Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4lNvp9Sj2LPONpSbC660ja4tEqo.roa
File: 4lNvp9Sj2LPONpSbC660ja4tEqo.roa (raw, json)
Hash identifier: WRpHKA/iO0Ke0GyO3rLaSKqkpIyijku2ACNH/4G1aKY=
Subject key identifier: E2:53:6F:A7:D4:A3:D8:B3:CE:36:94:9B:0B:AE:B4:8D:AE:2D:12:AA
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F49C5230EA6FFFB40132B7DACDB87970A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4lNvp9Sj2LPONpSbC660ja4tEqo.roa
Signing time: Fri 10 Jul 2026 02:04:44 +0000
ROA not before: Fri 10 Jul 2026 02:04:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 82.108.173.0/24 maxlen: 24
82.109.98.0/24 maxlen: 24
82.109.151.0/24 maxlen: 24
82.109.242.0/24 maxlen: 24
87.83.232.0/24 maxlen: 24
87.84.188.0/24 maxlen: 24
87.84.232.0/24 maxlen: 24
87.85.97.0/24 maxlen: 24
194.242.157.0/24 maxlen: 24
212.212.25.0/24 maxlen: 24
217.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:49:c5:23:0e:a6:ff:fb:40:13:2b:7d:ac:db:87:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 10 02:04:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2536fa7d4a3d8b3ce36949b0baeb48dae2d12aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:71:d3:68:2a:75:2c:48:dc:13:32:5b:1d:6a:
fc:d9:ac:87:1d:83:d9:08:7b:15:e1:91:fa:79:67:
5d:5d:63:e3:3d:79:d1:5c:6d:e4:a0:0c:a8:ee:c2:
a6:b4:b5:26:d7:0c:b9:14:06:69:60:26:d0:fd:1b:
51:a8:3a:75:d5:d0:e6:13:d7:26:cd:30:63:89:e7:
40:5c:ad:bf:79:58:94:2d:9c:6c:89:6d:cb:40:1a:
73:3c:76:a3:e8:9b:53:db:a0:6a:50:bb:83:cf:00:
2a:e0:4b:9b:64:b2:06:94:a0:7b:ef:7f:c8:b7:d5:
8c:61:fc:6a:b7:32:a8:79:e0:9b:22:61:a5:30:ff:
9a:71:99:2c:b3:27:63:9d:2d:09:48:92:e8:14:47:
75:dc:12:50:52:25:93:63:fd:b2:39:e1:4d:d6:7e:
7e:e4:94:43:2c:84:39:d6:dd:a1:75:62:6e:33:73:
5f:55:99:2b:fb:57:25:f9:d2:ec:04:f4:1d:fb:bd:
39:de:ce:1b:eb:33:f8:80:ee:54:96:a8:9a:0f:f3:
6a:13:57:f5:fd:ab:ea:9c:bc:0e:52:7e:7a:79:6f:
5e:38:aa:26:ee:c8:6b:fc:56:56:ff:a7:24:02:d9:
39:a2:81:5f:a8:54:7e:65:08:3e:21:05:d7:8e:dd:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:6F:A7:D4:A3:D8:B3:CE:36:94:9B:0B:AE:B4:8D:AE:2D:12:AA
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4lNvp9Sj2LPONpSbC660ja4tEqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.173.0/24
82.109.98.0/24
82.109.151.0/24
82.109.242.0/24
87.83.232.0/24
87.84.188.0/24
87.84.232.0/24
87.85.97.0/24
194.242.157.0/24
212.212.25.0/24
217.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:96:d0:fa:bd:ae:25:db:16:c8:fb:85:6d:f5:58:7a:70:03:
0e:48:2c:f9:e1:20:98:da:67:c2:41:4f:3d:ce:be:92:a8:04:
90:0c:29:64:23:e5:30:b5:33:61:68:e3:7f:32:4d:2a:be:82:
8c:f2:e6:a3:8e:5c:b8:d3:b1:af:95:1e:df:d8:9c:fb:f4:45:
be:8d:2d:eb:5c:29:72:48:c4:72:57:67:b7:f9:26:17:47:89:
6a:83:a0:c0:ea:6a:75:a3:d8:93:0b:05:cc:94:af:35:d0:db:
91:be:ca:ce:d7:b0:f4:9a:ce:ff:a3:4a:d0:53:9d:84:da:5f:
02:4a:05:46:77:50:98:3f:58:af:4c:fe:b0:35:f2:38:3e:ff:
46:0b:ac:49:f0:b4:50:34:ce:32:dd:ba:dd:9f:b1:ae:c0:67:
fe:8d:b1:73:f0:18:23:43:45:b2:91:d7:0c:b8:9c:3b:fc:7e:
ef:c0:c1:37:6d:3d:6f:79:1f:af:d5:54:51:3e:7c:6d:c3:05:
12:01:a3:e8:ce:b7:be:d4:56:6f:50:d0:96:6a:49:79:d0:41:
d5:15:fe:e6:ef:28:65:8b:d5:d4:68:f9:e6:72:4f:57:6f:55:
d0:3f:f1:f7:b9:cf:4a:34:db:d8:39:93:75:7d:ce:78:c2:30:
f0:39:f5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:21 2026 by rpki-client