Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FPdulvDpau_A1XQ2gRSIYWYoT1Y.roa
File: FPdulvDpau_A1XQ2gRSIYWYoT1Y.roa (raw, json)
Hash identifier: 6H6djzu9cniqEqSpBl1n5ErexGyNXfTKPp5bDz9r4BI=
Subject key identifier: 14:F7:6E:96:F0:E9:6A:EF:C0:D5:74:36:81:14:88:61:66:28:4F:56
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0ACAEBF57831CB8C2D243E4AF4E1AF33A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FPdulvDpau_A1XQ2gRSIYWYoT1Y.roa
Signing time: Thu 17 Sep 2026 00:05:28 +0000
ROA not before: Thu 17 Sep 2026 00:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 87.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:ae:bf:57:83:1c:b8:c2:d2:43:e4:af:4e:1a:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 17 00:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14f76e96f0e96aefc0d574368114886166284f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:ab:8f:24:bd:c7:c8:f5:92:2b:9d:19:dd:
d1:d5:bd:8a:54:cf:59:cb:2f:91:f5:32:d1:3d:de:
a7:7c:94:60:51:ca:d7:69:cc:a6:c8:68:24:8b:bc:
9d:7e:14:a3:71:9b:ed:21:40:44:8a:a0:d8:22:b7:
8b:63:2f:65:44:43:e1:98:06:db:12:73:27:b7:8f:
1e:56:f5:89:74:f0:7d:e3:9a:52:57:88:ac:92:6b:
bb:59:ea:ed:1e:36:08:6f:2e:49:91:0e:9e:3f:a3:
23:12:66:ec:dd:c3:54:1d:b7:45:80:32:fc:49:4e:
2d:7d:1e:f9:53:29:24:df:81:c5:23:37:74:ab:2c:
c6:6e:6f:e9:7b:e5:2a:7a:f1:9c:59:04:f8:43:19:
0c:92:69:f7:cb:10:56:e5:47:5b:01:7f:f1:df:63:
fb:6e:a6:6c:3f:6a:e6:09:9d:0e:d9:e4:e9:29:92:
75:cd:f4:40:7c:fd:d8:65:3c:c8:7d:e4:d3:29:98:
46:ce:78:0a:75:92:77:40:92:e9:7c:96:69:9b:c4:
e3:b9:63:b0:1c:4d:ae:9d:4d:03:f5:4b:22:58:02:
3a:7c:38:9c:3a:e8:29:a0:e8:42:cd:f7:e8:a6:e4:
7a:29:54:30:70:cc:49:d2:4c:c1:8b:e8:08:0a:34:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:6E:96:F0:E9:6A:EF:C0:D5:74:36:81:14:88:61:66:28:4F:56
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FPdulvDpau_A1XQ2gRSIYWYoT1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
93:a2:4f:90:55:aa:bc:69:5d:97:87:5d:4d:2e:da:74:10:fd:
9e:18:8e:02:57:65:f5:86:20:c7:65:fa:e2:94:b5:f2:db:6d:
2b:23:5c:15:fe:39:4e:33:8b:6b:84:ff:69:ea:f5:d4:ba:d3:
96:8d:8a:0d:72:e5:37:6c:20:c8:a7:0b:99:43:05:55:25:cb:
19:11:79:56:c9:bf:2d:04:d4:62:04:78:a9:86:59:50:be:be:
9c:4e:ce:32:f1:e8:47:84:e3:d5:02:bc:1f:6c:1d:dc:2c:9b:
b3:25:99:f5:10:74:6b:02:00:67:83:3b:77:4e:60:95:12:6b:
38:a4:76:a2:67:13:50:14:fe:e6:1f:dd:39:66:45:af:dd:f9:
59:a4:7d:82:e3:8e:e1:1f:19:99:3a:25:e5:b2:c9:4d:97:35:
ab:37:a1:b8:c4:a2:50:bc:cc:2c:90:05:4c:f2:1b:ca:32:3d:
cc:00:c4:51:4d:53:48:f0:7a:8a:78:3b:39:97:6a:c1:a3:88:
e0:04:b4:7f:0e:7d:bf:3e:88:e4:09:90:ee:2e:8d:b9:1f:f0:
fa:5a:83:27:b4:52:3e:fe:f6:26:d0:e2:d7:71:80:8b:9e:da:
84:31:27:c7:c1:25:90:06:3f:70:86:0d:03:ea:b8:f2:04:c8:
62:15:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:38 2026 by rpki-client