Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4RLw7xr3kRHogjHgUtNxzI0G3aQ.roa
File: 4RLw7xr3kRHogjHgUtNxzI0G3aQ.roa (raw, json)
Hash identifier: dgO76495UVkQtQaLN9BoPmcQmCPB7w6fgZ/fSm+3Wqk=
Subject key identifier: E1:12:F0:EF:1A:F7:91:11:E8:82:31:E0:52:D3:71:CC:8D:06:DD:A4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A056F2951D0F796CFB34BAF87B9D5258C5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4RLw7xr3kRHogjHgUtNxzI0G3aQ.roa
Signing time: Mon 31 Aug 2026 08:32:13 +0000
ROA not before: Mon 31 Aug 2026 08:32:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.108.121.0/24 maxlen: 24
82.108.124.0/24 maxlen: 24
82.108.134.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.108.211.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.109.159.0/24 maxlen: 24
82.109.197.0/24 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
82.110.230.0/24 maxlen: 24
87.82.56.0/24 maxlen: 24
87.82.57.0/24 maxlen: 24
87.82.58.0/24 maxlen: 24
87.82.59.0/24 maxlen: 24
87.82.60.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.234.0/24 maxlen: 24
87.83.70.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.193.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.83.223.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.60.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.68.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.85.137.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.85.229.0/24 maxlen: 24
87.85.230.0/24 maxlen: 24
87.85.241.0/24 maxlen: 24
87.85.242.0/24 maxlen: 24
87.85.243.0/24 maxlen: 24
87.85.244.0/24 maxlen: 24
87.85.245.0/24 maxlen: 24
87.85.247.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
87.86.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:f2:95:1d:0f:79:6c:fb:34:ba:f8:7b:9d:52:58:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 31 08:32:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e112f0ef1af79111e88231e052d371cc8d06dda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:a9:c3:eb:3a:37:b5:a6:ce:f5:ee:66:ce:
b7:a4:14:92:9c:c3:fb:43:3d:51:a1:d1:87:d9:ed:
47:cd:4e:0c:7d:44:ba:c1:57:b2:22:96:b8:50:32:
ad:19:0d:d8:9a:bf:a9:ec:c1:73:3e:7b:fb:bf:00:
ab:af:78:e2:dd:76:c3:d3:67:50:c9:df:0d:cb:82:
b6:ec:a6:a2:b7:0f:d6:ed:d4:0f:15:98:08:db:b7:
16:6b:ce:e1:2c:ad:89:9c:95:1b:59:84:b3:d0:b8:
8b:0c:a2:c9:a6:80:c6:d3:48:ea:ba:00:1c:8a:0e:
07:6e:f3:2a:db:58:71:6a:fe:86:5a:6a:ef:e8:60:
02:91:53:64:72:f0:95:6f:0c:3b:db:f2:4e:20:f7:
dd:9f:10:bd:5c:48:f5:a0:1b:a8:dd:22:bd:94:ea:
a5:10:17:e7:f0:c0:7b:9e:d8:9f:d1:22:64:ff:0a:
35:1c:bc:c3:d3:c6:bd:b6:ae:04:3f:9c:2d:39:d4:
b7:a7:53:41:28:17:ef:ef:06:34:85:8b:cd:90:07:
bc:53:2e:14:cf:46:58:d0:f1:7f:06:3a:f8:87:ff:
63:ca:f1:67:99:fd:75:3c:e1:07:f9:27:8c:06:f5:
52:c8:4b:70:6e:b8:a2:20:95:bc:a0:8a:78:29:00:
8e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:12:F0:EF:1A:F7:91:11:E8:82:31:E0:52:D3:71:CC:8D:06:DD:A4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4RLw7xr3kRHogjHgUtNxzI0G3aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.121.0/24
82.108.124.0/24
82.108.134.0/24
82.108.210.0/23
82.108.213.0/24
82.108.215.0/24
82.109.159.0/24
82.109.197.0/24
82.110.50.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
82.110.230.0/24
87.82.56.0-87.82.60.255
87.82.213.0/24
87.82.234.0/24
87.83.70.0/23
87.83.193.0/24
87.83.204.0/24
87.83.222.0/23
87.84.58.0/24
87.84.60.0/23
87.84.63.0/24
87.84.68.0/24
87.84.210.0/24
87.84.218.0/24
87.84.237.0/24
87.85.137.0/24
87.85.227.0/24
87.85.229.0-87.85.230.255
87.85.241.0-87.85.245.255
87.85.247.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
87.86.214.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f4:61:63:4c:c6:4b:2c:fa:98:4f:c3:2f:52:0b:c1:02:b4:
0e:44:90:68:1f:7f:cf:18:44:9b:1f:d1:c6:3c:a4:09:7f:67:
5a:c5:fe:42:a3:4f:3f:19:df:79:0b:38:0e:ef:88:e2:d7:00:
42:8f:bf:f2:b2:e4:34:01:2c:07:2a:8d:0e:af:8c:d4:ad:c8:
87:2f:cf:05:6c:96:12:ca:ba:f4:de:c0:6e:d0:66:c2:c2:f9:
a7:1c:91:43:dc:c2:70:5e:db:b1:06:05:84:c4:64:c4:e2:df:
32:c5:27:09:1a:10:30:7f:ce:c7:33:f9:ff:a7:9d:d2:35:0d:
cc:88:5c:c0:6c:1f:e0:e4:d5:b8:df:da:49:2d:32:d7:26:fb:
df:77:6f:7d:2f:38:d9:6d:47:09:20:3f:0c:43:6f:b9:72:d6:
9b:b6:4f:d0:4d:1b:9d:8a:3a:92:52:37:81:00:65:63:d1:60:
6d:b6:ac:b1:4b:39:96:8e:a6:65:18:d6:50:48:51:65:4b:63:
30:97:03:73:1f:88:b0:a8:81:46:96:db:50:3b:a2:a7:b0:1c:
15:91:69:0c:8e:73:61:33:52:b2:02:bf:71:19:b0:18:b8:5c:
83:ac:1f:11:09:a6:74:8f:8f:99:b7:cc:de:b3:fd:02:8a:1b:
0d:39:d7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:59 2026 by rpki-client