Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cFmYNcpO3zJ2e4eAgHQJqHWsIxk.roa
File: cFmYNcpO3zJ2e4eAgHQJqHWsIxk.roa (raw, json)
Hash identifier: bPT32cb+DLvYm0IHsV0THzLJYwIR+V9ugNINvm/ssm4=
Subject key identifier: 70:59:98:35:CA:4E:DF:32:76:7B:87:80:80:74:09:A8:75:AC:23:19
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0FB7F7D3B47B1174A6A5CA708ABF30A9A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cFmYNcpO3zJ2e4eAgHQJqHWsIxk.roa
Signing time: Fri 02 Oct 2026 07:23:51 +0000
ROA not before: Fri 02 Oct 2026 07:23:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 82.108.126.0/24 maxlen: 24
82.108.166.0/24 maxlen: 24
82.108.194.0/24 maxlen: 24
82.108.201.0/24 maxlen: 24
87.82.196.0/24 maxlen: 24
87.84.65.0/24 maxlen: 24
87.84.66.0/24 maxlen: 24
87.84.69.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
87.86.16.0/24 maxlen: 24
87.86.183.0/24 maxlen: 24
195.40.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:7f:7d:3b:47:b1:17:4a:6a:5c:a7:08:ab:f3:0a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 2 07:23:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70599835ca4edf32767b8780807409a875ac2319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:94:09:67:b2:32:a0:28:e3:75:3c:27:1d:
d6:09:3c:c6:7c:80:48:2f:6e:7a:b8:ab:2b:1c:af:
12:78:0f:fa:0c:c3:df:04:e3:5b:b4:98:ba:ba:d8:
e8:c8:13:46:9d:4f:9c:46:07:ab:32:c9:4b:ca:73:
00:9d:9c:4b:e5:bb:2e:e8:63:99:7c:0a:d8:87:11:
8e:17:c8:d0:8f:2f:be:35:96:55:03:7c:4e:a4:fb:
d4:bd:ae:75:52:02:28:46:f0:d8:71:21:37:14:dc:
ec:d7:33:93:44:4c:89:49:3e:22:58:5f:9a:8a:13:
cd:13:4d:00:33:a3:75:20:dd:2e:c6:63:24:18:7d:
c6:ef:ba:4e:c5:cb:16:05:1d:21:80:a6:53:17:ba:
fe:de:41:ea:81:10:4b:73:36:c5:f1:50:cb:37:00:
3d:22:6b:a8:07:d0:44:98:0e:81:ce:75:c6:5f:a8:
cc:9d:f8:a3:17:7c:40:78:81:3d:80:f9:1e:92:2b:
bd:81:29:a6:b8:57:12:ea:d7:1e:9e:d1:91:71:41:
6a:38:9c:0b:d7:eb:f9:a4:ba:a8:f9:91:df:2c:45:
a8:8b:09:0b:e0:ee:36:4a:6a:94:ad:04:8e:dd:21:
ff:18:92:66:37:5f:94:7d:be:ce:e4:90:55:38:05:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:59:98:35:CA:4E:DF:32:76:7B:87:80:80:74:09:A8:75:AC:23:19
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/cFmYNcpO3zJ2e4eAgHQJqHWsIxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.126.0/24
82.108.166.0/24
82.108.194.0/24
82.108.201.0/24
87.82.196.0/24
87.84.65.0-87.84.66.255
87.84.69.0/24
87.84.152.0/24
87.84.239.0/24
87.86.16.0/24
87.86.183.0/24
195.40.157.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9b:58:58:0c:8f:e2:1f:10:c5:cc:36:e9:67:3c:da:2d:71:
6f:12:ba:69:2c:79:08:86:13:7b:ad:44:6b:d9:bd:5d:31:d9:
ff:52:16:c6:23:3b:e5:21:bc:86:39:a9:4d:bb:3a:0d:a3:1c:
cf:51:5b:1f:7d:1a:f2:ca:ef:40:91:36:85:0c:b7:f7:b4:cd:
08:b0:35:a1:7a:5b:2c:b7:fb:50:88:76:05:ed:a2:fe:b1:01:
fd:6b:3b:03:50:37:4d:c0:13:3d:06:76:09:d3:3b:70:a8:ae:
52:fe:6b:30:65:6f:aa:6f:e9:b8:8f:e7:00:e3:30:d3:4f:f3:
65:c7:cb:ef:be:60:ed:3e:67:00:02:f0:d8:d3:f1:31:7b:40:
a6:d0:7b:10:22:4e:bd:98:c3:3b:d5:80:90:37:cb:15:70:ef:
69:14:e3:35:76:42:d5:5e:b8:ab:c3:14:f6:21:e5:f3:c8:30:
6d:af:07:f4:8e:5d:9d:43:56:33:04:aa:50:12:4e:18:8c:c0:
02:6e:c2:e5:ce:82:92:6c:da:40:87:66:c3:e1:b4:4f:f8:a9:
0c:62:e4:5b:1b:30:41:e2:72:69:99:ef:d0:90:66:25:c4:00:
55:4c:54:88:ef:2f:39:1d:44:60:dd:fa:72:1f:14:cb:85:ef:
75:7b:da:6c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAaD7f307R7EXSmpcpwir8wqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDAyMDcyMzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDU5OTgzNWNhNGVkZjMyNzY3Yjg3ODA4MDc0MDlhODc1YWMyMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbCUCWeyMqAo43U8Jx3WCTzGfIBI
L256uKsrHK8SeA/6DMPfBONbtJi6utjoyBNGnU+cRgerMslLynMAnZxL5bsu6GOZ
fArYhxGOF8jQjy++NZZVA3xOpPvUva51UgIoRvDYcSE3FNzs1zOTREyJST4iWF+a
ihPNE00AM6N1IN0uxmMkGH3G77pOxcsWBR0hgKZTF7r+3kHqgRBLczbF8VDLNwA9
ImuoB9BEmA6BznXGX6jMnfijF3xAeIE9gPkekiu9gSmmuFcS6tcentGRcUFqOJwL
1+v5pLqo+ZHfLEWoiwkL4O42SmqUrQSO3SH/GJJmN1+Ufb7O5JBVOAVctQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFHBZmDXKTt8ydnuHgIB0Cah1rCMZMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvY0ZtWU5jcE8zekoyZTRlQWdIUUpxSFdzSXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAUmx+AwQA
UmymAwQAUmzCAwQAUmzJAwQAV1LEMAwDBABXVEEDBABXVEIDBABXVEUDBABXVJgD
BABXVO8DBABXVhADBABXVrcDBADDKJ0wDQYJKoZIhvcNAQELBQADggEBAIebWFgM
j+IfEMXMNulnPNotcW8SumkseQiGE3utRGvZvV0x2f9SFsYjO+UhvIY5qU27Og2j
HM9RWx99GvLK70CRNoUMt/e0zQiwNaF6Wyy3+1CIdgXtov6xAf1rOwNQN03AEz0G
dgnTO3CorlL+azBlb6pv6biP5wDjMNNP82XHy+++YO0+ZwAC8NjT8TF7QKbQexAi
Tr2YwzvVgJA3yxVw72kU4zV2QtVeuKvDFPYh5fPIMG2vB/SOXZ1DVjMEqlASThiM
wAJuwuXOgpJs2kCHZsPhtE/4qQxi5FsbMEHicmmZ79CQZiXEAFVMVIjvLzkdRGDd
+nIfFMuF73V72mw=
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:56:18 2026 by rpki-client