Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2y6ksJufcwjcscMOyWKPC8aSs0g.roa
File: 2y6ksJufcwjcscMOyWKPC8aSs0g.roa (raw, json)
Hash identifier: bq6/2kSDoxINCvQ3gcghVe8sOE2+h3AEpnAYNpk1U6o=
Subject key identifier: DB:2E:A4:B0:9B:9F:73:08:DC:B1:C3:0E:C9:62:8F:0B:C6:92:B3:48
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA60C0CB2FD877C546558BED4A752862E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2y6ksJufcwjcscMOyWKPC8aSs0g.roa
Signing time: Tue 28 Jul 2026 00:07:15 +0000
ROA not before: Tue 28 Jul 2026 00:07:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205987
IP address blocks: 87.83.174.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:0c:0c:b2:fd:87:7c:54:65:58:be:d4:a7:52:86:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 00:07:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2ea4b09b9f7308dcb1c30ec9628f0bc692b348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:e5:db:2a:3f:58:44:2c:96:66:d6:0c:8a:
6c:3e:b0:be:2a:3e:14:55:71:96:09:65:4f:a1:3b:
a8:3a:72:34:19:14:46:ee:44:5b:ff:7c:bd:86:43:
39:70:99:37:7a:97:37:87:5e:3a:b2:8a:f9:92:9d:
a6:aa:28:8b:05:85:34:ee:b1:49:a1:eb:f8:7c:e4:
54:5d:a0:22:0d:ab:b8:fc:1a:65:9c:91:15:97:73:
c7:c9:5c:0b:93:3c:57:11:35:83:24:a3:d4:60:b4:
71:71:9f:4b:8e:19:24:53:be:d4:f1:98:6d:54:dd:
1e:3b:19:4f:b3:83:e2:3e:9e:38:dd:67:cb:b5:2a:
06:3a:2f:dc:56:c0:3e:d0:db:51:aa:9b:d4:6b:7b:
e5:71:d3:cb:77:3a:3b:22:ce:3e:66:77:36:e6:4c:
ab:7c:02:3d:53:91:54:61:63:9b:3a:bc:f4:60:e0:
a2:99:3d:74:0e:73:28:83:1f:b4:e4:96:81:d5:a6:
54:45:17:50:02:f9:55:e6:f6:08:73:90:f6:2b:53:
f6:07:f2:13:d1:cb:00:87:9a:32:b6:11:83:49:4f:
5d:23:b3:95:5d:d0:ea:71:28:77:44:ab:d2:76:95:
a1:36:c8:04:30:f5:40:83:16:78:29:34:d6:d0:48:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:A4:B0:9B:9F:73:08:DC:B1:C3:0E:C9:62:8F:0B:C6:92:B3:48
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/2y6ksJufcwjcscMOyWKPC8aSs0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.174.0/24
87.84.76.0/24
Signature Algorithm: sha256WithRSAEncryption
47:8c:ef:22:17:29:91:56:2c:7d:57:04:db:3c:97:ec:39:53:
57:45:91:a3:d9:c0:11:50:7e:5b:a6:c4:b1:9e:d7:af:ea:61:
57:d6:ea:bc:6f:46:8d:2a:58:ba:34:78:f3:62:c0:be:b4:e4:
d0:bb:17:ad:a6:68:e4:bf:8f:95:17:cd:92:a0:5b:4e:bb:ff:
f4:9c:1b:9c:30:38:be:3c:cc:22:5a:03:1e:84:17:b1:99:18:
18:87:dc:43:61:3d:6b:e4:1a:1e:46:88:7f:d6:b2:ba:ff:c9:
5f:a4:bb:74:97:63:aa:d5:8a:32:72:c0:80:96:cd:ea:2c:68:
a2:6c:72:38:d5:45:55:e1:43:b4:2f:59:47:ff:70:c7:1f:dc:
84:f8:ed:4d:9f:76:a9:49:e0:9c:f3:74:a6:20:b7:c3:9c:64:
30:9c:e8:0d:a0:f0:cc:d9:c0:1a:3d:76:d1:6b:3e:e2:20:b5:
fc:4b:00:5a:9d:a5:e2:24:2f:cb:1d:84:73:c0:bb:7f:43:13:
cc:75:76:e6:0d:8b:8c:09:17:ee:d8:3f:b4:39:c7:72:d7:58:
7f:2b:a9:57:11:99:d1:ca:91:7e:3c:0e:44:36:d7:ea:80:aa:
48:17:81:65:d8:1a:75:75:a3:b8:81:99:fb:11:e0:25:26:30:
29:28:82:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:58 2026 by rpki-client