Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CJ94y6VzD6gLIiA5iAbLVoPuOLM.roa
File: CJ94y6VzD6gLIiA5iAbLVoPuOLM.roa (raw, json)
Hash identifier: R6RGH94e97sUxNh8JJ+cL7n7X39V5DYzSiTr+kCramw=
Subject key identifier: 08:9F:78:CB:A5:73:0F:A8:0B:22:20:39:88:06:CB:56:83:EE:38:B3
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019C8FA120F58927265F3198BD39BEE8B962
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CJ94y6VzD6gLIiA5iAbLVoPuOLM.roa
Signing time: Tue 24 Feb 2026 12:30:27 +0000
ROA not before: Tue 24 Feb 2026 12:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 87.86.24.0/23 maxlen: 23
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:a1:20:f5:89:27:26:5f:31:98:bd:39:be:e8:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Feb 24 12:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=089f78cba5730fa80b2220398806cb5683ee38b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fa:45:d1:b6:6a:c5:13:7a:eb:56:a5:c1:36:
cf:39:3a:92:36:fe:ec:e6:f0:19:bb:44:8d:bb:e5:
06:41:97:4e:c6:5d:c7:0d:44:b1:d9:e2:29:4b:57:
9a:4e:d4:86:e4:69:62:f3:67:d6:8e:1a:13:0a:57:
54:89:20:0f:da:08:92:c2:12:4b:11:74:ca:1b:5f:
a8:1e:17:f0:1d:2f:43:a4:a4:3c:84:28:20:d9:5d:
95:85:ef:80:fb:d9:40:bb:18:ba:3e:b1:8c:8b:16:
5e:f1:76:4d:77:20:e2:51:bd:f8:67:94:87:8e:95:
95:cb:91:7d:ab:39:52:fd:8d:3b:5f:81:94:62:04:
d8:88:8d:a6:50:a7:f5:72:7c:cf:80:df:62:3d:81:
c7:a0:a9:af:25:57:00:d3:d1:15:1e:ca:a4:8c:57:
77:f2:4f:b5:8e:7a:49:58:f4:be:bb:bc:e0:87:ba:
31:78:5f:40:30:6f:08:ad:ac:60:b7:07:4f:e9:a8:
a8:ad:db:00:73:af:6f:cd:a0:4f:10:fa:98:bd:d2:
5a:9c:37:66:80:01:2e:33:a1:67:d7:56:56:0f:d2:
48:36:ce:68:05:1f:80:56:29:f8:c8:50:82:71:ec:
a5:87:5e:2c:d8:75:a6:82:5d:5a:43:f9:92:22:b7:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:78:CB:A5:73:0F:A8:0B:22:20:39:88:06:CB:56:83:EE:38:B3
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CJ94y6VzD6gLIiA5iAbLVoPuOLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.24.0/23
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
24:60:20:2b:54:60:24:5b:ee:46:ca:61:6f:b2:6e:a3:76:ef:
33:1e:38:75:e5:60:c8:40:30:63:d4:a3:fa:21:39:f5:5a:09:
8b:e8:fd:9e:ce:9c:9c:e8:67:fb:17:1f:05:c0:28:bd:cd:4e:
19:08:e0:62:d6:01:32:b2:d6:3a:ec:80:90:6b:d8:b1:96:f2:
e3:e0:42:51:f2:e1:eb:6a:1d:ed:ad:6f:06:8e:f7:bf:81:e9:
f1:30:f7:45:76:5a:4d:49:58:4c:35:c1:a3:06:ae:7a:33:a8:
dc:4e:86:e1:a6:96:fe:4e:d9:00:d2:6e:de:50:47:2e:53:b9:
3f:3a:88:5c:c1:63:32:fa:c0:f5:67:ee:33:e8:6d:75:87:f2:
dd:08:d1:5a:c0:e3:bf:59:dc:3a:17:ac:68:f1:96:12:3a:12:
8a:e4:36:4f:70:52:04:f0:fc:11:60:50:60:69:5f:ef:97:a6:
5b:2d:46:34:ad:e0:68:e1:dc:72:f3:36:f1:e6:a3:0f:55:c4:
5a:78:4e:4c:eb:32:be:4f:4e:15:cd:61:de:79:2d:ab:9b:14:
01:2a:18:28:c1:9c:7c:f1:fc:84:36:d6:bb:bd:44:a9:cd:07:
45:4b:94:3b:42:ba:44:63:07:0a:54:45:1c:ec:27:a8:a0:e3:
82:e3:bb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:25 2026 by rpki-client