Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-LNoKKRwwGEv3RjyJ_Rp-VRi1Mw.roa
File: 1-LNoKKRwwGEv3RjyJ_Rp-VRi1Mw.roa (raw, json)
Hash identifier: dts41G5aU318Vg5rZg9h0DFkHYMoh3dyVXpKt6HEJKI=
Subject key identifier: F8:B3:68:28:A4:70:C0:61:2F:DD:18:F2:27:F4:69:F9:54:62:D4:CC
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F6B7FC87FE6DD6D80CADE500FBE38F0C0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-LNoKKRwwGEv3RjyJ_Rp-VRi1Mw.roa
Signing time: Thu 16 Jul 2026 15:16:04 +0000
ROA not before: Thu 16 Jul 2026 15:16:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 82.109.11.0/24 maxlen: 24
82.109.242.0/24 maxlen: 24
85.189.4.0/24 maxlen: 24
195.72.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:7f:c8:7f:e6:dd:6d:80:ca:de:50:0f:be:38:f0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 16 15:16:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8b36828a470c0612fdd18f227f469f95462d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:a9:16:89:a8:22:0f:8b:fb:d9:8b:42:4e:
6f:7f:6a:b9:3c:24:4b:90:4d:57:51:d8:24:db:e1:
e6:82:cb:2b:55:55:c7:51:17:d0:1a:a3:6b:d5:08:
67:29:62:b0:79:38:d6:85:69:6a:55:1d:8c:f7:dd:
83:9f:8d:67:08:92:dd:3e:a7:75:01:92:32:6e:f2:
a9:5c:7c:02:29:1b:15:04:08:a5:c0:a1:22:60:bb:
81:b4:0c:93:27:a6:9d:25:f6:5d:2e:3e:00:ab:38:
30:4b:73:c6:1e:4e:d0:22:89:eb:ff:92:9b:eb:6b:
76:6f:fa:70:6e:c8:15:bc:00:cc:dc:4e:bc:36:41:
82:b8:71:d7:16:b4:b6:f6:19:b5:e5:91:62:9a:ad:
1c:d1:72:56:9f:31:b7:cc:92:45:8a:35:a7:86:72:
8c:22:3b:99:9f:ac:b7:1a:ac:42:65:85:e2:b6:82:
ab:cd:c6:41:ca:a4:92:98:df:ed:ef:3b:06:d6:89:
7e:2c:ed:df:76:1a:e8:26:79:ef:a7:e9:3a:d5:8f:
be:fc:46:85:a9:8c:05:1e:e0:25:26:97:a6:a2:d4:
c7:e3:13:39:06:26:b9:c5:1e:f2:bf:cc:63:99:c8:
13:88:5b:2a:a4:5f:37:1c:bd:bd:17:ee:20:a1:2f:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:68:28:A4:70:C0:61:2F:DD:18:F2:27:F4:69:F9:54:62:D4:CC
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-LNoKKRwwGEv3RjyJ_Rp-VRi1Mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.11.0/24
82.109.242.0/24
85.189.4.0/24
195.72.168.0/24
Signature Algorithm: sha256WithRSAEncryption
36:08:be:0f:8c:55:05:f0:60:62:04:7b:04:59:99:af:da:56:
ba:2b:9a:0e:d4:7d:4e:ab:3f:22:58:25:54:cd:ee:ed:5d:d9:
70:7c:b2:f6:1b:78:d9:7b:8c:d5:5a:bb:dc:b3:4a:a4:34:3f:
a3:c1:26:c3:b3:07:6e:4f:28:53:3c:fb:8e:c0:99:93:fe:93:
a3:52:93:98:5d:d3:55:d8:47:9e:15:1c:0e:ea:32:47:58:01:
21:96:11:22:fb:2c:3a:ee:23:08:b4:e4:e0:25:2d:db:cc:d7:
1c:2a:ce:66:c7:93:52:d5:6a:2d:f2:ed:4d:a1:e9:f5:2c:46:
5c:7a:21:c5:9e:77:f7:c5:62:ad:3c:33:a6:be:4b:a0:a6:3f:
9d:b7:1a:ca:63:77:93:ea:6b:d7:02:0f:51:dc:49:50:05:8e:
a7:bd:5f:a4:9c:dd:a8:8c:9c:95:1f:00:fa:16:41:a4:6d:42:
29:41:e8:77:c9:a1:35:22:10:c7:9a:d1:33:85:97:01:f6:25:
45:27:5f:91:6a:63:49:a4:4e:a3:d6:17:23:46:19:fc:4a:18:
59:39:b4:58:22:12:35:48:6f:e6:b9:c7:37:10:15:94:d8:6d:
c5:45:46:50:ea:dd:df:26:ea:e3:e7:19:c2:8d:84:c3:4e:52:
0c:91:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client