Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FhCOw909vO9h3X_0wL9eH1fGOmE.roa
File: FhCOw909vO9h3X_0wL9eH1fGOmE.roa (raw, json)
Hash identifier: CZCTtfz6qCA6QuWQndoiLASeVLOCwtiCEk5MLQq0tNA=
Subject key identifier: 16:10:8E:C3:DD:3D:BC:EF:61:DD:7F:F4:C0:BF:5E:1F:57:C6:3A:61
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A143841877A246DFD3CE2FF4C2CB536564
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FhCOw909vO9h3X_0wL9eH1fGOmE.roa
Signing time: Fri 16 Oct 2026 07:01:32 +0000
ROA not before: Fri 16 Oct 2026 07:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 82.109.158.0/24 maxlen: 24
87.83.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:84:18:77:a2:46:df:d3:ce:2f:f4:c2:cb:53:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 16 07:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16108ec3dd3dbcef61dd7ff4c0bf5e1f57c63a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:21:c7:13:cc:c5:5f:52:49:67:3f:78:57:
1d:93:08:2b:03:01:cf:b9:34:ed:b4:3f:c6:d3:fa:
92:d8:2a:71:93:9d:86:be:7c:4e:a4:fe:49:a2:95:
61:69:11:5f:ed:75:20:a8:b9:df:0c:19:fc:f6:7e:
41:9c:45:7f:00:2d:c3:08:ff:fa:8e:47:01:b4:69:
68:72:ca:31:69:36:7a:09:3e:6f:9f:fe:65:7a:32:
6d:67:f8:5f:b4:42:91:3f:ef:28:14:12:06:dc:ec:
f6:a2:7a:03:70:77:a7:f0:79:ee:2a:38:7e:92:cf:
68:29:48:c0:64:39:f4:5f:23:3c:42:d8:5a:67:88:
75:71:e8:da:8b:2e:91:44:f8:e6:62:26:65:f5:03:
95:b3:a1:c0:1c:29:32:32:18:a4:a0:b6:f0:21:70:
02:5e:6d:81:6d:b3:49:e8:62:45:9f:36:42:0a:b1:
f4:b1:0e:3f:cc:81:3c:49:6e:c9:06:24:8a:1e:3f:
39:47:37:b5:c3:f3:01:b6:a0:2d:05:20:b1:3c:87:
0e:23:cf:2d:b8:7f:05:bc:3f:1a:b3:42:4a:e6:e1:
56:73:2d:60:33:03:59:a9:c6:83:e9:29:4b:de:5a:
07:7b:28:27:1a:b7:f1:4e:5c:f6:87:0b:09:15:d2:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:10:8E:C3:DD:3D:BC:EF:61:DD:7F:F4:C0:BF:5E:1F:57:C6:3A:61
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/FhCOw909vO9h3X_0wL9eH1fGOmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.158.0/24
87.83.2.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:9e:0a:46:8a:ba:b7:7e:b6:ab:91:1c:db:5c:b3:3b:eb:f0:
22:cb:8c:37:4b:ac:aa:1e:91:d0:8a:c3:46:ae:4d:19:f9:57:
ee:e8:8a:fb:20:77:d2:a1:57:1e:98:aa:1b:f2:f7:9e:de:79:
32:81:77:96:fd:8e:3f:7c:96:31:70:75:7a:17:ba:50:d5:be:
dd:a2:0a:12:2a:cf:f5:f1:b9:01:7e:e7:6c:3c:5c:fd:85:e0:
6b:1c:86:c0:5f:77:63:ce:28:72:d6:c2:dd:6c:57:6c:43:b6:
db:b1:ba:e2:f6:b2:08:d8:1b:ea:f9:44:61:31:53:d7:69:47:
a1:ba:6b:bb:97:ba:21:eb:cd:c8:5c:d9:85:d3:b1:08:eb:b5:
bb:25:53:1d:e0:01:a9:b6:46:12:2e:42:f0:05:33:ff:54:00:
d0:e8:88:7d:2a:f2:cf:f0:08:d7:63:c6:47:a5:8c:20:29:0c:
62:32:10:bb:cb:da:f1:ed:1e:aa:97:6c:92:07:bb:b2:b9:c5:
90:e1:d7:54:b9:13:ce:52:9d:b3:ea:47:36:a4:29:f7:40:b4:
85:ea:a9:85:1c:e8:d8:a7:41:09:08:75:24:55:d2:a7:d2:bb:
5e:9b:cf:1f:8c:9e:be:13:a4:bf:c9:64:19:45:51:2d:7a:12:
06:2e:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:20:28 2026 by rpki-client