Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-evA0KJLTMjQDXRtI5H3pIs8KjU.roa
File: 1-evA0KJLTMjQDXRtI5H3pIs8KjU.roa (raw, json)
Hash identifier: 8i9JSVHBhHTiS/0bYXQ4RyKYy0Qidd5jCx+KEks19k8=
Subject key identifier: F9:EB:C0:D0:A2:4B:4C:C8:D0:0D:74:6D:23:91:F7:A4:8B:3C:2A:35
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FEB8CD6D88155078FC65400635CEC1B97
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-evA0KJLTMjQDXRtI5H3pIs8KjU.roa
Signing time: Mon 10 Aug 2026 12:01:43 +0000
ROA not before: Mon 10 Aug 2026 12:01:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 82.108.4.0/22 maxlen: 22
82.108.32.0/21 maxlen: 21
82.108.44.0/22 maxlen: 22
82.108.52.0/22 maxlen: 22
82.108.68.0/22 maxlen: 22
82.108.88.0/23 maxlen: 23
82.108.92.0/22 maxlen: 22
82.108.102.0/23 maxlen: 23
82.108.116.0/22 maxlen: 22
82.108.140.0/22 maxlen: 22
82.108.152.0/23 maxlen: 23
85.189.72.0/23 maxlen: 23
85.189.74.0/23 maxlen: 23
85.189.76.0/23 maxlen: 23
85.189.78.0/23 maxlen: 23
85.189.132.0/23 maxlen: 23
85.189.153.0/24 maxlen: 24
85.189.154.0/23 maxlen: 23
85.189.156.0/24 maxlen: 24
85.189.159.0/24 maxlen: 24
85.189.160.0/24 maxlen: 24
85.189.162.0/24 maxlen: 24
85.189.164.0/23 maxlen: 23
85.189.167.0/24 maxlen: 24
85.189.174.0/23 maxlen: 23
85.189.178.0/24 maxlen: 24
85.189.181.0/24 maxlen: 24
85.189.183.0/24 maxlen: 24
85.189.189.0/24 maxlen: 24
85.189.190.0/23 maxlen: 23
87.86.24.0/23 maxlen: 23
212.134.46.0/24 maxlen: 24
212.134.52.0/24 maxlen: 24
212.134.54.0/24 maxlen: 24
212.134.124.0/22 maxlen: 24
212.134.164.0/22 maxlen: 24
212.134.208.0/22 maxlen: 24
212.134.224.0/22 maxlen: 24
212.212.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:8c:d6:d8:81:55:07:8f:c6:54:00:63:5c:ec:1b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 10 12:01:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9ebc0d0a24b4cc8d00d746d2391f7a48b3c2a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:6b:d4:27:a3:3f:2f:58:7b:b7:0a:bb:6c:
4a:ab:9a:4c:54:a3:72:f1:6a:5c:3c:18:c1:34:d9:
bf:3e:9e:2f:de:eb:49:f9:ef:b7:f7:cf:8f:cd:2b:
6a:6a:49:5d:09:17:71:79:a6:da:7e:a7:74:e1:27:
2c:b9:f7:58:1b:b4:e8:2b:73:3b:ef:dd:7a:61:3a:
36:f2:8c:38:1c:e7:60:2f:3e:b1:54:6c:2b:9b:27:
b6:df:38:ba:52:6a:0b:04:d4:74:22:a0:2f:9b:11:
65:3c:8b:a0:f4:bf:69:1c:66:2b:b6:39:f6:4e:c9:
5f:1f:0f:00:56:9e:8d:dc:e1:34:f6:e9:68:17:b9:
e8:0f:1c:22:8b:67:ad:a0:40:26:23:63:86:a4:d3:
d4:66:79:b6:06:a1:27:02:43:f2:64:18:2b:e3:b1:
f0:31:76:78:52:67:35:3d:9a:91:fc:a9:7c:06:84:
5a:94:51:8a:68:ed:9e:76:97:e0:63:77:3e:48:3f:
00:ca:58:9a:a6:ee:10:0e:61:02:d1:75:55:3d:26:
f9:a2:ef:15:e9:3d:e5:54:20:d4:57:11:b3:73:3f:
c5:e2:12:5f:6e:44:25:34:44:71:65:70:d3:65:bb:
43:a2:52:82:a0:35:b2:bf:41:0a:6f:42:28:93:8f:
4b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EB:C0:D0:A2:4B:4C:C8:D0:0D:74:6D:23:91:F7:A4:8B:3C:2A:35
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/1-evA0KJLTMjQDXRtI5H3pIs8KjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.4.0/22
82.108.32.0/21
82.108.44.0/22
82.108.52.0/22
82.108.68.0/22
82.108.88.0/23
82.108.92.0/22
82.108.102.0/23
82.108.116.0/22
82.108.140.0/22
82.108.152.0/23
85.189.72.0/21
85.189.132.0/23
85.189.153.0-85.189.156.255
85.189.159.0-85.189.160.255
85.189.162.0/24
85.189.164.0/23
85.189.167.0/24
85.189.174.0/23
85.189.178.0/24
85.189.181.0/24
85.189.183.0/24
85.189.189.0-85.189.191.255
87.86.24.0/23
212.134.46.0/24
212.134.52.0/24
212.134.54.0/24
212.134.124.0/22
212.134.164.0/22
212.134.208.0/22
212.134.224.0/22
212.212.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a9:a0:2d:a6:a1:6d:6e:12:c4:aa:ce:24:34:cb:ce:31:6c:
5d:54:24:f3:28:b4:2c:67:bf:9d:df:11:4e:42:e5:54:85:4d:
50:53:cd:44:be:53:82:ca:07:9c:7a:a9:6a:9f:af:9b:c3:b8:
fb:ed:5b:da:87:bb:e7:ac:7e:f3:ad:da:14:fe:d7:21:47:1c:
bd:88:32:b8:25:69:cf:7d:32:25:ef:d0:97:39:0e:f0:a4:39:
19:e7:13:3f:96:1d:ac:09:1d:73:45:9b:cc:01:af:8d:ab:1c:
fe:22:88:49:0e:56:dd:84:ad:72:7d:3a:6e:8e:25:31:5e:ac:
f5:4a:b9:f0:b4:26:30:43:e3:5b:11:49:96:b9:48:03:cd:e3:
a1:84:e5:f9:12:a0:aa:f4:42:48:30:b2:f6:d7:05:37:0b:7d:
c9:e5:63:58:fd:a4:8f:a1:8d:a5:e4:d8:85:3f:d9:02:74:34:
d5:aa:19:00:b3:3c:37:29:96:58:df:e0:33:af:99:8c:09:ad:
d0:64:2f:53:a8:07:3e:5f:da:80:f2:36:57:eb:d2:51:2d:22:
a9:da:1c:e9:1c:47:0f:be:24:73:48:d0:f4:ec:95:fa:73:da:
c4:ba:0d:84:81:87:ed:33:00:41:47:c4:d5:a9:95:7a:43:55:
cb:13:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:08 2026 by rpki-client