9:79:2E:B0:8B:51:EC:F2:BA:38:42:32:2E:AB
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/_rk1yyWn-XkusItR7PK6OEIyLqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.212.0/24
109.204.128.0/19
IPv6:
2a04:7000::/29
Signature Algorithm: sha256WithRSAEncryption
5d:5e:20:8a:58:89:8a:b8:dc:94:8f:1b:f4:e8:86:69:a4:22:
b6:ec:5c:e9:fa:1d:a2:64:1a:05:41:b8:d9:c2:e0:67:75:28:
12:96:de:a3:a9:c4:2d:46:25:da:7b:ac:c9:93:bf:1d:c4:4a:
6f:9f:b9:6b:af:f4:bd:3d:78:69:99:38:63:30:d6:48:df:7e:
44:c3:19:9f:58:3a:5f:6f:e0:08:31:9c:c8:68:2a:97:db:07:
45:f6:0a:05:f8:d8:e3:33:84:b4:f2:98:51:14:3e:e3:0c:3f:
b1:af:48:38:fa:0b:53:07:61:21:41:68:bf:05:99:f8:69:94:
34:0d:c2:22:7d:ae:23:6e:0f:c8:9f:82:8f:71:90:55:19:91:
bf:77:c2:c5:ae:2c:08:4b:1e:77:54:46:b8:71:7d:ee:1d:d9:
c4:72:c3:60:ed:ee:06:4f:35:c4:10:67:7c:a4:7d:c4:86:c0:
8b:12:61:71:fe:28:89:4f:d8:3c:91:f4:7e:01:97:fd:8c:74:
d3:5b:05:9c:1e:ae:b3:93:e8:8f:75:c1:29:34:ba:6e:c8:0e:
4d:db:88:40:ce:a3:d4:72:52:dc:b0:5a:74:bf:36:da:54:53:
9a:fd:29:52:4c:bc:bc:9b:4d:55:f7:41:9c:f1:85:90:b2:3f:
67:9c:dd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:59:05 2026 by rpki-client