Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QaAwvWokAQxaAye_hu8t7wMTXQY.roa
File: QaAwvWokAQxaAye_hu8t7wMTXQY.roa (raw, json)
Hash identifier: ZIjMjTMUFs2MD0yZwqMF6WGaPIPDnsjKTvtwjafmBwQ=
Subject key identifier: 41:A0:30:BD:6A:24:01:0C:5A:03:27:BF:86:EF:2D:EF:03:13:5D:06
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A115F2F6F3143A5BEA9B58EFC046FD03C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QaAwvWokAQxaAye_hu8t7wMTXQY.roa
Signing time: Wed 07 Oct 2026 10:40:06 +0000
ROA not before: Wed 07 Oct 2026 10:40:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
83.148.168.0/22 maxlen: 22
83.148.180.0/22 maxlen: 22
85.189.23.0/24 maxlen: 24
85.189.72.0/23 maxlen: 23
85.189.74.0/23 maxlen: 23
85.189.76.0/23 maxlen: 23
85.189.78.0/23 maxlen: 23
85.189.132.0/23 maxlen: 23
85.189.153.0/24 maxlen: 24
85.189.154.0/23 maxlen: 23
85.189.156.0/24 maxlen: 24
85.189.159.0/24 maxlen: 24
85.189.160.0/24 maxlen: 24
85.189.162.0/24 maxlen: 24
85.189.164.0/23 maxlen: 23
85.189.167.0/24 maxlen: 24
85.189.174.0/23 maxlen: 23
85.189.178.0/24 maxlen: 24
85.189.181.0/24 maxlen: 24
85.189.183.0/24 maxlen: 24
85.189.189.0/24 maxlen: 24
85.189.190.0/23 maxlen: 23
87.83.192.0/24 maxlen: 24
87.86.24.0/23 maxlen: 23
87.86.242.0/24 maxlen: 24
87.86.248.0/22 maxlen: 24
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:f2:f6:f3:14:3a:5b:ea:9b:58:ef:c0:46:fd:03:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 7 10:40:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a030bd6a24010c5a0327bf86ef2def03135d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:e3:37:6e:63:91:ff:50:71:e0:b5:b2:68:
37:04:f4:d6:af:29:54:b7:86:ec:1a:d0:4c:71:e7:
ee:36:cd:37:39:98:51:93:f0:fe:9c:d4:f6:a2:6e:
ba:b9:e5:ef:22:ef:b8:9a:02:80:06:1d:dd:05:6b:
01:97:68:0e:cb:61:86:98:8f:7d:b4:e2:c6:64:ce:
34:51:61:d8:7d:1a:4f:63:b9:5a:35:ed:32:16:39:
b7:63:ed:76:16:ff:a1:bd:4e:6e:5d:87:37:70:25:
dd:81:55:ae:26:be:4e:38:e3:3c:b6:93:2d:69:43:
93:40:29:9c:06:b8:f2:3a:9a:23:1a:6e:e4:19:8a:
65:27:0a:66:e8:d4:80:1d:63:39:66:38:66:8a:5e:
09:bf:60:9d:0b:1c:7e:ef:ba:03:2a:fa:c7:f2:14:
b0:e8:0b:3a:6e:8c:0f:b9:d8:0e:ff:96:c0:05:5d:
50:5f:7a:42:8d:a5:52:7a:05:3d:a9:40:73:b1:74:
a1:5b:13:e5:07:60:ad:0f:12:61:d4:de:f4:3a:9d:
40:25:a7:8f:2a:2d:ca:24:a9:f4:ba:65:b3:7c:58:
26:7e:5f:b5:fa:47:4f:01:a3:29:f3:f7:55:3f:4e:
fd:4e:d7:8d:d6:6d:8a:9e:c0:51:89:26:e9:e6:79:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:30:BD:6A:24:01:0C:5A:03:27:BF:86:EF:2D:EF:03:13:5D:06
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QaAwvWokAQxaAye_hu8t7wMTXQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
83.148.168.0/22
83.148.180.0/22
85.189.23.0/24
85.189.72.0/21
85.189.132.0/23
85.189.153.0-85.189.156.255
85.189.159.0-85.189.160.255
85.189.162.0/24
85.189.164.0/23
85.189.167.0/24
85.189.174.0/23
85.189.178.0/24
85.189.181.0/24
85.189.183.0/24
85.189.189.0-85.189.191.255
87.83.192.0/24
87.86.24.0/23
87.86.242.0/24
87.86.248.0/22
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:99:ee:d1:9e:f4:99:36:66:85:ad:75:93:b7:16:4a:1a:05:
9f:6b:dd:26:e5:9a:24:97:64:df:f3:e5:78:ac:e7:26:3b:9f:
a7:9f:eb:43:a0:40:27:e2:e8:d0:1c:83:4a:45:dd:de:01:e7:
d9:32:44:cd:55:73:61:32:41:c8:5b:0d:b4:17:d4:6c:f2:8c:
c8:76:18:10:5d:23:66:5a:38:9b:40:c1:03:47:ff:d7:17:53:
07:4c:9a:30:55:1d:fe:0b:88:24:fc:34:cf:6c:29:59:2c:ec:
a2:b2:92:ba:19:75:e4:77:45:06:0e:66:f6:7b:df:14:e9:45:
92:c8:68:6b:3c:3e:8d:bc:b2:90:7d:74:40:ef:6a:65:37:7b:
71:b1:e9:35:dd:13:dc:4b:45:b0:a4:80:18:d1:d8:ce:84:ba:
4d:8c:32:60:5d:4e:1e:e4:f0:b9:46:0e:3f:51:a8:d6:41:ab:
a6:96:d3:73:98:cb:fe:17:c0:08:b9:46:4d:16:29:99:e6:e1:
d0:61:bb:e0:11:c1:c8:c6:65:d9:73:f4:52:f9:a7:af:e3:3d:
32:d5:96:c7:5f:ee:b7:19:8c:93:5d:ee:d3:ec:ab:6d:f2:f3:
b7:25:2b:ac:da:56:46:4c:58:97:b4:57:09:07:96:66:fe:7c:
3e:62:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 05:59:11 2026 by rpki-client