Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JP2QdOZw7vW_4GE_0Or5FwNot_0.roa
File: JP2QdOZw7vW_4GE_0Or5FwNot_0.roa (raw, json)
Hash identifier: a1D0XTH4M+wvoBRjiqylLIQbbnv1QMIVukSipkPaMb8=
Subject key identifier: 24:FD:90:74:E6:70:EE:F5:BF:E0:61:3F:D0:EA:F9:17:03:68:B7:FD
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0949D3F89E3419153BD7AF9FA3F5EFC84
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JP2QdOZw7vW_4GE_0Or5FwNot_0.roa
Signing time: Sat 12 Sep 2026 07:55:28 +0000
ROA not before: Sat 12 Sep 2026 07:55:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 82.110.106.0/23 maxlen: 24
87.83.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:9d:3f:89:e3:41:91:53:bd:7a:f9:fa:3f:5e:fc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 12 07:55:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=24fd9074e670eef5bfe0613fd0eaf9170368b7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:11:74:f0:2d:a5:80:19:ab:23:ed:e0:cb:7d:
b5:df:31:6e:5b:28:7f:34:7f:b6:ac:5d:7b:1d:e7:
2b:b7:05:7c:9a:bf:e7:82:f2:2e:18:38:e8:87:a9:
bf:cb:5e:b9:86:d8:47:ef:fd:1f:d6:cf:bf:12:c6:
f3:a6:72:8e:45:64:25:df:09:75:da:15:f0:c4:de:
e4:81:57:46:02:25:f8:44:30:8f:c5:3f:a0:4a:c1:
d4:90:e0:e9:0f:56:fa:e0:72:9a:e7:ed:2a:7d:d6:
60:38:1b:83:0c:27:72:d6:16:eb:ce:a6:ba:83:c0:
ac:78:21:cb:b2:86:ec:5b:a5:6c:97:a9:fc:0a:25:
c4:4b:e6:fe:50:4d:ae:85:52:50:8d:63:29:8e:f6:
1a:a9:92:35:55:a4:9a:78:6c:b8:9d:44:8e:ac:a0:
87:6a:45:9a:f9:b9:50:dd:31:78:f2:85:79:16:e5:
18:7f:af:ca:88:1d:94:88:2c:e7:a9:2d:98:07:7f:
14:59:72:33:30:33:83:49:94:69:72:9d:e2:0d:49:
57:14:3c:78:de:dc:5c:89:4c:bc:3f:14:6a:dd:fd:
53:8a:fb:77:21:3a:f2:85:1c:9c:3d:b9:24:9e:77:
3b:9e:85:9d:48:fa:90:54:81:47:e5:13:5b:a9:57:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FD:90:74:E6:70:EE:F5:BF:E0:61:3F:D0:EA:F9:17:03:68:B7:FD
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JP2QdOZw7vW_4GE_0Or5FwNot_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.106.0/23
87.83.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7e:d7:59:8a:f4:e1:ca:1b:3e:d4:cf:53:00:e1:9c:b0:fe:
8f:29:b1:6f:55:e2:f3:25:7f:c8:61:b5:24:75:0e:d5:5d:3f:
c6:f6:91:58:ad:b9:25:ad:b4:86:67:2c:98:d1:2e:b1:29:2a:
00:4e:5a:4c:93:cb:24:93:99:c4:69:cc:a6:30:d4:cd:f9:2b:
52:81:f2:ad:d4:da:06:51:3c:74:8f:78:fe:93:7c:76:e8:2b:
e4:db:80:8e:2c:67:37:a5:3c:3d:8c:51:a2:fd:a3:5e:57:af:
6b:39:55:fb:0d:c8:40:6a:0a:ad:a5:f7:22:7e:66:f5:11:f3:
86:fe:c9:74:44:01:a9:58:87:fc:86:67:93:a0:5d:a0:c1:ff:
18:2c:71:0b:93:1a:ab:eb:a2:85:cf:6d:92:62:90:8f:2d:b8:
03:5a:20:02:b0:fd:16:2e:d2:79:d6:fe:70:c8:7f:20:24:39:
24:51:ac:68:e9:1c:9d:0a:e1:8e:e8:fb:46:f6:6b:93:b7:87:
66:1e:fe:4e:54:bf:33:84:00:50:97:a0:93:4b:43:6c:64:89:
99:2a:1a:06:f5:f6:ea:c2:a4:a3:27:29:07:1f:11:68:e9:a5:
6f:44:07:45:31:3d:08:9c:16:c7:f4:6a:71:a2:ac:f4:79:c0:
9a:d3:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:32:44 2026 by rpki-client