Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gofz34qD1cJPS1ChqxsIXV83QNE.roa
File: gofz34qD1cJPS1ChqxsIXV83QNE.roa (raw, json)
Hash identifier: ka0UdVRo5OG9zki6/+741bVBRH23Gz3p/uRkh5eM7yY=
Subject key identifier: 82:87:F3:DF:8A:83:D5:C2:4F:4B:50:A1:AB:1B:08:5D:5F:37:40:D1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09A41F5E155D73B6DFB13CB3752AEF9CA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gofz34qD1cJPS1ChqxsIXV83QNE.roa
Signing time: Sun 13 Sep 2026 10:13:29 +0000
ROA not before: Sun 13 Sep 2026 10:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45102
IP address blocks: 87.83.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:41:f5:e1:55:d7:3b:6d:fb:13:cb:37:52:ae:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 10:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8287f3df8a83d5c24f4b50a1ab1b085d5f3740d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:1b:c1:97:57:40:b5:48:ff:d6:a1:23:5d:
48:ea:34:01:a6:a4:45:25:ff:0a:b0:af:67:1a:09:
dc:85:c0:51:65:ab:5f:54:54:be:43:0c:8c:a7:44:
7d:85:f7:82:57:fb:1e:47:17:ab:26:07:f4:b4:03:
ec:57:ac:50:63:70:be:bf:2f:7e:1f:c7:be:64:71:
a4:e2:e8:32:e6:2c:80:0f:cd:35:a7:16:88:e6:9e:
dd:10:c1:0e:19:e4:29:b0:79:c6:6c:6d:ef:bc:a4:
b6:70:7b:d9:94:4f:86:5c:aa:f3:3c:50:6b:18:4c:
58:04:1a:fd:06:07:79:5b:c7:78:10:3f:f0:a0:d6:
c5:cd:80:4f:d2:31:04:10:4c:3a:e8:31:7f:aa:84:
1d:3c:d0:6e:46:7e:ed:43:62:c2:83:97:03:51:19:
49:f8:d6:c2:d7:5c:b5:22:e3:1f:73:1c:b8:db:95:
eb:d6:f0:4e:bd:b9:82:72:97:73:bc:53:f4:ef:a6:
4e:d6:5e:09:ce:c6:d0:ae:1e:38:45:89:b2:4e:d5:
91:5c:10:a6:6c:57:6a:a6:0d:5d:68:18:ac:a9:0a:
5f:1d:b7:f2:2e:14:a2:78:cc:f8:81:8b:43:7c:b5:
01:4c:1f:b4:ec:4e:7f:57:7e:c3:90:1d:c7:e5:40:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:87:F3:DF:8A:83:D5:C2:4F:4B:50:A1:AB:1B:08:5D:5F:37:40:D1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/gofz34qD1cJPS1ChqxsIXV83QNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:0a:f4:9c:0f:a2:7d:ca:7a:b3:81:a7:fb:31:e7:73:d3:1c:
78:d3:5f:4c:6e:5d:c1:d6:2f:41:76:f5:09:d3:b1:fd:c8:ae:
8a:88:ac:fa:1e:6f:9c:db:29:99:ee:70:95:8f:58:45:15:92:
95:2f:01:0e:12:0d:f2:da:a8:ea:46:e7:73:e0:f9:d3:36:f1:
40:6a:b5:1c:4f:03:19:bf:75:a6:0b:87:19:20:b4:eb:61:8e:
d8:bc:37:6b:00:2e:2a:cc:e1:d6:bf:6a:62:09:dc:ba:46:14:
96:40:d3:5e:1e:ca:e1:c7:55:4d:72:48:67:af:71:b3:96:b7:
b7:5e:55:5c:eb:09:7f:d5:6c:93:2c:51:f8:cf:64:76:b3:a3:
9c:d9:a3:61:2c:f0:2e:ff:f6:31:0d:c5:25:ea:56:8f:2d:4d:
c9:2b:2d:93:f8:3d:2a:f3:b6:49:90:e9:87:5d:db:1c:8a:2a:
46:c8:2c:57:e8:d5:b1:2b:f6:cb:bb:a9:31:44:b3:19:3b:a0:
13:e2:81:30:c9:cc:5a:5d:5c:d6:f6:17:37:46:40:db:b8:8b:
77:07:77:70:92:62:9e:27:ab:8e:67:01:e9:6e:2c:df:16:29:
07:14:ab:63:78:d3:15:42:a1:4d:92:dd:6d:65:f6:e7:c0:45:
14:8b:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:53 2026 by rpki-client