Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4YOhfi-FoenQa_ipMD5FrQvNbSU.roa
File: 4YOhfi-FoenQa_ipMD5FrQvNbSU.roa (raw, json)
Hash identifier: Oo9AlDOz+PZFi3xXclkbT2CXZa8vFoHlC9muFQG5BZc=
Subject key identifier: E1:83:A1:7E:2F:85:A1:E9:D0:6B:F8:A9:30:3E:45:AD:0B:CD:6D:25
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B5FACE46D0DF76711900BB2823B70CE2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4YOhfi-FoenQa_ipMD5FrQvNbSU.roa
Signing time: Fri 18 Sep 2026 19:25:07 +0000
ROA not before: Fri 18 Sep 2026 19:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 87.86.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:fa:ce:46:d0:df:76:71:19:00:bb:28:23:b7:0c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 19:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e183a17e2f85a1e9d06bf8a9303e45ad0bcd6d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:30:27:dd:4b:1f:fe:54:92:bc:b7:21:8f:
16:be:75:43:f4:ef:0b:8f:d1:cc:73:5c:1f:9a:66:
9a:30:78:b1:53:1a:2d:61:bb:b7:42:54:fc:f9:57:
9f:df:79:71:40:29:67:a6:e9:ec:5f:76:20:0d:62:
e1:00:b6:e1:6e:5b:9c:60:28:4a:13:f2:d7:bc:91:
88:9a:b2:40:c3:0b:ec:2e:06:76:0c:3e:f3:25:a1:
b3:a1:01:e6:b8:45:ac:a0:ed:cc:3c:66:4f:5c:d2:
4f:5c:2e:e3:5a:d4:94:da:1c:bc:06:a8:d0:0d:ac:
95:4b:f4:e9:0e:15:65:85:3c:81:2c:4b:ca:e7:33:
84:36:27:2c:e0:a9:33:36:79:8e:e1:cb:60:91:ca:
c9:4d:bb:df:e1:6f:b4:fb:4d:22:6a:f2:2d:61:0a:
2b:2b:37:a6:f6:36:b7:80:38:fa:de:cc:39:0c:f9:
43:2f:0c:61:42:a8:5d:15:a3:f0:c8:6c:11:85:bd:
fa:6b:60:df:45:34:20:f7:4e:bd:09:da:aa:06:e5:
23:7b:3d:c8:0e:79:5b:ee:5f:a3:53:b1:e7:72:06:
c9:b9:e1:64:66:01:54:9f:71:ea:55:2e:12:34:a9:
ab:ce:fa:b4:07:06:30:ef:b2:93:10:34:59:a9:09:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:83:A1:7E:2F:85:A1:E9:D0:6B:F8:A9:30:3E:45:AD:0B:CD:6D:25
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4YOhfi-FoenQa_ipMD5FrQvNbSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.19.0/24
Signature Algorithm: sha256WithRSAEncryption
31:04:3a:bf:a5:76:d8:db:e4:74:ec:86:6a:16:c1:22:b3:1d:
57:2d:ae:7a:81:9b:54:54:4a:4f:b0:f8:a2:eb:6b:91:1f:3c:
dc:ea:a5:d9:2d:b3:57:40:43:a8:2f:c0:13:57:16:d1:d8:35:
06:06:7d:55:92:c0:47:0f:a6:50:de:01:12:a9:bc:99:01:5b:
f3:c1:40:6c:5b:b1:a8:c7:2e:ad:6f:da:77:5b:da:e2:e8:ea:
4a:18:38:ec:aa:04:9f:f4:42:46:74:fe:e6:95:c5:de:97:da:
22:81:94:6f:96:67:27:70:41:22:58:9d:3a:27:c7:10:ab:da:
45:32:a2:9c:29:5d:95:de:11:68:e0:25:5e:9d:e4:34:d8:af:
28:2f:69:58:75:6b:95:4f:4f:b3:d9:6a:f1:43:0a:32:b6:cf:
31:0c:a9:08:d3:de:fd:01:43:51:f0:e6:6a:be:94:5f:33:ef:
98:33:8b:2e:ce:9d:87:36:70:46:e7:fe:28:31:7a:c7:f1:16:
32:45:ac:e9:6a:42:b6:73:8d:79:20:28:69:07:4d:7c:a6:12:
16:5d:2c:fc:60:0e:2a:0d:fb:0a:d5:3c:6c:78:a5:42:9c:90:
7e:18:db:4c:21:ca:11:94:d3:1f:98:18:74:b0:c8:1e:33:9c:
c5:be:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:38 2026 by rpki-client