Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JndJBfae535PBVBKJYUe-Xvti6w.roa
File: JndJBfae535PBVBKJYUe-Xvti6w.roa (raw, json)
Hash identifier: 6WjI9EPECf/+R+j3AhZKmYwnaH2ZQ+9Ouvqq3P7qK/4=
Subject key identifier: 26:77:49:05:F6:9E:E7:7E:4F:05:50:4A:25:85:1E:F9:7B:ED:8B:AC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06A65A5E08E8363FCCAA8DF8EA4B1DDF2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JndJBfae535PBVBKJYUe-Xvti6w.roa
Signing time: Fri 04 Sep 2026 03:10:41 +0000
ROA not before: Fri 04 Sep 2026 03:10:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.110.232.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:65:a5:e0:8e:83:63:fc:ca:a8:df:8e:a4:b1:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 03:10:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26774905f69ee77e4f05504a25851ef97bed8bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:de:b8:85:bb:99:bc:d0:d8:93:01:87:6f:
e1:59:2d:77:9a:9e:05:f3:65:9f:57:43:cd:4d:1e:
c3:a6:3d:b8:57:85:bc:dd:42:09:3b:73:93:bb:01:
10:ee:25:7d:d1:91:22:22:4d:0c:39:b0:45:50:ff:
e4:9c:29:d1:7c:12:a9:d6:8a:65:a3:03:f9:ff:55:
ec:77:63:99:cd:f4:66:6e:63:58:66:00:f9:99:45:
ee:ca:db:a6:88:86:ba:4e:b4:cb:e4:39:dc:6f:28:
af:3e:6d:2a:8c:7c:b6:8b:d4:76:78:03:e4:e6:83:
88:b4:52:b0:57:39:0c:85:d1:75:ae:94:7c:2a:ab:
b2:85:c4:d4:16:96:6d:97:a7:9a:35:52:49:51:8c:
80:65:ef:ee:9f:fd:e8:87:d3:1b:04:a5:c7:04:b3:
51:6c:1f:78:b6:61:f8:74:10:33:31:d4:2c:45:0c:
9d:b3:40:56:8b:a5:b8:95:09:fc:88:2a:2e:9b:6e:
62:ea:1d:37:9c:0e:b5:03:5b:f4:31:e9:ff:62:bf:
4d:68:9a:b4:ae:f5:bd:5d:14:03:d8:f3:0b:80:84:
fa:0d:79:f2:14:b4:ca:ae:1b:c3:d1:6e:44:71:22:
a2:c4:e9:f7:a1:ac:3b:f1:ec:04:03:59:ae:8d:7f:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:49:05:F6:9E:E7:7E:4F:05:50:4A:25:85:1E:F9:7B:ED:8B:AC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/JndJBfae535PBVBKJYUe-Xvti6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.232.0/24
87.86.186.0/24
Signature Algorithm: sha256WithRSAEncryption
78:60:6b:ca:f6:d9:d9:76:df:7b:b7:91:b5:3f:c1:4a:80:e4:
12:9d:00:c3:83:4d:43:ec:15:a4:b3:4c:1d:22:28:59:a8:d6:
95:a9:de:57:50:1b:75:4e:34:65:3a:fa:08:78:aa:cd:e6:3e:
42:e5:c1:ed:ab:fd:06:fd:e3:8e:88:3d:96:8a:f1:a5:85:cc:
59:ae:d0:00:70:b1:d2:6f:22:d8:3f:0d:38:a2:76:f1:fc:12:
3f:c8:05:a1:3f:e3:85:c6:bc:be:a8:fb:b4:50:50:e7:1e:d8:
82:4c:9f:f6:78:6e:65:d2:f6:bb:0b:0f:87:fe:c4:7b:61:ab:
57:7f:81:35:5c:78:a6:1f:df:bb:7a:49:8d:d1:f5:47:76:d8:
0b:eb:34:66:27:11:81:6e:3c:5a:17:ed:4b:b4:18:be:2e:af:
47:0a:92:80:3e:6b:31:81:da:bb:26:74:49:3f:04:58:09:f4:
84:09:7b:46:1d:9c:49:00:bb:2d:58:c8:44:9e:78:7b:27:1c:
39:65:da:dd:56:8e:9a:6a:2c:c5:28:66:d1:ee:8c:fe:b6:7a:
92:5b:e6:27:f4:2f:44:06:ae:25:07:6d:82:0e:b2:b4:27:5f:
c6:31:6e:33:70:89:ee:ae:19:58:7d:54:01:12:66:da:fa:51:
93:6f:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:41 2026 by rpki-client