Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Dl8SlK3Gxg3HuuLLNa-ne3z0Nko.roa
File: Dl8SlK3Gxg3HuuLLNa-ne3z0Nko.roa (raw, json)
Hash identifier: UXzbcuhrebRXFIeReUzUSwHJzAElCNi6BOfUCA8nYh4=
Subject key identifier: 0E:5F:12:94:AD:C6:C6:0D:C7:BA:E2:CB:35:AF:A7:7B:7C:F4:36:4A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A136A516C9C322DCD515D44D40E203C319
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Dl8SlK3Gxg3HuuLLNa-ne3z0Nko.roa
Signing time: Tue 13 Oct 2026 19:02:31 +0000
ROA not before: Tue 13 Oct 2026 19:02:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199550
IP address blocks: 82.108.120.0/24 maxlen: 24
82.109.157.0/24 maxlen: 24
87.83.80.0/22 maxlen: 24
87.85.71.0/24 maxlen: 24
87.85.131.0/24 maxlen: 24
87.85.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a5:16:c9:c3:22:dc:d5:15:d4:4d:40:e2:03:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 19:02:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e5f1294adc6c60dc7bae2cb35afa77b7cf4364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:00:4a:16:59:af:45:a5:d2:f5:81:3b:d2:
72:43:ef:bc:53:70:f0:3f:f4:41:23:e1:07:04:bc:
9f:17:57:e0:d3:11:c6:98:ad:53:13:20:9f:a9:0b:
2c:f5:80:d8:76:e1:e2:e5:0c:9f:88:ae:2a:e7:f3:
76:cc:08:4e:e9:58:fe:dc:11:eb:cc:0c:44:25:e5:
1b:af:a1:9c:80:b7:9c:05:49:07:82:20:98:5a:10:
2b:2a:a6:4c:dd:55:7e:ea:ad:93:3b:b0:5e:86:91:
1a:34:41:18:f0:8f:f0:f8:d3:61:c9:70:89:a6:75:
b6:09:98:d8:74:78:4e:9f:ce:d7:10:10:2b:ad:fa:
cc:d9:59:7f:33:c2:7c:6b:85:8b:28:ec:9d:a6:62:
a2:07:b5:22:f5:2a:44:fb:22:6c:32:9d:a6:e0:95:
99:66:ce:7f:2e:ed:95:3c:8b:1a:4a:42:3d:99:be:
2c:85:15:46:c8:7d:74:44:5d:3f:8f:40:c8:08:0f:
08:ef:31:36:31:53:93:7c:b3:68:b1:34:1b:7c:1d:
a9:31:b2:4e:06:82:e1:e3:2c:93:03:66:32:4c:3c:
da:b1:1c:f2:9c:0a:de:50:9a:f9:ad:1b:fe:cd:70:
56:1c:af:c6:96:f5:96:e6:ff:08:1f:07:2b:7b:8d:
3d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:12:94:AD:C6:C6:0D:C7:BA:E2:CB:35:AF:A7:7B:7C:F4:36:4A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/Dl8SlK3Gxg3HuuLLNa-ne3z0Nko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.120.0/24
82.109.157.0/24
87.83.80.0/22
87.85.71.0/24
87.85.131.0/24
87.85.174.0/24
Signature Algorithm: sha256WithRSAEncryption
88:43:74:f3:7d:cf:8c:a6:1d:7d:c3:1f:a9:bc:0e:b9:31:c4:
0c:70:dd:9e:cb:7b:1c:27:b2:f5:ba:fa:96:47:a0:dc:1d:6e:
23:6f:fa:76:f7:31:41:b6:40:dc:4e:d1:3a:69:15:05:de:bb:
9c:f4:75:ec:95:38:b5:75:86:58:f7:21:e5:8e:79:e6:42:b3:
14:fa:4e:e9:72:44:c6:b1:13:2f:42:50:10:e7:02:74:ce:da:
ab:2d:41:f8:f6:8a:36:2a:e7:4b:ea:8f:0d:e4:44:49:ec:00:
4f:b5:cb:0c:f9:bb:46:8c:a7:87:39:73:1d:08:07:5a:d1:50:
a8:3a:ca:a3:a0:cb:e9:d6:c0:db:cf:44:62:90:a4:e9:0f:ce:
a5:03:6b:90:d0:e4:1b:b1:91:15:8d:00:4a:47:77:b3:0a:22:
02:9a:e9:b6:6d:af:e0:58:21:62:b8:10:44:6a:51:61:04:cb:
17:0b:f4:fa:6e:64:c1:8b:08:e0:57:91:6d:40:f1:4c:33:21:
6e:17:4b:2b:c4:0c:2c:8f:84:9a:2d:28:ff:c6:af:b1:6d:03:
66:b7:00:69:a4:e3:46:7c:61:3d:3f:50:60:90:1e:75:de:5f:
a3:04:e0:30:68:ae:d7:9c:c9:94:c2:32:8e:5d:70:09:3c:98:
c1:bf:c4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 08:01:41 2026 by rpki-client