Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0U6nop3NeLQIj-I9DBdn9w-eeMo.roa
File: 0U6nop3NeLQIj-I9DBdn9w-eeMo.roa (raw, json)
Hash identifier: jTGh98NFXaFLGqfgH+ZBf36UK25zgAuMDxlf3cNseCI=
Subject key identifier: D1:4E:A7:A2:9D:CD:78:B4:08:8F:E2:3D:0C:17:67:F7:0F:9E:78:CA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0A5F4A4ED7E8E8DA716311A6D25207988
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0U6nop3NeLQIj-I9DBdn9w-eeMo.roa
Signing time: Tue 15 Sep 2026 16:44:28 +0000
ROA not before: Tue 15 Sep 2026 16:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218809
IP address blocks: 82.108.122.0/24 maxlen: 24
82.109.194.0/24 maxlen: 24
87.85.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 01:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:f4:a4:ed:7e:8e:8d:a7:16:31:1a:6d:25:20:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 15 16:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14ea7a29dcd78b4088fe23d0c1767f70f9e78ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:3c:d3:40:c2:02:49:fb:df:67:ac:ab:24:
ff:9c:5a:6a:91:cd:1c:3f:cc:c9:ad:6c:4a:f2:b9:
58:57:30:29:60:7c:15:22:9d:85:de:1e:20:1f:dc:
41:b8:8d:1a:2f:21:e1:cc:4b:f7:90:30:c0:31:56:
bf:60:ca:54:b1:12:c2:b1:a4:8b:5f:35:87:f1:76:
1a:e2:4f:a2:50:a0:62:c5:70:27:0b:2d:ce:4f:46:
fc:ee:95:80:ec:95:28:25:87:5e:25:6c:48:e7:cf:
df:46:7e:b9:80:7e:e3:3a:d0:41:6d:4d:5a:c7:c0:
78:43:b4:b0:33:3f:fb:4a:55:89:b4:53:f5:d8:79:
a1:2f:71:98:da:16:09:94:db:9a:ea:f8:9a:6e:20:
90:ef:97:f9:f5:c0:88:60:25:8c:45:eb:b5:b0:cb:
d2:46:58:41:65:06:6b:15:ba:2a:3d:af:7e:11:bd:
3a:c4:26:7c:1a:1f:ec:96:ce:99:5d:58:28:53:50:
4b:a8:c4:4a:af:9b:5d:09:3d:08:51:c0:f1:ef:52:
db:79:1d:c4:87:eb:72:70:6f:4c:08:cb:e6:7f:f8:
ed:38:a6:d6:dd:b0:57:cc:f3:3a:28:4d:06:a8:05:
5b:eb:d1:88:c4:f5:b3:32:8d:87:c7:a0:b2:28:80:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:A7:A2:9D:CD:78:B4:08:8F:E2:3D:0C:17:67:F7:0F:9E:78:CA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/0U6nop3NeLQIj-I9DBdn9w-eeMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.122.0/24
82.109.194.0/24
87.85.243.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5f:7d:d8:e7:a6:0d:a2:8f:f3:12:14:30:b2:4a:60:1e:37:
a3:29:bd:14:84:ff:46:cf:c9:11:ca:ec:aa:6b:5f:34:10:49:
8c:73:2b:4c:0c:28:79:c9:ef:e4:a5:99:1e:ff:08:a6:f8:08:
a9:91:93:30:01:55:fb:7b:68:2c:da:9a:af:d3:f1:49:0c:0f:
5e:43:d3:46:14:53:53:f4:d3:14:66:e1:28:27:a9:d8:c9:35:
b7:43:9b:0c:0e:e6:b6:03:c1:e4:db:d9:d3:7c:e0:92:89:da:
29:de:07:62:4a:42:a8:1f:77:06:16:fa:9e:76:66:88:29:6f:
24:90:1d:28:b3:7e:62:34:11:17:99:ad:98:be:f2:3e:bc:9a:
b6:b8:f3:bc:5b:91:83:e1:5c:b9:19:e6:aa:8a:9b:fe:08:ce:
b1:bd:5a:bb:6c:ed:7b:d7:d0:24:37:d4:88:88:41:e9:86:32:
96:de:69:7a:93:33:ac:f2:61:5f:98:9c:11:c1:ae:79:2b:fb:
d7:4a:f9:0d:07:8e:d6:d7:45:fc:f0:e4:9f:b9:63:32:ea:c9:
1d:22:1d:d0:67:93:1b:40:4b:58:7d:f5:6a:4f:f8:b8:6d:4d:
cb:e7:40:51:1e:63:8c:a0:8f:b8:bf:9d:97:6e:08:62:94:d9:
46:2c:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:03:11 2026 by rpki-client