Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4T_YZn_hfeSCtHkmctoxqeVM7nk.roa
File: 4T_YZn_hfeSCtHkmctoxqeVM7nk.roa (raw, json)
Hash identifier: PAPkxWGBDZeN/K3CzkEWOJWt26D8+hPBGWamlRaEg5I=
Subject key identifier: E1:3F:D8:66:7F:E1:7D:E4:82:B4:79:26:72:DA:31:A9:E5:4C:EE:79
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06562FD883AEEBA4B3A8345D1BDCE5D3E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4T_YZn_hfeSCtHkmctoxqeVM7nk.roa
Signing time: Thu 03 Sep 2026 03:49:41 +0000
ROA not before: Thu 03 Sep 2026 03:49:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 82.108.121.0/24 maxlen: 24
82.108.124.0/24 maxlen: 24
82.108.134.0/24 maxlen: 24
82.108.210.0/24 maxlen: 24
82.108.211.0/24 maxlen: 24
82.108.213.0/24 maxlen: 24
82.108.215.0/24 maxlen: 24
82.109.159.0/24 maxlen: 24
82.109.197.0/24 maxlen: 24
82.110.50.0/24 maxlen: 24
82.110.52.0/24 maxlen: 24
82.110.54.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.225.0/24 maxlen: 24
87.82.56.0/24 maxlen: 24
87.82.57.0/24 maxlen: 24
87.82.58.0/24 maxlen: 24
87.82.59.0/24 maxlen: 24
87.82.60.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.255.0/24 maxlen: 24
87.83.15.0/24 maxlen: 24
87.83.20.0/24 maxlen: 24
87.83.22.0/24 maxlen: 24
87.83.70.0/24 maxlen: 24
87.83.71.0/24 maxlen: 24
87.83.113.0/24 maxlen: 24
87.83.204.0/24 maxlen: 24
87.83.222.0/24 maxlen: 24
87.83.223.0/24 maxlen: 24
87.84.56.0/24 maxlen: 24
87.84.58.0/24 maxlen: 24
87.84.60.0/24 maxlen: 24
87.84.61.0/24 maxlen: 24
87.84.63.0/24 maxlen: 24
87.84.210.0/24 maxlen: 24
87.84.212.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
87.85.227.0/24 maxlen: 24
87.85.229.0/24 maxlen: 24
87.85.241.0/24 maxlen: 24
87.85.243.0/24 maxlen: 24
87.85.245.0/24 maxlen: 24
87.85.247.0/24 maxlen: 24
87.86.94.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
212.134.105.0/24 maxlen: 24
212.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:62:fd:88:3a:ee:ba:4b:3a:83:45:d1:bd:ce:5d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 3 03:49:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e13fd8667fe17de482b4792672da31a9e54cee79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:bc:ed:cf:ea:d8:7d:74:84:fb:3a:de:c4:
c3:8b:b7:e7:b2:2d:7c:8f:fe:65:7f:de:14:6d:4a:
45:c1:82:cf:1c:ad:bd:21:9e:e0:00:b8:42:61:ea:
c5:cc:db:3e:cf:2b:c3:f8:52:13:2e:18:a9:a2:3c:
84:ef:de:0f:87:50:67:2e:8b:3a:c8:44:52:56:bb:
d6:8f:b7:2b:b1:86:e9:7a:32:b9:8e:49:0e:b8:c9:
bc:01:ae:de:af:47:42:ef:d1:07:1a:2d:05:e0:25:
1d:3e:81:76:53:0e:bf:a2:7f:be:50:a0:ad:e5:a0:
84:7f:ed:e7:64:48:09:b6:67:4f:c1:12:a4:ef:e5:
a4:de:42:67:af:2f:d7:0a:e1:35:53:ba:b2:b4:ad:
e3:47:98:f5:d5:88:41:36:b1:ad:18:5b:25:05:2d:
cb:bd:7e:2d:9d:70:b2:e1:e9:4c:ca:e4:1b:64:6e:
e6:67:69:f8:aa:59:de:1f:b4:0e:01:03:a2:54:79:
c5:b4:c0:1d:15:92:9d:67:a8:78:e4:4f:03:01:e1:
dd:e5:84:d5:c6:9e:8f:36:85:ef:1a:36:5e:e1:ee:
8f:de:cc:f8:4c:67:36:5c:a9:2f:3c:a3:de:f7:9d:
0e:f9:b1:be:48:af:b1:01:2a:fc:3b:d5:99:69:84:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:D8:66:7F:E1:7D:E4:82:B4:79:26:72:DA:31:A9:E5:4C:EE:79
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4T_YZn_hfeSCtHkmctoxqeVM7nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.121.0/24
82.108.124.0/24
82.108.134.0/24
82.108.210.0/23
82.108.213.0/24
82.108.215.0/24
82.109.159.0/24
82.109.197.0/24
82.110.50.0/24
82.110.52.0/24
82.110.54.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.225.0/24
87.82.56.0-87.82.60.255
87.82.213.0/24
87.82.255.0/24
87.83.15.0/24
87.83.20.0/24
87.83.22.0/24
87.83.70.0/23
87.83.113.0/24
87.83.204.0/24
87.83.222.0/23
87.84.56.0/24
87.84.58.0/24
87.84.60.0/23
87.84.63.0/24
87.84.210.0/24
87.84.212.0/24
87.84.218.0/24
87.84.237.0/24
87.85.141.0/24
87.85.227.0/24
87.85.229.0/24
87.85.241.0/24
87.85.243.0/24
87.85.245.0/24
87.85.247.0/24
87.86.94.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
212.134.105.0/24
212.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:aa:77:68:88:b3:21:e1:fc:e7:67:ac:f6:ff:ab:10:b3:5b:
b9:45:0e:72:df:0e:82:9f:66:1c:1b:1f:fb:b9:29:19:ba:33:
af:4c:70:dd:d2:84:e6:88:0f:68:cf:84:b3:7b:77:24:76:89:
1d:b0:13:c8:5b:70:10:0b:15:41:8b:18:d4:b3:0f:51:90:50:
27:ea:73:c4:92:bf:17:17:4e:b9:b2:84:3b:b9:e1:eb:f1:c2:
8e:b7:c1:02:e0:48:62:a7:25:2c:3d:e0:c8:ad:a1:5e:6a:9b:
e2:b9:12:13:5b:70:41:cd:93:70:3a:be:a6:84:77:ef:3e:0f:
81:06:e1:71:59:9f:67:69:c7:79:f4:de:bd:52:d3:4a:3b:11:
3d:c4:8c:a1:cb:84:bb:2c:f4:d9:63:9c:de:c7:3e:c5:26:db:
35:a4:f0:a1:a9:8c:8b:59:1a:c8:9b:f2:16:ea:26:1c:fa:5b:
c8:32:73:05:c6:77:45:3c:28:49:b7:5f:07:8d:0a:6c:03:74:
9e:bd:fa:e1:62:7f:86:ab:fd:f6:60:ae:55:f0:d1:4c:29:53:
59:27:38:6e:81:08:0f:63:a0:d5:e5:e6:f8:24:ff:ee:22:c2:
46:eb:04:95:22:5b:c4:c9:f9:37:0d:ad:27:20:21:c2:f3:a7:
47:f2:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:00 2026 by rpki-client