Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/579TLnb5WpVdtykfWt1KY87Z4KQ.roa
File: 579TLnb5WpVdtykfWt1KY87Z4KQ.roa (raw, json)
Hash identifier: H3R1h779sg5h6rajncTnA09Cbhs4c4O08/ZdYoJCvic=
Subject key identifier: E7:BF:53:2E:76:F9:5A:95:5D:B7:29:1F:5A:DD:4A:63:CE:D9:E0:A4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A14563DD7B37C72E7BF318AD4202C9C27E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/579TLnb5WpVdtykfWt1KY87Z4KQ.roa
Signing time: Fri 16 Oct 2026 15:45:35 +0000
ROA not before: Fri 16 Oct 2026 15:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201814
IP address blocks: 82.108.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:63:dd:7b:37:c7:2e:7b:f3:18:ad:42:02:c9:c2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 16 15:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7bf532e76f95a955db7291f5add4a63ced9e0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:fa:2e:e4:99:b1:66:bf:c8:e8:5c:b8:52:
64:94:0d:83:b0:9a:19:67:e3:a1:05:5c:69:4b:ee:
b9:aa:f7:7f:17:02:ab:14:df:b2:d6:28:94:db:91:
53:70:12:95:a0:32:db:e0:c5:ad:88:3c:d7:2d:7e:
25:0b:16:cb:d7:d6:68:4a:1f:fc:61:88:42:f3:51:
b4:bd:72:32:77:4e:d6:82:30:c8:19:eb:b5:ce:43:
9f:f0:50:ee:9b:be:34:0a:9f:bc:35:2b:c7:e2:e8:
a2:d5:90:21:df:d2:af:fa:e5:17:b5:1b:09:37:0b:
bc:b5:6c:18:f4:5a:55:e0:7f:d4:69:e5:2a:14:b7:
8b:46:ce:45:c3:6d:a5:6e:57:2b:ca:22:b6:34:fe:
58:32:32:1e:dc:df:42:35:5c:04:cf:32:bf:d5:70:
53:d3:7f:b1:df:08:eb:0f:83:16:93:4d:b6:8f:7c:
02:b8:95:f1:a2:9c:0a:4f:ab:f5:10:86:b7:26:9a:
ea:30:1e:ec:60:56:9a:3c:8d:5f:a5:77:47:74:7d:
aa:7f:8a:f4:1e:ea:b9:6d:4c:c6:ab:c6:8e:f6:fc:
37:04:82:67:95:2e:bc:a2:36:7f:39:7e:9e:3b:47:
00:78:ab:b6:88:e9:6c:98:96:14:d9:0a:d3:26:4b:
e9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BF:53:2E:76:F9:5A:95:5D:B7:29:1F:5A:DD:4A:63:CE:D9:E0:A4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/579TLnb5WpVdtykfWt1KY87Z4KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.210.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:93:ae:b0:81:14:8f:50:1a:95:a4:00:64:59:c7:f7:ec:4f:
b5:0e:f6:7b:17:0c:61:b9:b5:ca:3a:82:9e:93:a0:cc:db:43:
a7:c0:4c:53:d5:32:fe:2d:6b:71:62:36:aa:54:93:03:f8:6d:
f4:17:7e:41:cf:e8:ce:1e:b1:08:75:68:97:82:5e:91:ce:71:
cf:bd:8e:a6:eb:d7:ae:8d:39:91:0f:eb:71:bc:20:62:6a:6c:
24:b1:ee:a8:e9:d7:4d:58:bd:d1:32:a1:f3:7c:a8:6e:db:03:
cc:b2:25:19:12:13:c6:25:4a:3e:c8:e1:86:78:d8:4c:8f:a5:
e1:5f:a5:f9:5f:24:3c:dc:94:49:d8:42:9e:0e:51:36:b9:75:
15:d0:2a:75:92:8f:09:72:a8:94:e5:d0:55:f7:e7:1b:d4:8e:
1c:7a:7c:7c:c9:b9:13:b7:83:91:ad:db:e9:e8:f7:3b:2c:9e:
00:61:4f:25:ec:2e:cc:d8:c7:dd:1a:6a:46:99:d0:9e:f5:43:
9f:d7:69:17:94:1f:5e:64:5b:76:eb:e4:46:f7:28:ea:b1:cb:
14:7a:43:85:ed:3b:3e:c3:21:da:0a:7c:98:72:65:4b:5d:fa:
d8:83:38:51:da:55:5b:a6:31:fc:7a:87:c0:a0:54:80:56:d5:
49:a8:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:20 2026 by rpki-client