Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4s0Nh89qxCOJrMxH8qLvzbodNu8.roa
File: 4s0Nh89qxCOJrMxH8qLvzbodNu8.roa (raw, json)
Hash identifier: msN6nPNTmKt2aMkkvjw2IJL7uEi/fxcoVxTNHYLcEQ8=
Subject key identifier: E2:CD:0D:87:CF:6A:C4:23:89:AC:CC:47:F2:A2:EF:CD:BA:1D:36:EF
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F6DC5CA7256805C1BCC187338BC2AF64E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4s0Nh89qxCOJrMxH8qLvzbodNu8.roa
Signing time: Fri 17 Jul 2026 01:51:46 +0000
ROA not before: Fri 17 Jul 2026 01:51:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 82.108.61.0/24 maxlen: 24
82.108.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:c5:ca:72:56:80:5c:1b:cc:18:73:38:bc:2a:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 17 01:51:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2cd0d87cf6ac42389accc47f2a2efcdba1d36ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:d5:3b:94:6e:98:66:87:41:c1:a4:c1:a8:
a5:bd:85:79:f7:4b:0b:bc:92:ae:c9:28:8d:96:1e:
c8:41:38:6e:13:8d:6d:51:fb:7f:5f:5d:fa:6b:83:
a9:51:63:c1:4b:76:3a:55:a8:09:79:fd:c8:fe:61:
17:76:64:1c:9e:7f:fb:72:af:b5:67:cc:d7:b3:a1:
53:b8:09:64:d5:58:ea:9e:d4:e1:48:f2:2e:a9:61:
a3:3b:34:2d:ae:c5:f8:29:3a:8f:99:b0:1d:74:39:
ef:2b:14:98:49:e8:b3:b5:a7:89:8a:f6:72:91:31:
e0:6a:7d:23:85:b6:50:af:78:92:71:fb:6a:48:b9:
91:6d:06:f9:7d:12:05:c5:d4:41:5b:74:c6:43:b7:
2e:c1:d5:55:b1:29:75:cf:24:02:31:c0:1a:b0:5f:
a5:a4:4b:b0:ab:0f:39:1c:35:8a:de:59:b2:4e:2f:
ff:36:60:e4:38:4e:58:8c:3e:09:f4:84:33:22:96:
3f:44:ab:d2:f2:40:d3:01:61:a8:73:8d:f7:be:b6:
53:c2:a2:af:7b:42:76:6b:b5:6b:91:04:d5:99:43:
0b:36:9a:8e:89:3a:3f:e1:6c:ad:4e:84:fd:84:d5:
c7:5d:26:e5:e6:46:69:3e:09:bf:83:0e:83:1a:f2:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:0D:87:CF:6A:C4:23:89:AC:CC:47:F2:A2:EF:CD:BA:1D:36:EF
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/4s0Nh89qxCOJrMxH8qLvzbodNu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.61.0/24
82.108.73.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:70:b4:80:17:5d:48:94:9a:59:02:57:69:86:3f:3a:87:c1:
7a:e6:d4:a2:26:2e:16:86:26:66:63:c9:c3:88:75:01:e2:10:
ff:70:34:91:32:dd:a8:4d:d8:cb:58:53:d1:1f:1b:c7:6c:75:
d5:da:0a:e5:14:d7:6d:a6:6c:c8:02:4b:f1:e8:ed:64:22:08:
bf:72:b4:87:e4:0d:8b:69:38:71:d3:cb:ec:58:dc:10:67:48:
18:b0:4b:e4:52:c4:44:d1:7c:5c:2a:63:6d:ee:10:9b:66:ff:
80:4f:f3:64:4e:9f:af:dd:2b:f8:df:1f:b6:8b:75:43:f2:34:
77:f0:90:83:42:87:2c:6d:17:65:98:ba:99:80:94:3e:6b:70:
94:40:d1:08:01:00:61:ce:61:26:83:3a:3b:f1:d0:77:66:37:
05:f7:a6:e4:7a:13:76:6e:3c:56:82:1b:f6:c3:a2:2f:bd:14:
a5:9c:ce:29:98:67:75:89:bd:78:c1:f2:fa:50:c6:d6:f2:e1:
18:8c:26:e7:0d:6a:58:81:57:ba:65:2e:ce:3c:61:02:6e:1f:
2e:f8:59:d3:90:db:25:95:a1:6f:29:06:24:5c:75:f3:f3:16:
21:4b:c9:9a:34:52:2a:1d:16:a8:10:67:e0:5b:bf:ab:54:61:
c7:ff:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:39 2026 by rpki-client