Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3C1BPF1rBzQbw6gEdtsUN1MmZtI.roa
File: 3C1BPF1rBzQbw6gEdtsUN1MmZtI.roa (raw, json)
Hash identifier: 8yZ2DNIMhoHlNJNDv4LPXZM8Fhfug/4P34eXlgykaxk=
Subject key identifier: DC:2D:41:3C:5D:6B:07:34:1B:C3:A8:04:76:DB:14:37:53:26:66:D2
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09E73DD68B18E65F551A741E6735FD064
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3C1BPF1rBzQbw6gEdtsUN1MmZtI.roa
Signing time: Mon 14 Sep 2026 05:46:28 +0000
ROA not before: Mon 14 Sep 2026 05:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218862
IP address blocks: 87.83.218.0/24 maxlen: 24
87.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:73:dd:68:b1:8e:65:f5:51:a7:41:e6:73:5f:d0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 14 05:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc2d413c5d6b07341bc3a80476db1437532666d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:a1:24:6e:01:93:0b:f3:db:43:13:c2:23:
8d:03:98:d6:bd:24:39:6b:c1:01:0a:d5:47:3d:af:
35:f9:5e:9b:0d:ea:8d:47:0b:b7:d1:5d:3f:2c:62:
b6:4a:fe:bb:a3:10:08:53:00:f8:e0:bd:f1:14:d6:
d9:d5:87:fd:9f:78:d5:41:ac:77:fc:29:f1:9b:5d:
dc:17:b6:29:66:dc:fa:e9:ac:8d:40:07:ce:d8:ea:
67:78:b7:c1:af:ae:f4:5b:f4:c1:84:03:0e:c4:f5:
2d:26:49:e2:5f:1a:46:3a:9f:7c:29:e8:a5:ee:ca:
6f:e5:a2:84:cc:1b:5f:1e:73:66:d5:39:3a:7d:43:
e7:b8:a0:2b:07:e8:35:5e:82:36:21:15:11:26:ba:
d5:ff:a1:a9:22:68:33:32:7f:11:bd:20:0e:f2:3d:
a0:e1:e8:30:58:2d:a6:e9:31:f6:6d:2f:7e:2b:ac:
3b:3b:82:9d:7f:ff:4e:bd:00:fb:18:83:41:f4:5a:
b7:c7:c4:f9:ff:3f:e9:7f:4b:3a:2a:61:8a:50:9b:
83:aa:16:4a:93:6a:65:e8:b2:55:42:72:74:53:f3:
99:e6:03:85:6b:12:9e:5f:2e:e2:a4:78:d4:90:01:
a3:7b:7c:ac:c0:77:32:b5:1c:a0:32:b7:f1:cb:be:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2D:41:3C:5D:6B:07:34:1B:C3:A8:04:76:DB:14:37:53:26:66:D2
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/3C1BPF1rBzQbw6gEdtsUN1MmZtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.218.0/24
87.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cf:ad:ac:39:cc:66:f5:cf:bd:cf:6a:71:98:74:8a:75:60:
1a:cd:34:77:38:f0:d4:b6:dd:5d:a6:41:02:86:8f:d8:de:e7:
55:2b:ed:4a:1b:39:de:27:82:d8:86:a0:96:52:69:ef:f4:e6:
e2:7e:58:f5:d0:9e:8a:0a:40:bc:04:fb:24:1c:ab:1b:44:b2:
bb:a8:62:a2:f0:58:c3:01:93:7f:7b:f9:a4:4f:63:0a:0e:8c:
d5:2b:ec:0d:95:e7:99:20:c7:75:fe:97:04:8f:6c:9a:69:6b:
f1:32:d5:a4:7d:40:e4:7d:e1:2d:d3:61:d6:82:55:27:99:42:
e4:17:60:b2:80:b9:d7:dc:66:9d:47:95:da:11:cb:c4:90:cc:
df:14:55:df:0d:9e:fb:7b:9f:33:48:bc:88:11:99:50:3e:dc:
20:92:72:98:7e:17:10:4f:df:f0:30:22:10:8c:9d:b1:9b:50:
00:c5:3d:d9:1b:4b:d8:2b:d5:ce:c8:23:82:fa:09:e5:59:60:
07:87:36:9c:b0:70:97:d8:a0:ff:5f:e8:50:63:97:df:4f:d2:
49:de:df:3a:9b:0e:1d:0f:44:b3:8a:07:33:08:65:5e:a5:0a:
7f:22:62:87:85:93:63:60:1c:4b:cb:e1:2f:60:56:31:a4:32:
f7:2c:61:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCec91osY5l9VGnQeZzX9BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTE0MDU0NjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzJkNDEzYzVkNmIwNzM0MWJjM2E4MDQ3NmRiMTQzNzUzMjY2NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEShJG4Bkwvz20MTwiONA5jWvSQ5
a8EBCtVHPa81+V6bDeqNRwu30V0/LGK2Sv67oxAIUwD44L3xFNbZ1Yf9n3jVQax3
/Cnxm13cF7YpZtz66ayNQAfO2OpneLfBr670W/TBhAMOxPUtJkniXxpGOp98Keil
7spv5aKEzBtfHnNm1Tk6fUPnuKArB+g1XoI2IRURJrrV/6GpImgzMn8RvSAO8j2g
4egwWC2m6TH2bS9+K6w7O4Kdf/9OvQD7GINB9Fq3x8T5/z/pf0s6KmGKUJuDqhZK
k2pl6LJVQnJ0U/OZ5gOFaxKeXy7ipHjUkAGje3yswHcytRygMrfxy74CQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNwtQTxdawc0G8OoBHbbFDdTJmbSMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvM0MxQlBGMXJCelFidzZnRWR0c1VOMU1tWnRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV1PaAwQA
V1Q7MA0GCSqGSIb3DQEBCwUAA4IBAQAez62sOcxm9c+9z2pxmHSKdWAazTR3OPDU
tt1dpkECho/Y3udVK+1KGzneJ4LYhqCWUmnv9Obiflj10J6KCkC8BPskHKsbRLK7
qGKi8FjDAZN/e/mkT2MKDozVK+wNleeZIMd1/pcEj2yaaWvxMtWkfUDkfeEt02HW
glUnmULkF2CygLnX3GadR5XaEcvEkMzfFFXfDZ77e58zSLyIEZlQPtwgknKYfhcQ
T9/wMCIQjJ2xm1AAxT3ZG0vYK9XOyCOC+gnlWWAHhzacsHCX2KD/X+hQY5ffT9JJ
3t86mw4dD0SzigczCGVepQp/ImKHhZNjYBxLy+EvYFYxpDL3LGFn
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:01 2026 by rpki-client