Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xD35UYyeHAZtvWp06pEpjMzpnYg.roa
File: xD35UYyeHAZtvWp06pEpjMzpnYg.roa (raw, json)
Hash identifier: gqKCOzwknhcnfkGvqJeg1c4VecEQR0rSaa93kkjrYG8=
Subject key identifier: C4:3D:F9:51:8C:9E:1C:06:6D:BD:6A:74:EA:91:29:8C:CC:E9:9D:88
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A12843A31C3264EBD01DADEA7190A17F76
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xD35UYyeHAZtvWp06pEpjMzpnYg.roa
Signing time: Sun 11 Oct 2026 00:01:23 +0000
ROA not before: Sun 11 Oct 2026 00:01:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 82.108.127.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
195.40.158.0/24 maxlen: 24
195.72.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:a3:1c:32:64:eb:d0:1d:ad:ea:71:90:a1:7f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 11 00:01:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c43df9518c9e1c066dbd6a74ea91298ccce99d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:db:de:90:a3:99:7a:52:14:66:28:3b:28:
39:99:5e:d9:17:ca:10:2b:0e:35:51:4e:cd:99:d2:
17:18:46:96:2d:2b:7e:b4:e0:9c:5e:58:15:28:09:
10:df:2f:09:ba:27:bf:58:1f:0d:26:e4:b3:4a:93:
b1:bd:d7:cb:52:66:06:14:1d:5d:b9:d5:c7:d8:9d:
07:ea:d7:75:5c:3f:51:cf:a9:05:62:70:02:86:75:
46:79:a0:97:f3:61:54:55:ce:87:31:34:93:2c:af:
10:bf:fd:3f:66:aa:7d:71:77:96:3a:1f:f3:43:85:
62:a7:79:47:12:e0:9b:c5:60:c1:0a:59:88:e3:25:
b9:63:61:b9:a6:b7:85:c4:49:c9:87:ca:38:f8:35:
03:f0:98:ff:a9:12:e8:37:48:72:86:ab:b7:97:30:
68:42:cb:f4:67:ed:86:2b:23:bb:50:c9:ec:2c:d4:
5a:77:02:3c:72:af:5d:ab:58:e8:da:ef:b1:ba:01:
0a:22:8e:ce:06:47:b9:ad:04:53:9b:36:5b:6f:bb:
ef:47:df:64:b1:25:e8:c1:39:57:62:8d:4a:8a:1d:
bd:7c:57:63:52:6d:5d:c5:1f:93:01:f1:10:95:1d:
ba:ce:24:33:57:37:a9:f1:c9:ac:02:27:56:6a:13:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3D:F9:51:8C:9E:1C:06:6D:BD:6A:74:EA:91:29:8C:CC:E9:9D:88
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/xD35UYyeHAZtvWp06pEpjMzpnYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.127.0/24
85.189.36.0/24
195.40.158.0/24
195.72.169.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2d:ea:47:c1:26:1c:2d:a5:ba:cf:1d:5f:8a:5f:3e:b9:68:
75:5a:04:fc:48:f7:33:00:6f:c3:7d:da:05:97:58:25:86:af:
dd:ec:df:6f:fa:a6:fb:d1:f3:3b:e8:e1:11:1d:46:17:a2:a2:
d2:6f:5f:c6:4d:ab:d8:fd:3f:74:af:f1:46:37:ff:64:14:66:
83:1b:20:97:61:70:0d:4c:a1:60:c8:19:26:fc:24:83:7b:ba:
64:3d:8b:53:46:46:0a:ba:44:62:ea:12:c5:3d:8f:67:ac:32:
0e:81:0b:89:6d:58:f2:32:df:fd:c4:83:93:e7:b6:96:af:2b:
24:ef:99:23:72:9f:cd:a6:4c:87:03:c3:c2:ff:7c:1f:37:36:
19:d4:fe:d9:55:c0:88:d7:b4:cd:3b:49:d6:e2:c6:4f:b1:e6:
ff:96:74:72:e2:c5:a6:c5:cc:62:35:1e:32:88:30:5b:54:be:
28:24:ba:c2:a2:ae:07:35:4e:e4:62:49:bb:86:5a:82:29:b5:
3b:fe:20:82:1d:00:66:46:0e:54:c1:58:a0:35:c9:ac:7d:1e:
0e:92:ca:81:bc:8b:d0:02:af:1a:f4:f4:6b:3a:82:44:a9:6d:
e7:13:1e:37:d4:86:0e:6f:f1:01:72:0f:55:90:f0:d9:91:8c:
b8:f9:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:49:09 2026 by rpki-client