Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Sjf82uCdVmtpzmm_PptJx8toCPs.roa
File: Sjf82uCdVmtpzmm_PptJx8toCPs.roa (raw, json)
Hash identifier: Na57mpKelyc0/Twd5ZReEfbwHbuJ2m4/rTomEx1gwXE=
Subject key identifier: 4A:37:FC:DA:E0:9D:56:6B:69:CE:69:BF:3E:9B:49:C7:CB:68:08:FB
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 019EFEB0C59561B068CF6F0894703244F437
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Sjf82uCdVmtpzmm_PptJx8toCPs.roa
Signing time: Thu 25 Jun 2026 12:10:58 +0000
ROA not before: Thu 25 Jun 2026 12:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34913
IP address blocks: 80.70.208.0/20 maxlen: 20
80.89.112.0/20 maxlen: 20
80.89.114.0/24 maxlen: 24
185.227.232.0/24 maxlen: 24
185.227.233.0/24 maxlen: 24
195.170.162.0/24 maxlen: 24
2a02:d48::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b0:c5:95:61:b0:68:cf:6f:08:94:70:32:44:f4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Jun 25 12:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a37fcdae09d566b69ce69bf3e9b49c7cb6808fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:14:5f:c5:4f:7c:ba:e5:02:08:aa:c3:52:
4b:33:e3:ae:79:43:a8:ca:2f:72:d0:71:41:99:32:
bb:0f:df:10:e4:15:37:8a:8c:5d:b2:42:5a:80:5f:
bf:02:a7:83:22:c6:44:7c:03:30:cb:81:72:7c:23:
f8:40:58:90:dc:04:1f:c4:1c:bf:63:49:3f:74:b4:
a6:ba:bd:63:bd:97:ba:81:4b:85:b9:5c:3d:16:a1:
08:23:c3:23:f8:50:2d:f4:69:4f:af:bc:a7:69:d7:
b8:c4:b2:11:4d:bf:ac:e1:4d:71:0d:69:44:be:2e:
66:f8:09:5a:79:63:42:f9:3d:4c:89:41:46:89:f6:
b3:b8:1b:ce:36:e6:4d:f4:1a:2d:bb:68:92:15:b9:
8c:46:0d:20:23:0c:5a:5d:47:9f:a3:67:25:2d:86:
ba:bb:0e:84:a9:06:7b:c4:85:2e:33:69:23:99:ce:
71:33:7e:4d:79:40:a6:d3:1f:dc:67:35:72:07:4a:
10:ab:1c:eb:2c:77:4e:cc:3e:a8:72:78:26:67:74:
f6:9e:04:6f:24:f8:87:3c:5e:9a:b8:78:c7:c4:21:
ba:00:c5:d2:83:93:0f:b2:fa:ed:69:79:45:fc:12:
2f:91:14:49:9b:22:b5:ea:78:22:08:49:ea:63:2b:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:37:FC:DA:E0:9D:56:6B:69:CE:69:BF:3E:9B:49:C7:CB:68:08:FB
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/Sjf82uCdVmtpzmm_PptJx8toCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.208.0/20
80.89.112.0/20
185.227.232.0/23
195.170.162.0/24
IPv6:
2a02:d48::/32
Signature Algorithm: sha256WithRSAEncryption
0c:a5:ae:d9:ab:23:59:94:1d:13:4e:03:8d:4a:e1:05:70:99:
5f:b5:c9:c6:00:c0:0c:11:34:1e:a8:0a:e6:c9:81:a3:36:89:
40:0d:3a:03:f1:2e:57:53:fc:28:2d:7f:eb:2d:e7:5c:ba:a1:
38:7d:14:5c:36:79:47:0b:40:2e:c0:5a:7c:32:b4:6f:54:bb:
ec:18:8c:1f:d7:ce:53:c8:cb:f8:00:86:8b:b2:4e:89:09:0a:
83:7f:28:3d:52:19:b5:0a:10:ac:4c:e5:69:e7:69:cb:52:66:
c7:24:0e:2b:85:b6:ce:cd:8e:4f:c4:2f:9f:2a:a3:e4:a7:a3:
9b:9c:5a:ce:b8:4b:4a:7f:a1:22:37:9d:86:c7:40:40:e1:94:
28:86:6e:06:2b:60:a5:01:4d:9f:c1:a5:00:05:bc:4a:89:bf:
65:23:64:de:44:79:36:73:0d:84:2a:19:0c:53:95:09:2d:c5:
69:45:66:fb:7c:92:ba:a5:69:65:f3:6c:bb:5f:00:4d:1d:9d:
64:e9:f4:83:0e:b3:11:5c:91:9f:e6:84:aa:20:fc:9e:51:e8:
17:97:0c:53:82:a9:46:7a:19:0c:1f:04:e0:72:0a:4a:76:6f:
1f:e0:56:d3:8a:2e:65:f5:12:30:12:10:e8:bb:b2:52:ac:0c:
fa:b6:25:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:35:54 2026 by rpki-client