Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aOM4_awD3TpXckdVbIhMCYUOnko.roa
File: aOM4_awD3TpXckdVbIhMCYUOnko.roa (raw, json)
Hash identifier: XRdRx80bsatlvLXCgC2BOC/2GxKsZSCo+tUPslBr+Qs=
Subject key identifier: 68:E3:38:FD:AC:03:DD:3A:57:72:47:55:6C:88:4C:09:85:0E:9E:4A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A11BE3A96FDE9AB26255DED3C48BB0FEA2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aOM4_awD3TpXckdVbIhMCYUOnko.roa
Signing time: Thu 08 Oct 2026 14:21:07 +0000
ROA not before: Thu 08 Oct 2026 14:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 82.108.101.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.108.202.0/24 maxlen: 24
82.108.212.0/24 maxlen: 24
82.109.166.0/24 maxlen: 24
82.109.189.0/24 maxlen: 24
82.110.98.0/24 maxlen: 24
82.110.105.0/24 maxlen: 24
82.110.232.0/24 maxlen: 24
87.82.56.0/24 maxlen: 24
87.82.59.0/24 maxlen: 24
87.85.138.0/24 maxlen: 24
87.85.242.0/24 maxlen: 24
87.85.244.0/24 maxlen: 24
87.86.91.0/24 maxlen: 24
87.86.182.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:e3:a9:6f:de:9a:b2:62:55:de:d3:c4:8b:b0:fe:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 8 14:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68e338fdac03dd3a577247556c884c09850e9e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4c:7b:d0:54:6d:23:d2:7f:4a:ba:17:d3:11:
de:5e:e3:23:5b:9e:a5:40:be:c5:da:3a:f6:20:2e:
bc:71:fc:2f:0f:c3:64:6d:64:42:14:62:5d:3c:ba:
71:56:26:96:2a:f0:37:65:cd:60:53:06:67:77:7f:
2a:94:cc:b1:a9:16:a7:25:ae:1a:ff:6c:59:d7:c3:
7f:6f:b9:3a:7a:30:53:ec:00:60:6f:58:fb:f7:17:
9d:5e:9b:1e:fb:9e:b0:91:56:2d:d1:b5:04:a3:8a:
2e:d2:4f:f7:2d:50:ed:86:06:05:d7:3d:f7:8c:a3:
57:66:66:7b:c1:c1:e7:77:de:78:cc:5f:e3:0f:0e:
e9:23:4c:33:9a:c7:62:25:1d:94:80:93:5a:9c:41:
88:c9:ef:de:c2:0f:0c:08:0c:ee:f0:a3:2b:e3:47:
e2:41:83:ea:df:c8:72:41:b8:5d:61:23:43:0a:74:
01:21:29:9f:e7:1b:de:39:5c:1f:5c:96:fc:af:da:
33:df:a1:07:9c:9a:bf:c3:97:74:a2:85:f0:a1:57:
a7:82:e2:58:36:1c:cb:a4:71:a9:02:73:ed:2a:8f:
06:1c:67:1d:20:7b:7e:a9:a5:a3:b0:04:af:ea:ee:
eb:b2:45:77:41:7f:49:ea:70:9a:86:0c:0b:95:48:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:38:FD:AC:03:DD:3A:57:72:47:55:6C:88:4C:09:85:0E:9E:4A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/aOM4_awD3TpXckdVbIhMCYUOnko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.101.0/24
82.108.138.0/24
82.108.202.0/24
82.108.212.0/24
82.109.166.0/24
82.109.189.0/24
82.110.98.0/24
82.110.105.0/24
82.110.232.0/24
87.82.56.0/24
87.82.59.0/24
87.85.138.0/24
87.85.242.0/24
87.85.244.0/24
87.86.91.0/24
87.86.182.0/24
87.86.186.0/24
87.86.216.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ad:85:6e:a5:39:1e:ca:12:5a:55:d9:2f:13:b6:8f:f4:8e:
1f:10:fc:c9:aa:d0:06:cc:15:54:ca:69:cf:96:9a:ad:41:06:
ca:b9:36:8a:e1:e7:3a:58:d5:82:a4:71:d6:05:65:c8:66:9b:
90:e8:ba:17:e5:24:c9:17:7f:51:10:3d:e0:f6:8c:16:b7:28:
31:1f:09:28:c0:b7:dc:df:a4:3b:40:5d:5f:13:67:c3:ac:35:
4b:97:ed:e2:70:1b:0c:9b:6f:ea:79:12:7e:06:97:f1:92:12:
56:95:3b:06:6d:a3:3e:2f:f2:8d:1c:79:d6:11:04:78:93:fd:
8a:56:62:ab:d8:97:08:d4:41:08:d7:2e:d4:06:d0:0a:c3:c9:
4b:ad:36:fd:b8:34:63:86:27:b5:10:90:22:01:de:c7:dc:4e:
0e:09:d5:dc:73:ad:a2:54:84:b1:2f:3a:f4:2e:dd:5e:05:7d:
50:5a:b8:af:44:95:9f:9b:a1:b3:71:c6:5d:72:2a:ee:29:f1:
f2:23:ec:c4:c2:31:ab:fe:2a:17:84:07:87:4e:b2:be:54:74:
4c:9e:3d:8d:00:a5:1b:c8:66:6a:05:42:74:65:25:79:aa:e2:
8d:c1:96:e1:2d:03:6f:58:c9:dd:c1:08:5c:ca:2d:74:33:f0:
0e:9d:53:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:02:20 2026 by rpki-client