Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Q_k7e0xAH3TqlF5NIYU-BTqA.roa
File: 1-B7Q_k7e0xAH3TqlF5NIYU-BTqA.roa (raw, json)
Hash identifier: n6JrYM0e5ScHgj7PhbuYKgf8bTkLzYNdTI5CZdaaCCI=
Subject key identifier: F8:1E:D0:FE:4E:DE:D3:10:07:DD:3A:A5:17:93:48:61:4F:81:4E:A0
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F6EC70E7875BB15403FFCD6987A3B50D8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Q_k7e0xAH3TqlF5NIYU-BTqA.roa
Signing time: Fri 17 Jul 2026 06:32:46 +0000
ROA not before: Fri 17 Jul 2026 06:32:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62468
IP address blocks: 82.109.248.0/21 maxlen: 24
87.85.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:c7:0e:78:75:bb:15:40:3f:fc:d6:98:7a:3b:50:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 17 06:32:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f81ed0fe4eded31007dd3aa5179348614f814ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:26:83:56:08:0a:e2:22:e3:7d:4f:05:7c:
a9:b5:dd:91:89:27:3f:34:95:bd:79:18:f4:ce:ed:
ad:98:d2:c1:70:52:8a:04:36:c7:42:6e:cf:23:0b:
9b:8e:b6:cf:98:fa:88:39:d9:d8:7f:0d:6e:2c:b2:
5a:92:c6:53:94:ee:20:d9:9d:e3:85:ef:18:ce:90:
8c:8b:64:71:82:85:92:6f:69:33:c9:b3:b4:e0:87:
7f:d2:87:0a:96:0d:d0:e2:ad:a5:7d:d1:13:c6:39:
3a:88:1e:ed:93:78:8a:3f:14:33:95:de:5b:55:3d:
0b:2f:9b:69:86:98:7a:7b:94:a8:7c:0a:de:ba:c6:
7f:8a:54:45:5d:cb:fa:72:f9:e8:9c:bf:97:dc:4b:
c2:fd:63:fe:87:38:10:96:5c:2f:60:67:22:37:73:
cf:da:b3:94:11:77:7e:a1:6b:6a:43:21:3b:1d:fe:
4d:67:da:c3:85:60:37:34:5b:ce:a7:47:5e:1e:18:
45:bb:32:51:37:b1:c4:cc:b6:3b:46:b0:d8:7f:e8:
14:73:df:08:18:28:b6:4d:84:79:6e:dc:ec:b4:29:
94:9f:45:2a:82:c4:98:52:5e:39:2d:6e:2c:6a:3e:
a6:ac:e4:a0:3b:8d:43:78:07:4d:39:76:6e:b7:b1:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1E:D0:FE:4E:DE:D3:10:07:DD:3A:A5:17:93:48:61:4F:81:4E:A0
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-B7Q_k7e0xAH3TqlF5NIYU-BTqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.248.0/21
87.85.104.0/21
Signature Algorithm: sha256WithRSAEncryption
98:df:f0:aa:a9:2e:e9:2c:9f:77:58:cb:bb:fc:30:a9:c5:d3:
53:ab:d5:38:89:08:94:87:1a:b0:67:6e:b1:2b:74:0e:36:9c:
36:5a:25:d3:7f:d0:c6:33:03:16:3a:55:73:5e:53:88:72:31:
79:1d:9f:43:68:11:d2:a6:df:41:47:9a:d0:0a:6a:1a:24:ac:
f5:78:5f:2a:e0:7a:ce:f9:cc:2f:90:0b:e1:70:02:67:c3:dd:
91:82:49:a3:0e:c7:94:07:64:52:71:ad:20:39:9a:45:1d:a8:
03:37:1d:ef:06:c3:c3:16:91:56:9f:56:70:4c:56:83:ea:9c:
80:0e:5d:5a:e5:7a:bd:21:1c:a0:f9:a7:84:e6:7f:b6:89:b5:
54:c9:91:b7:8f:26:de:79:e2:67:eb:98:c9:d5:23:9e:53:94:
8f:29:26:ee:ac:69:ee:14:d8:53:da:98:9f:7f:fe:33:9f:d2:
19:14:9e:fc:71:49:40:df:34:f9:7a:df:54:6d:04:fd:c7:87:
39:ec:c3:94:e6:e9:96:cf:25:94:12:d0:9a:3c:3b:41:20:50:
86:f8:6f:73:31:40:1d:fe:8c:22:9d:f1:14:07:5b:3e:73:bf:
58:e4:10:e5:15:ba:41:69:2b:be:9e:bf:ec:c8:a7:9b:4a:a0:
fc:1d:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client